Zurück
-
Titel
AIX agent unable to authenticate when using 'pf_authenticateonclient = true' option in policy -
Beschreibung
User unable to authenticate with pmrun on AIX agent when you have the following option set in the policy:pf_authenticateonclient = true -
Lösung
RESOLUTION:Check that you have the correct sshd entries in /etc/pam.conf on the AIX agent.If pf_authenticateonclient = true, the authenticate_pam_toclient() is called using the "sshd" pam service.
The pam configuration on the AIX systems will need to be set to allow sshd.It should have entries similar to the following:sshd auth required pam_aixsshd account required pam_aixsshd password required pam_aixsshd session required pam_aix -
Weitere Informationen
The authentication is done on the policy server by default, unless pf_authenticateonclient is set to true in the policy.