Return
-
Title
Is it possible to configure AIXs default SSHD to use PAM? -
Description
Is it possible to configure AIXs default SSHD to use PAM?
-
Resolution
With AIX, the default authentication has to be configured for PAM_AUTH for SSHD to use PAM using IBMs SSHD. Even if UsePAM is set to yes in /etc/ssh/sshd_config
1. Configure auth_type = PAM_AUTH in /etc/security/login.cfg
2. Set UsePAM to yes in /etc/ssh/sshd_config
3. Ensure the SSHD binary has been configured for PAM
Run ldd against the binary it should show libpam.a# ldd /usr/sbin/sshd
/usr/lib/libpam.a(shr.o)
4. Ensure that /etc/pam.conf contains a sshd stanza, or that the OTHER stanza is configured correctly