From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on sa.int.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-1.6 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.2.3 Message-ID: <47CD387C.3000406@nevod.ru> Date: Tue, 04 Mar 2008 16:54:36 +0500 From: =?UTF-8?B?0JTQvNC40YLRgNC40Lk=?= User-Agent: Thunderbird 2.0.0.6 (X11/20070804) MIME-Version: 1.0 To: ALT Linux Community general discussions Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Virus-Scanned: ClamAV using ClamSMTP Subject: [Comm] =?utf-8?b?0J3QsNGB0YLRgNC+0LnQutCwIFBBTS4gU1NIRCDQsNCy0YI=?= =?utf-8?b?0L7RgNC40LfQsNGG0LjRjyDQsiB3aW5iaW5k?= X-BeenThere: community@lists.altlinux.org X-Mailman-Version: 2.1.10b3 Precedence: list Reply-To: ALT Linux Community general discussions List-Id: ALT Linux Community general discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Mar 2008 11:54:40 -0000 Archived-At: List-Archive: List-Post: Настроил авторизацию для всех приложений через winbind всё работает кроме sshd. # cat /etc/pam.d/sshd #%PAM-1.0 auth required pam_userpass.so auth include system-auth-winbind auth required pam_nologin.so account include system-auth-winbind password include system-auth-winbind session include system-auth-winbind # cat /etc/pam.d/system-auth-winbind #%PAM-1.0 #auth required pam_securetty.so auth required pam_nologin.so auth sufficient pam_winbind.so auth include system-auth-use_first_pass account sufficient pam_winbind.so account include system-auth password sufficient pam_winbind.so password include system-auth # We use pam_mkhomedir to create home dirs for incoming domain users # Note used umask, it will result in rwxr-x--x access rights session required pam_mkhomedir.so skel=/etc/skel/ umask=0026 session include system-auth Вот лог /var/log/auth/all Mar 4 16:05:54 xx sshd[8402]: pam_winbind(sshd:auth): getting password (0x00000000) Mar 4 16:05:54 xx sshd[8402]: pam_winbind(sshd:auth): Could not retrieve user's password Mar 4 16:05:55 xx sshd[8402]: Failed password for guest from xxx.xxx.xxx.xxx port 55035 ssh2 Mar 4 16:05:55 xx sshd[8402]: Excess permission or bad ownership on file /var/log/btmp Mar 4 16:05:58 xx sshd[8402]: Failed password for guest from xxx.xxx.xxx.xxx port 55035 ssh2 Mar 4 16:05:58 xx sshd[8402]: Excess permission or bad ownership on file /var/log/btmp Mar 4 16:06:05 xx sshd[8402]: Failed password for guest from xxx.xxx.xxx.xxx port 55035 ssh2 Mar 4 16:06:05 xx sshd[8402]: Excess permission or bad ownership on file /var/log/btmp Mar 4 16:06:05 xx sshd[8405]: Connection closed by xxx.xxx.xxx.xxx Mar 4 16:07:55 xx sshd[8417]: PAM unable to dlopen(/lib64/security/pam_krb5.so) Mar 4 16:07:55 xx sshd[8417]: PAM [error: /lib64/security/pam_krb5.so: cannot open shared object file: No such file or directory] Настроил аналогичным образом через Керберос и всё работает. В чём проблема? # cat /etc/pam.d/sshd #%PAM-1.0 auth required pam_userpass.so auth include system-auth-krb5 auth required pam_nologin.so account include system-auth-krb5 password include system-auth-krb5 session include system-auth-krb5 # cat /etc/pam.d/system-auth-krb5 #%PAM-1.0 auth sufficient pam_krb5.so auth include system-auth-use_first_pass account sufficient pam_krb5.so account include system-auth password sufficient pam_krb5.so password include system-auth ### We use pam_mkhomedir to create home dirs for incoming domain users ### Note used umask, it will result in rwxr-x--x access rights session required pam_mkhomedir.so skel=/etc/skel/ umask=0026 session include system-auth