LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Red Hat
User Name
Password
Red Hat This forum is for the discussion of Red Hat Linux.

Notices

Reply
 
Search this Thread
Old 11-09-2006, 02:34 PM   #1
newbie_ned
LQ Newbie
 
Registered: Sep 2006
Posts: 3

Rep: Reputation: 0
RHEL4 Upgrade 3 /etc/pam.d/common-account needed?


We are doing a security audit of the lab I work at and one of the problems I was given to solve was if the /etc/pam.d/common-account file needs to be in our pam.d setup. Also if so, what it should contain.

After researching a little it seems to me that this module will perform common checks on all accounts that log into the system, i.e. if the account is still valid, password has expired, and any other global checks / restrictions.

This leads me to believe that the file should be included and a good content would be:

'account required /lib/security/pam_unix.so'


I was wondering if anyone could agree with me or offer any suggestions.

Thank you in advance for any guidance.


ned
 
Old 11-09-2006, 06:17 PM   #2
Lenard
Senior Member
 
Registered: Dec 2005
Location: Indiana
Distribution: RHEL/CentOS/SL 5 i386 and x86_64 pata for IDE in use
Posts: 4,790

Rep: Reputation: 56
No, have a look at the /etc/pam.d/system-auth file for one (it's already there).
 
Old 11-13-2006, 02:01 PM   #3
newbie_ned
LQ Newbie
 
Registered: Sep 2006
Posts: 3

Original Poster
Rep: Reputation: 0
pam.d/system-auth redundancy?

Hmmm, I do see that 'account required /lib/security/pam_unix.so' is already in system-auth. So why do I see examples of people using /etc/pam.d/common-account? Isn't that a little redundant?

Thank you.
 
Old 11-13-2006, 02:48 PM   #4
Lenard
Senior Member
 
Registered: Dec 2005
Location: Indiana
Distribution: RHEL/CentOS/SL 5 i386 and x86_64 pata for IDE in use
Posts: 4,790

Rep: Reputation: 56
Depends, what examples are you talking about??
 
Old 11-13-2006, 03:16 PM   #5
newbie_ned
LQ Newbie
 
Registered: Sep 2006
Posts: 3

Original Poster
Rep: Reputation: 0
Sorry, I think I"m giving too much weight to the few examples I've seen on the web. A more relevant question would be:

When would a person use the /etc/pam.d/common-account if that person also has the /etc/pam.d/system-auth setup?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
what is the common problems to login to linux server RHEL4 danykallery Linux - Networking 1 10-10-2006 10:36 AM
PAM assistance needed pvs Linux - Security 4 03-16-2006 11:20 AM
Common use of NFS, SAMBA, NIS, LDAP, PAM eve Linux - Networking 4 12-12-2005 09:58 AM
Can samba3-common be used by itself or is server also needed? ryedunn Linux - Software 1 08-31-2005 07:25 PM
PAM rejected by account configuration[12] papa32 Linux - Security 3 12-10-2002 08:42 PM


All times are GMT -5. The time now is 03:42 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration