topic Re: PAM sshd problem in Operating System - HP-UX

PAM sshd problem

Andy Kosela — Mon, 25 May 2009 15:37:59 GMT

sshd[1015]: load_modules: can not open module /usr/lib/security/libpam_unix.1

# ll /usr/lib/security/libpam_unix.1
-r-xr-xr-x 1 root sys 200704 Mar 11 2004 /usr/lib/security/libpam_unix.1*

Any suggestions?

Re: PAM sshd problem

Andy Kosela — Mon, 25 May 2009 15:59:09 GMT

For some reason my pam.conf looks like this:

#
# PAM configuration
#
# Authentication management
#
login auth required /usr/lib/security/libpam_unix.1
su auth required /usr/lib/security/libpam_unix.1
dtlogin auth required /usr/lib/security/libpam_unix.1
dtaction auth required /usr/lib/security/libpam_unix.1
ftp auth required /usr/lib/security/libpam_unix.1
OTHER auth required /usr/lib/security/libpam_unix.1
#
# Account management
#
login account required /usr/lib/security/libpam_unix.1
su account required /usr/lib/security/libpam_unix.1
dtlogin account required /usr/lib/security/libpam_unix.1
dtaction account required /usr/lib/security/libpam_unix.1
ftp account required /usr/lib/security/libpam_unix.1
#
OTHER account required /usr/lib/security/libpam_unix.1
#
# Session management
#
login session required /usr/lib/security/libpam_unix.1
dtlogin session required /usr/lib/security/libpam_unix.1
dtaction session required /usr/lib/security/libpam_unix.1
OTHER session required /usr/lib/security/libpam_unix.1
#
# Password management
#
login password required /usr/lib/security/libpam_unix.1
passwd password required /usr/lib/security/libpam_unix.1
dtlogin password required /usr/lib/security/libpam_unix.1
dtaction password required /usr/lib/security/libpam_unix.1
OTHER password required /usr/lib/security/libpam_unix.1

Notice absolute paths to libpam_unix.1 which is a 32-bit library.
When I changed path to just libpam_unix.1 ssh started working because it resolved $ISA.

The question - why on 64-bit HP-UX I got this strange looking pam.conf?

Re: PAM sshd problem

Steven E. Protter — Mon, 25 May 2009 16:56:25 GMT

Shalom,

Check for the presence of the file.

Adjust your configuration file to what is there.

SEP

Re: PAM sshd problem

Andy Kosela — Mon, 25 May 2009 17:30:57 GMT

OK, I already adjusted my /etc/pam.conf, but why I ended with this /etc/pam.conf in the first place? Is it default on HP-UX 11.23?

Re: PAM sshd problem

Dennis Handly — Mon, 25 May 2009 23:20:28 GMT

>Notice absolute paths to libpam_unix.1 which is a 32-bit library.

What's wrong with that? Are you using PAM in a 64 bit application?

>When I changed path to just libpam_unix.1 ssh started working because it resolved $ISA.

What do you mean by $ISA?

>why on 64-bit HP-UX I got this strange looking pam.conf?

Why are you mentioning 64 bit kernels? All of them are 64 bit on 11.23.

Re: PAM sshd problem

Matti_Kurkela — Tue, 26 May 2009 05:50:52 GMT

A copy of the factory default pam.conf should be available in /usr/newconfig/etc/pam.conf.

If that has explicit paths too, you may have a deeply customized HP-UX installation. If not, only someone who knows the detailed history of that particular machine might know why the explicit paths might be added to /etc/pam.conf.

Perhaps a customized pam.conf was installed as a part of some "site standard configuration" package, or something like that?

MK