ssh and pam

From: Internet Protocol (ipv6@techie.com)
Date: Fri Feb 07 2003 - 14:27:14 EST


Hello,

Here is a quick synaposis:
I can scp from box A to box B
I cannot scp from box A to box C
All files appear identical on B and C

All 3 are running the same OS:
SunOS host_A 5.6 Generic_105181-30 sun4u sparc SUNW,Ultra-Enterprise-10000

All 3 are running the same versions of SSH:
OpenSSH_3.0.2p1, SSH protocols 1.5/2.0, OpenSSL 0x0090603f

.ssh/authorized_keys are setup correctly on all 3 boxes

The following was added to the /etc/pam.conf on all 3 boxes:
sshd auth required /usr/lib/security/pam_unix.so.1
sshd auth required /usr/lib/security/pam_suonly.so.1 suuser

The /usr/lib/security/pam_suonly.so.1 is identical, perms, size, etc,
on all 3 boxes

On all 3 boxes the following entry is the same in the /etc/group:
suuser::1004:testusr

The whole purpose was that testusr could NOT be loged into directly,
and could only be su'd into from another user, but could still scp
files from B and C back to A using authorized keys.

HostA:$ /usr/local/bin/scp hostB:/tmp/file file_B
file 100% |*****************************| 4092
00:00
HostA:$ /usr/local/bin/scp hostC:/tmp/file file_C
Connection closed by 10.1.1.101

TIA,
William

-- 
__________________________________________________________
Sign-up for your own FREE Personalized E-mail at Mail.com
http://www.mail.com/?sr=signup
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers


This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:25:47 EDT