Problem with HP-SMH and RH4 (authentication failure)

[dark-sun]

Hello,

I have an old RH4 Linux and I can't bring this server into our HP-SIM.

Server is discovered, but when I try to login to the SMH, the vaild login credentials are not accepted.

I try root/password =>Username and password do not match

But local on the shell it works correct, so password is fine!

In the messages I see:

...

Jan 23 16:11:58 <HOSTNAME sysmgthp(pam_unix)[26245]: authentication failure; logname= uid=1223 euid=1223 tty= ruser= rhost=  user=root

...

uid1223 is the hpsmh user

Maybe something in the /etc/pam.d is wrong, login -file? su -file?

I have no other RH4 system to verify.

Not shure, what I have to change, because some time ago (on other serer) I made some changes there and no one can login; also not locally on the console :-(

[Matti_Kurkela]

You attached the PAM configuration files for "login" and "su". These files look pretty much standard... but these refer to a third file, namely /etc/pam.d/system-auth.

Besides, the message indicates that "sysmgthp" is calling PAM directly, so you should be looking at either the SMH-specific PAM configuration file /etc/pam.d/sysmgthp or /etc/pam.d/other, which is used by all PAM-aware applications that don't have a PAM configuration file of their own.

In RHEL4, the /etc/pam.d/other file is set to deny everything by default, so if the sysmgthp PAM configuration file is not correct, the authentication is pretty much guaranteed to fail.

The default sysmgthp PAM config from one of our old systems, with SMH version 2.1.5:

#%PAM-1.0
auth       required     pam_stack.so service=system-auth
auth       required     pam_nologin.so
account    required     pam_stack.so service=system-auth
password   required     pam_stack.so service=system-auth
# pam_selinux.so close should be the first session rule
session    required     pam_selinux.so close
session    required     pam_stack.so service=system-auth
session    required     pam_loginuid.so
# pam_selinux.so open should be the last session rule
session    required     pam_selinux.so multiple open