You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@knox.apache.org by "Krishna Pandey (JIRA)" <ji...@apache.org> on 2017/03/28 10:28:41 UTC

[jira] [Updated] (KNOX-915) Adding example PAM config for Ubuntu in Knox User Guide under PAM Based Authentication section

     [ https://issues.apache.org/jira/browse/KNOX-915?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Krishna Pandey updated KNOX-915:
--------------------------------
    Status: Patch Available  (was: Open)

We need to have below entries in /etc/pam.d/login file in Ubuntu 16.04 system. Default entries in fresh-installed system was not working for me. This should also work for other versions of Ubuntu as well.

{noformat}
#%PAM-1.0

auth       required     pam_sepermit.so
# pam_selinux.so close should be the first session rule
session    required     pam_selinux.so close
session    required     pam_loginuid.so
# pam_selinux.so open should only be followed by sessions to be executed in the user context
session    required     pam_selinux.so open env_params
session    optional     pam_keyinit.so force revoke

session    required     pam_env.so user_readenv=1 envfile=/etc/default/locale
@include password-auth

{noformat}

> Adding example PAM config for Ubuntu in Knox User Guide under PAM Based Authentication section
> ----------------------------------------------------------------------------------------------
>
>                 Key: KNOX-915
>                 URL: https://issues.apache.org/jira/browse/KNOX-915
>             Project: Apache Knox
>          Issue Type: Improvement
>          Components: KnoxCLI
>    Affects Versions: 0.11.0
>         Environment: Ubuntu-16.04-64bit
>            Reporter: Krishna Pandey
>            Priority: Minor
>              Labels: documentation
>
> Current documentation covers an example of PAM configuration on OSX. It will be useful if we can add at least one linux variant example to help deploy Knox in Linux environment configured for PAM based authentication.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)