LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 04-20-2010, 04:59 PM   #1
socrbird
LQ Newbie
 
Registered: May 2008
Posts: 5

Rep: Reputation: 0
system-auth configuration


I'm hoping someone can help me out. I am new to pam.d config. I made configurations changes to /etc/pam.d/system-auth and /etc/pam.d/login. When these files are configured the way they are, I can't login and/or I can't login in the GUI interface and a terminal. Can someone help clarify the pam.d stuff?

Contents of /etc/pam.d/login
Code:
 #%PAM-1.0
#line added per security guide
auth	   required	pam_stack.so service=system-auth
auth [user_unknown=ignore success=ok ignore=ignore default=bad] pam_securetty.so
auth       include      system-auth
account    required     pam_nologin.so
account    include      system-auth
password   include      system-auth
# pam_selinux.so close should be the first session rule
session    required     pam_selinux.so close
session    include      system-auth
session    required     pam_loginuid.so
session    optional     pam_console.so
# pam_selinux.so open should only be followed by sessions to be executed in the 
user context
session    required     pam_selinux.so open
session    optional     pam_keyinit.so force revoke
Contents of /etc/pam.d/system-auth
Code:
auth        required      pam_env.so
auth        required      pam_tally.so per_user deny=3
auth        sufficient    pam_unix.so try_first_pass 
auth        required      pam_deny.so

account     required      pam_tally.so
account     required      pam_unix.so
account     sufficient    pam_succeed_if.so uid < 500 quiet
account     required      pam_permit.so

password    requisite     pam_cracklib.so minlen=8 ucredit=-1 lcredit=-1 dcredit=-1 ocredit=-1 retry=3
password    sufficient    pam_unix.so nullok use_authtok md5 shadow remember=24 
password    required      pam_deny.so

session	    optional	  pam_keyinit.so revoke
session     required      pam_limits.so
session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
session     required      pam_unix.so
 
Old 04-20-2010, 06:46 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,331
Blog Entries: 55

Rep: Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530Reputation: 3530
Quote:
Originally Posted by socrbird View Post
I can't login and/or I can't login in the GUI interface and a terminal.
I think it would be easier and more hands-on if you (re)boot into runlevel 1 then check syslog for for reasons for login failure? If there's PAM failures it'll show in /var/log/secure and AVC (SE Linux) ones will be in /var/log/messages and or /var/log/audit/audit.log.
 
Old 04-27-2010, 12:00 PM   #3
socrbird
LQ Newbie
 
Registered: May 2008
Posts: 5

Original Poster
Rep: Reputation: 0
There's nothing in the log. I can't even change to another virtual terminal CTRL-ALT-F(1-6). I can only get to the Gui (F7). Any ideas why I can't even navigate to it?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Password Complexity after changing the /etc/pam.d/system-auth the system dies kprakashc Linux - Newbie 0 08-27-2008 10:50 PM
root and system-auth artie_effim Linux - Security 1 03-16-2006 01:55 AM
Exim4 AUTH configuration redsky Debian 0 07-26-2005 10:46 PM
pam.d/system-auth and LDAP? SheldonPlankton Linux - General 0 04-28-2005 02:11 PM
mod auth mysql configuration dpp777 Linux - Software 0 09-07-2004 03:17 PM


All times are GMT -5. The time now is 06:55 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration