Checking if PAM is used by login

David Resnick abunetta at gmail.com
Tue Jun 26 13:40:28 UTC 2007


Hi,

A configuration change is something that I will be looking out for, just as
long as I know that the config files are relevant.

-David

On 6/26/07, Tobias Schaefer <T.Schaefer at science-computing.de> wrote:
>
> Hi,
>
> > I don't follow you. PAM is not a service but a library (with plugins in
> > the form of shared objects - .so files). You don't simply disable PAM.
> > Take the /bin/login program - it is used for login at the console. Try
> to
> > run ldd /bin/login and see that this program is linked with libpam.so.
> > Then check /etc/pam.d/login to see how login is using PAM.
>
> on the other hand sshd could stop PAM authentication due to a
> configuration change. The library would still be linked in, but its code
> would no longer be executed. (The same could happen with apache and other
> programs.)
>
> You could configure a logging module into the PAM stack. Some 10 years ago
> I wrote such a module to debug PAM problems. The module is still available
> via http://www.rz.uni-hohenheim.de/~schaefer/linux/pam/index.html. But it
> probably won't compile out of the box since it was only tested with Linux
> distributions that have long since passed away.
>
>
> Tobias
> --
>
>    Tobias Schaefer                              Phone   07071-9457-406
>    science + computing ag                       FAX     07071-9457-411
>    Hagellocher Weg 73
>    D-72070 Tuebingen     Email: T.Schaefer at science-computing.de
>          WWW:  http://www.science-computing.de/
> --
> Vorstand/Board of Management:
> Dr. Bernd Finkbeiner, Dr. Florian Geyer,
> Dr. Roland Niemeier, Dr. Arno Steitz, Dr. Ingrid Zech
> Vorsitzender des Aufsichtsrats/
> Chairman of the Supervisory Board:
> Prof. Dr. Hanns Ruder
> Sitz/Registered Office: Tuebingen
> Registergericht/Registration Court: Stuttgart
> Registernummer/Commercial Register No.: HRB 382196
>
> _______________________________________________
> Pam-list mailing list
> Pam-list at redhat.com
> https://www.redhat.com/mailman/listinfo/pam-list
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pam-list/attachments/20070626/dbe0d76f/attachment.htm>


More information about the Pam-list mailing list