PAM configuration

[ranji_1]

Hi,

We are developing a PAM module for our HP-UX server to route the queries to RADIUS server.

We have compiled the PAM module and created a library and have changed the entry for "login" in /etc/pam.conf

However, when we attempt the login, its throwing an error in syslog as follows

load_modules: can not open module /usr/lib/security/libpamnew.sl

Can anyone help us to identify what could be the problem?

Thanks,

[Ivan Krastev]

Check permissions on file - they should be 555.
See also this thread - http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1055081


regards,
ivan

[ranji_1]

Thanks, but permissions are perfectly fine.

[ranji_1]

Hi Ivan,
Please do let me know in case you could suggest something else.

Thanks a lot,

[Keith Schauer]

I've found running tusc on the process to be helpful as it should show you exactly what return code you're getting on the fopen. Turning on pam_debug may also help.

[bandi_1]

Provide us with the output of the following on your host.

file /usr/lib/security/libpamnew.sl
file `which login`
chatr /usr/lib/security/libpamnew.sl
ldd /usr/lib/security/libpamnew.sl ( make sure that this doesn't fail)

Does /usr/lib/security/libpamnew.sl or its dependent libraries have thread local storage?

Are you using PAM-Radius(on HP-UX) to route the queries to RADIUS server?