Getting PAM to work

rmg · 04-06-2006, 03:54 PM

I've got Slackware 10.2.
I installed the PAM 0.99.3 package from linuxpackages.org.
But it dind't install itselt as described in the man pages.
There should be a config dir /etc/pam.d/ but instead there is something /etc/pam and still the content isn't what was described in the manual pages.
The the /lib/security/ dir is in /usr/lib/pam/

I'd like to get my virtual users working for vsftpd, but I can't beacaus of the strange installation

I was supposed to add the next two lines to /etc/pam.d/ftp
auth required /lib/security/pam_userdb.so db=/etc/vsftpd/accounts
account required /lib/security/pam_userdb.so db=/etc/vsftpd/accounts

Obviously they don't work. I tried to change the pam_userdb file path where it is located in the current PAM install, but no results.

Does anyone have experience with this PAM package.

Big thanks in advance for helping me
rmg

unSpawn · 04-07-2006, 04:28 AM

If you read man pam.conf from the pkg it basically says /etc/pam.conf acts similar to /etc/pam.d/service_name. You'll have to prefix entries with service_name in pam.conf. Choosing for using /etc/pam.d overrides /etc/pam.conf. Where the modules are located isn't important AFAIK as long as anything that needs it can find them. Also ldd your vsftpd binary to see if it's compiled with PAM and can locate the necessary libs.

* BTW, this isn't a security question but a Slackware-specific on AFAIK, so I'll move ith there. Also it's linuxpackages.net.

rmg · 04-08-2006, 05:22 AM

Sry for misspelling the address.

I quite don't know how to ldd the vsftpd, but I'll try to find out.

unSpawn · 04-08-2006, 02:11 PM

I quite don't know how to ldd the vsftpd, but I'll try to find out.
Try "ldd /path/to/vsftpd|grep -i pam". It should show a line with /path/to/libpam.so.

rmg · 04-09-2006, 02:50 AM

Aha, thanks. It didn't find any lines with pam in it, so this means that my vsftpd was compiled without pam support?
ldd found this:

Code:

libnsl.so.1 => /lib/libnsl.so.1 (0x4001c000)
libcrypt.so.1 => /lib/libcrypt.so.1 (0x40032000)
libdl.so.2 => /lib/libdl.so.2 (0x40061000)
libresolv.so.2 => /lib/libresolv.so.2 (0x40065000)
libutil.so.1 => /lib/libutil.so.1 (0x40078000)
libssl.so.0 => /usr/lib/libssl.so.0 (0x4007c000)
libcrypto.so.0 => /usr/lib/libcrypto.so.0 (0x400ad000)
libc.so.6 => /lib/libc.so.6 (0x401ae000)
/lib/ld-linux.so.2 (0x40000000)

unSpawn · 04-09-2006, 05:34 AM

so this means that my vsftpd was compiled without pam support?
That is correct. Easy fixed though, just compile from source.