System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

Problem with HP-SMH and RH4 (authentication failure)

 
dark-sun
Frequent Advisor

Problem with HP-SMH and RH4 (authentication failure)

Hello,

I have an old RH4 Linux and I can't bring this server into our HP-SIM.

Server is discovered, but when I try to login to the SMH, the vaild login credentials are not accepted.

 

I try root/password =>Username and password do not match

But local on the shell it works correct, so password is fine!

 

In the messages I see:

...

Jan 23 16:11:58 <HOSTNAME sysmgthp(pam_unix)[26245]: authentication failure; logname= uid=1223 euid=1223 tty= ruser= rhost=  user=root

...

uid1223 is the hpsmh user

 

Maybe something in the /etc/pam.d is wrong, login -file? su -file?

I have no other RH4 system to verify.

 

Not shure, what I have to change, because some time ago (on other serer) I made some changes there and no one can login; also not locally on the console :-(

1 REPLY
Matti_Kurkela
Honored Contributor

Re: Problem with HP-SMH and RH4 (authentication failure)

You attached the PAM configuration files for "login" and "su". These files look pretty much standard... but these refer to a third file, namely /etc/pam.d/system-auth.

 

Besides, the message indicates that "sysmgthp" is calling PAM directly, so you should be looking at either the SMH-specific PAM configuration file /etc/pam.d/sysmgthp or /etc/pam.d/other, which is used by all PAM-aware applications that don't have a PAM configuration file of their own.

 

In RHEL4, the /etc/pam.d/other file is set to deny everything by default, so if the sysmgthp PAM configuration file is not correct, the authentication is pretty much guaranteed to fail.

 

The default sysmgthp PAM config from one of our old systems, with SMH version 2.1.5:

#%PAM-1.0
auth       required     pam_stack.so service=system-auth
auth       required     pam_nologin.so
account    required     pam_stack.so service=system-auth
password   required     pam_stack.so service=system-auth
# pam_selinux.so close should be the first session rule
session    required     pam_selinux.so close
session    required     pam_stack.so service=system-auth
session    required     pam_loginuid.so
# pam_selinux.so open should be the last session rule
session    required     pam_selinux.so multiple open

 

MK