[3406] in RedHat Linux List
Re: I broke my PAM
daemon@ATHENA.MIT.EDU (gregory j pryzby)
Fri Nov 8 13:49:27 1996
Date: Fri, 8 Nov 1996 13:25:34 -0500 (EST)
From: gregory j pryzby <gjp@sddi.com>
To: redhat-list@redhat.com
In-Reply-To: <199611081724.MAA10815@tristan.redhat.com>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
On Fri, 8 Nov 1996, Michael K. Johnson wrote:
> gregory j pryzby writes:
> >Needless to say, I have hosed PAM. What can I do or How do I get PAM
> >back working? I am not against, removing and installign anew the
> >services that require/use PAM...
>
> OK, here's how to re-initialize PAM. log in as root, and trim out all
> the enties in the /etc/pam.conf file *except* the DEFAULT and OTHER
> entries. Your /etc/pam.conf should now look about like this:
>
> # The default behavior for services not explicitly listed here:
> OTHER auth required /lib/security/pam_deny.so
> OTHER account required /lib/security/pam_deny.so
> OTHER password required /lib/security/pam_deny.so
> OTHER session required /lib/security/pam_deny.so
>
> # The default behavior copied when ADDING NEW SERVICES which
> # do not have special requirements (like checking rhosts files):
> DEFAULT auth required /lib/security/pam_unix_auth.so
> DEFAULT account required /lib/security/pam_unix_acct.so
> # Do not add more than one password entry unless you know what you
> # are doing!
> DEFAULT password required /lib/security/pam_unix_passwd.so
> DEFAULT session required /lib/security/pam_unix_session.so
>
> Now re-install the pam rpm (just in case something was screwed up
> somehow that I haven't figured out) with
> rpm -Uvh --force <path-to-pam-rpm>
>
> Now re-run that script you mention:
> rpm --qf '%{POSTIN}' $(rpm -q --whatrequires pamconfig) | sh -x
>
> At this point, PAM will be reinitialized. Please let me know
> if this does not solve your problem.
Well, the steps worked with an error or warning.
HOWEVER, after doing this, I tried
telnet mymachine
login: vaild_user
Password: bogus ramdom keystrokes
and I logged in.
--
gregory j pryzby (greg) | gjp@sddi.com
Founded Linux Users Group of Manassas | lugman@wauug.erols.com
Check out the Home Pages | http://wauug.erols.com/lugman.html
Love animals-- don't eat them! | http://www.sddi.com/gjp.html
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null