PAM module error

[Logu_2]

I am writting a pam module for hpux-11.11. I have configured the module in the /etc/pam.conf for login and sshd pam services. When i try to login i get the following error debug out put and the module is not getting loaded.
--------------------------------------
PAM: load_modules: /usr/lib/security/libpam_flush.1
PAM: open_module: /usr/lib/security/libpam_flush.1 failed: Unresolved external
PAM: load_modules: can not open module /usr/lib/security/libpam_flush.1
PAM: load_modules: pam_sm_acct_mgmt() missing
--------------------------------------

Can someone explain me why this error occurs and how to debug the problem.

[Kent Ostby]

Check permissions on the module and make sure it's owner group is root/sys .

This can cause these problems.

Obviously, double check spelling of the module in question and make sure it matches in the place its defined and called (this was one of my old bugs when I'd code .. I'd use "mgmt" one place and then try to call it with "mgt" or something like that).

[Kent Ostby]

As far as debugging PAM in general, you used to be able to do something like this (this was testing some dtlogin stuff):

# touch /etc/pam_debug; chmod 666 /etc/pam_debug
# edit /etc/pam.conf
dtlogin auth required /usr/lib/security/libpam_unix.1 debug
dtlogin account required /usr/lib/security/libpam_unix.1 debug
dtlogin session required /usr/lib/security/libpam_unix.1 debug
dtlogin password required /usr/lib/security/libpam_unix.1 debug
# edit /etc/syslog.conf
*.debug /var/adm/syslog/debug.log

Then when done, do:

- rm /etc/pam_debug; /usr/dt/config/dtrc.d/80_dtlogin_debug
- edit /etc/syslog.conf; remove *.debug
- rm /var/dt/*debug* /var/adm/syslog/debug.log

Not sure if the exact filenames would apply to you.