LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 05-20-2007, 07:47 AM   #1
Brad.Scalio@noaa.gov
Member
 
Registered: Jan 2007
Location: Washington DC
Distribution: RedHat & spins ... Fedora, CentOS, Mandriva
Posts: 82

Rep: Reputation: 15
pam_timestamp.so caching question


Greetings

I have to admit I am a little annoyed I can't figure this one out, nor find anything on google or forum search...here is my question:

I am trying to allow a user caching of authentication for using system-config-* (redhat-config-*) application GUIs...I tried just entering:

Code:

/etc/pam.d/config-util

auth     sufficient     /lib/security/$ISA/pam_timestamp.so
with this I get no mention of timestamp anything in secure logfiles, nor a creation of a timestamp data file in /var/run/sudo/$USER

If I put:

Code:
auth     sufficient     /lib/security/$ISA/pam_timestamp.so
session  optional       /lib/security/$ISA/pam_timestamp.so
I get it saying it updated the timestamp file, but if I immediately try again, I get prompted for password...

Has anyone implemented this, and can post their syntax in here ... also, can I just add these flags to config-util, thus allowing it for all system-config-* utils, or does it have to be inside the pam file for each utility? Or does it need to be somewhere else...

I appreciate the help -- and if this is somewhere else I apologize, but I have been googling for weeks here and there, and having found jack

THANKS

brad
 
Old 05-30-2007, 03:57 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
AFAIK timestamp is used by default for interactive apps like the redhat-config-* (or equiv named) tools, so copying one PAM stack config should do (maybe there's other deps?). There's sposed to be a /sbin/pam_timestamp_check, but that didn't return nothing but errval 7 for me, spose it ain't working(?). If you OTOH enable the args "debug" and "verbose" you'll have output in /var/log/secure, which worked for me showing the timestamp dir and file used.
 
Old 05-31-2007, 05:51 AM   #3
Brad.Scalio@noaa.gov
Member
 
Registered: Jan 2007
Location: Washington DC
Distribution: RedHat & spins ... Fedora, CentOS, Mandriva
Posts: 82

Original Poster
Rep: Reputation: 15
thanks for the reply

the feature works as design for a gnome desktop on the same computer, so I haven't had time to debug it much yet for kde, all being said, it isn't that important, and adding the user to the wheel group is just as well, I can never remember the location in the menu, thank god for tab-complete

thanks again
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Caching Only name SErver shipon_97 Linux - Networking 1 02-27-2006 01:53 AM
bind caching dns question FunkyRes Linux - Software 4 05-04-2005 01:33 PM
Caching Problem atko Linux - Networking 1 03-03-2005 06:49 AM
Caching in C++ coolguy_iiit Programming 0 12-28-2004 10:58 PM
DNS is not caching Mike Healan Mandriva 4 12-24-2004 08:53 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 08:48 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration