Hmm, I just considered that this is not at all a developpers question,
so I may have sent it to the wrong list....


  I'm sorry redhat guys, but your intentions may be noble, the
implementation is ehrm... let's say 'difficult'. I'm not an
inexperienced Unix user, but this PAM is costing me more time to figure
out what the heck is going on with it than it's worth. I hope somebody
can help me solve this trivial problem.

  I have two systems. One is IP masqueraded so not accessible from the
internet anyways, so I want to enable root rlogin from my other system,
I'd type 'rlogin lala -l root' and don't want to type in a password for
it.

  So I understand that I have to look in /etc/pam.d/rlogin. I see a lot
of lines in there and initially they make some sense to me. The first
line that says 'auth       required    /lib/security/pam_securetty.so'
is not required for me, unless I want to add a whole bunch of pty's to
/etc/securetty, right?

  The second line 'auth    sufficient
/lib/security/pam_rhosts_auth.so' should 1) for root ignore the
/etc/hosts.equiv 2) if root has own .rhosts, check if access is allowed.
Fine, so I don't even have to add an /etc/hosts.equiv. and a
/root/.rhosts with a line that says 'dutchie fredl' should be
sufficient, am I correct?

  All the other lines about nologin.so, crack, shadow etc. are all great
but not required for the purpose that I want IMHO.

  Okay, so I try it, and the syslog sayz:

Mar 29 00:43:54 tracy pam_rhosts_auth[4671]: allowed to fredl@dutchie as
root

  Cool!

  NOT! Immediately after, it says:

Mar 29 00:43:54 tracy pam_rhosts_auth[4671]: PAM authentication failed
for in.rlogind

  What's with this? I don't get it! I also tried it in combination with
a first line 'auth    required        /lib/security/pam_rootok.so',
tried HUP'ing the inetd, checked the tcp_wrapper config and all sorts of
other desperate attempts, but I can't really get what I'm trying to do
going. What am I doing wrong here?

Regards,
Fred Leeflang

-- 
To unsubscribe:
mail -s unsubscribe [EMAIL PROTECTED] < /dev/null



Reply via email to