Contents of /etc/pam.d/sshd and /etc/pam.d/system-auth is as follows
bash-3.2# cat /etc/pam.d/system-auth
#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth required pam_env.so
auth sufficient pam_unix.so nullok try_first_pass
auth requisite pam_succeed_if.so uid >= 500 quiet
auth sufficient /lib64/security/pam_sss.so use_first_pass
auth required pam_deny.so
account required pam_unix.so
account sufficient pam_localuser.so
account sufficient pam_succeed_if.so uid < 500 quiet
account [default=bad success=ok user_unknown=ignore] /lib64/security/pam_sss.so
account required pam_permit.so
password requisite pam_cracklib.so try_first_pass retry=3 type=
password sufficient pam_unix.so md5 shadow nullok try_first_pass use_authtok
password sufficient /lib64/security/pam_sss.so use_authtok
password required pam_deny.so
session required pam_mkhomedir.so umask=0022 skel=/etc/skel/
session optional pam_keyinit.so revoke
session required pam_limits.so
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
session sufficient /lib64/security/pam_sss.so
session required pam_unix.so
bash-3.2#
bash-3.2# cat /etc/pam.d/sshd
#%PAM-1.0
auth include system-auth
account required pam_nologin.so
account include system-auth
password include system-auth
session optional pam_keyinit.so force revoke
session include system-auth
session required pam_loginuid.so
bash-3.2#
And there is no file on the system with name /etc/pam.d/password-auth I guess this is present in RHEL 6 and not in RHEL 5.5
Thanks
On Fri, Nov 11, 2011 at 02:48:40PM +0530, Nitesh Mehare wrote:> I tried the modifying sssd.confA to useA simple_allow_groups = idsldap
> Jakub,
> Still it is not working.One thing I would like to ask .is my configuration> failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=9.118.25.17A
> correct in system-auth and nsswitch.conf file?
> Am i missing something.
> Also one more thing I have noticed in /var/log/secure log file
>
> Nov 11 13:34:58 bagira sshd[30879]: Address 9.118.25.17 maps to
> nitesh.in.ibm.com, but this does not map back to the address - POSSIBLE
> BREAK-IN ATTEMPT!
> Nov 11 13:35:00 bagira sshd[30879]: pam_unix(sshd:auth): authentication
> user=nitback1Does your /etc/pam.d/sshd include password-auth or system-auth? Can you
> Nov 11 13:35:02 bagira sshd[30879]: Failed password for nitback1 from
> 9.118.25.17 port 4300 ssh2
>
paste the file that it includes?
_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel