You are not logged in.
Pages: 1
Hello,
have anyone successfully configured pam_ssh? Preferably together with pam_mount? Would he be so kind to share his configuration? I tried something like the following (/etc/pam.d/login) but it didn't work:
#%PAM-1.0
auth required pam_securetty.so
auth requisite pam_nologin.so
auth optional pam_mount.so
auth sufficient pam_ssh.so debug use_first_pass keyfiles=nik-key
auth sufficient pam_unix.so use_first_pass nullok
#auth required pam_tally.so onerr=succeed file=/var/log/faillog
# use this to lockout accounts for 10 minutes after 3 failed attempts
auth required pam_tally.so deny=2 unlock_time=600 onerr=succeed file=/var/log/faillog
account required pam_access.so
account required pam_time.so
account required pam_unix.so
session required pam_unix.so
session required pam_env.so
session required pam_motd.so
session required pam_limits.so
session sufficient pam_ssh.so
session optional pam_mount.so
session optional pam_mail.so dir=/var/spool/mail standard
session optional pam_lastlog.so
session optional pam_loginuid.so
-session optional pam_ck_connector.so nox11I also tried having the auths in different order, but no good. This combination at least loged me in, but didn't unlock the keyfile.
Thanx for sugestions.
"Although the masters make the rules
For the wise men and the fools
I got nothing, Ma, to live up to."
Offline
I use pam_ssh with slim. Here is my /etc/pam.d/slim:
#%PAM-1.0
auth requisite pam_nologin.so
auth required pam_env.so
auth required pam_unix.so
account required pam_unix.so
password required pam_unix.so
session required pam_limits.so
session required pam_unix.so
session optional pam_loginuid.so
session optional pam_ck_connector.so
auth sufficient pam_ssh.so use_first_pass
session sufficient pam_ssh.soOffline
Thanx, I'll give it a try tomorrow.
"Although the masters make the rules
For the wise men and the fools
I got nothing, Ma, to live up to."
Offline
Pages: 1