[ 
https://issues.apache.org/jira/browse/KNOX-915?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Krishna Pandey updated KNOX-915:
--------------------------------
    Status: Patch Available  (was: Open)

We need to have below entries in /etc/pam.d/login file in Ubuntu 16.04 system. 
Default entries in fresh-installed system was not working for me. This should 
also work for other versions of Ubuntu as well.

{noformat}
#%PAM-1.0

auth       required     pam_sepermit.so
# pam_selinux.so close should be the first session rule
session    required     pam_selinux.so close
session    required     pam_loginuid.so
# pam_selinux.so open should only be followed by sessions to be executed in the 
user context
session    required     pam_selinux.so open env_params
session    optional     pam_keyinit.so force revoke

session    required     pam_env.so user_readenv=1 envfile=/etc/default/locale
@include password-auth

{noformat}

> Adding example PAM config for Ubuntu in Knox User Guide under PAM Based 
> Authentication section
> ----------------------------------------------------------------------------------------------
>
>                 Key: KNOX-915
>                 URL: https://issues.apache.org/jira/browse/KNOX-915
>             Project: Apache Knox
>          Issue Type: Improvement
>          Components: KnoxCLI
>    Affects Versions: 0.11.0
>         Environment: Ubuntu-16.04-64bit
>            Reporter: Krishna Pandey
>            Priority: Minor
>              Labels: documentation
>
> Current documentation covers an example of PAM configuration on OSX. It will 
> be useful if we can add at least one linux variant example to help deploy 
> Knox in Linux environment configured for PAM based authentication.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to