Hi Martin,
Thankyou for your help, I compiled MusclePAM with the correct links, and then I edited my login like below, with different variations,
#%PAM-1.0
#auth required /lib/security/pam_securetty.so
auth required /lib/security/pam_stack.so service=system-auth
auth required /lib/security/pam_musclecard.so
#auth required /lib/security/pam_nologin.so
account required /lib/security/pam_stack.so service=system-auth
password required /lib/security/pam_stack.so service=system-auth
session required /lib/security/pam_stack.so service=system-auth
session optional /lib/security/pam_console.so

But it did not work, I haven't applied your patch yet, but Iwill, and my system-auth file looks like this :-

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth required /lib/security/pam_env.so
auth sufficient /lib/security/pam_unix.so likeauth nullok
auth required /lib/security/pam_deny.so

account required /lib/security/pam_unix.so

password required /lib/security/pam_cracklib.so retry=3 type=
password sufficient /lib/security/pam_unix.so nullok use_authtok md5 shadow
password required /lib/security/pam_deny.so

session required /lib/security/pam_limits.so
session required /lib/security/pam_unix.so

I tried different variations of changing the login file, but they didn't seem to work, any suggestions would be very helpful, thanks again.

Kind Regards,

Sim

Martin Buechler wrote:

Hi Sim,

[EMAIL PROTECTED] wrote:


Hi all,
I'm trying to get the MusclePAM module to work, but it seems that there are some irregularities in the program, i can't find the testpam.c file specified by the Makefile, moreover when it builds the pam_musclecard.so i don't think it builds it correctly 'cause in the Makefile the library directories are not pointing correctly, so has anyone got it working?are there missing files?or is it just mine? what's a better PAM alternative?, Thanks in advance.

Yes, the linker options point to default paths, as configured in /etc/ld.so.conf. If you installed MUSCLE's pcsc elsewhere, then use your editor. Muscle is always in a state of flow ;) Be part of it, Configure scripts are always welcome. Actually I do not know where testpam.c is left, but you may test it right away, when logged in(!) by placing the shared object in /lib/security and changing your /etc/pam.d/login to

#auth requisite /lib/security/pam_unix.so nullok
auth requisite /lib/security/pam_musclecard.so

Attached you find my current version of MusclePAM, as patch against the one shipped with muscleframework 1.1.3; the patch provides additional support for PEM certs, Root CA chains/directories. Uses OpenSSL 0.9.7-beta3.
Works great for me.

HTH


_______________________________________________
Muscle mailing list
[EMAIL PROTECTED]
http://lists.musclecard.com/mailman/listinfo/muscle

Reply via email to