topic PAM module error in Operating System - HP-UX

PAM module error

Logu_2 — Mon, 21 Mar 2005 04:43:47 GMT

I am writting a pam module for hpux-11.11. I have configured the module in the /etc/pam.conf for login and sshd pam services. When i try to login i get the following error debug out put and the module is not getting loaded.
--------------------------------------
PAM: load_modules: /usr/lib/security/libpam_flush.1
PAM: open_module: /usr/lib/security/libpam_flush.1 failed: Unresolved external
PAM: load_modules: can not open module /usr/lib/security/libpam_flush.1
PAM: load_modules: pam_sm_acct_mgmt() missing
--------------------------------------

Can someone explain me why this error occurs and how to debug the problem.

Re: PAM module error

Kent Ostby — Wed, 23 Mar 2005 10:53:22 GMT

Check permissions on the module and make sure it's owner group is root/sys .

This can cause these problems.

Obviously, double check spelling of the module in question and make sure it matches in the place its defined and called (this was one of my old bugs when I'd code .. I'd use "mgmt" one place and then try to call it with "mgt" or something like that).

Re: PAM module error

Kent Ostby — Wed, 23 Mar 2005 10:55:18 GMT

As far as debugging PAM in general, you used to be able to do something like this (this was testing some dtlogin stuff):

# touch /etc/pam_debug; chmod 666 /etc/pam_debug
# edit /etc/pam.conf
dtlogin auth required /usr/lib/security/libpam_unix.1 debug
dtlogin account required /usr/lib/security/libpam_unix.1 debug
dtlogin session required /usr/lib/security/libpam_unix.1 debug
dtlogin password required /usr/lib/security/libpam_unix.1 debug
# edit /etc/syslog.conf
*.debug /var/adm/syslog/debug.log

Then when done, do:

- rm /etc/pam_debug; /usr/dt/config/dtrc.d/80_dtlogin_debug
- edit /etc/syslog.conf; remove *.debug
- rm /var/dt/*debug* /var/adm/syslog/debug.log

Not sure if the exact filenames would apply to you.