Re: SSH +PAM on Solaris 8

From: Philip Brown (phil+s3_at_bolthole.no-bots.com)
Date: 10/22/03


Date: Wed, 22 Oct 2003 20:00:25 GMT

On 20 Oct 2003 14:43:34 -0700, dwlepage@yahoo.com wrote:
>Has anyone else had problems with OpenSSH 3.7.1p2 with PAM
>authentication on Solaris 8 (or 9 for that matter)?
>
>After attempting to install openssh on Solaris using gcc and binutils
>with the --with-pam option, my authentications to PAM never seem to
>even attempt the security module I use (SafeWord).
>(I have to add the service name 'sshd' to /etc/pam.conf and point it
>at this module):
>sshd required /usr/lib/security/pam_safeword.so.1
>

Note that you have to both "enable pam" in sshd_config, AND set
UsePrivilegeSeparation NO

to have pam work with openssh and solaris

-- 
  http://www.blastwave.org/ for solaris pre-packaged binaries with pkg-get
    Organized by the author of pkg-get
[Trim the no-bots from my address to reply to me by email!]
         S.1618 http://thomas.loc.gov/cgi-bin/bdquery/z?d105:SN01618:@@@D
                            http://www.spamlaws.com/state/ca1.html


Relevant Pages

  • Re: solaris password aging problem
    ... > Is password aging supported with openssh using pam on solaris? ... > concerned that I will not be able to add cron entries because I'm using ...
    (comp.security.ssh)
  • Re: SSH +PAM on Solaris 8
    ... > Has anyone else had problems with OpenSSH 3.7.1p2 with PAM ... > even attempt the security module I use. ... You can switch back to openssh 3.6.x with a security patch backport. ...
    (comp.unix.solaris)
  • Re: Openssh, kerberos and Solaris 10
    ... if the problem is the Solaris 10 sshd is not saving ... other is used by pam :-( The man pages are not consistent ... rather live with this then to have to build OpenSSH and MIT Kerberos ... Solaris 10's sshd uses PAM, ...
    (comp.protocols.kerberos)
  • Sun statement on the OpenSSH Remote Challenge Vulnerability
    ... The version of OpenSSH that is in Solaris 9 is not beleived to be ... Sun is in the process of producing a patch for Solaris 9. ... release - Sun is working with the OpenSSH devlopers on the PAM problems ...
    (Focus-SUN)
  • Sun statement on the OpenSSH Remote Challenge Vulnerability
    ... The version of OpenSSH that is in Solaris 9 is not beleived to be ... Sun is in the process of producing a patch for Solaris 9. ... release - Sun is working with the OpenSSH devlopers on the PAM problems ...
    (Bugtraq)