SSH question

Jean-Rene Cormier jrc at jrcormier.com
Thu Nov 16 23:58:22 UTC 2006


On Thu, 2006-11-16 at 14:25 -0800, Wolfgang S. Rupprecht wrote:
> Jean-Rene Cormier <jrc at jrcormier.com> writes:
> > Here is what I have in mine, almost the same as your except for the 2
> > extra lines for pam_ssh.so
> >
> > #%PAM-1.0
> > auth       required    pam_env.so
> > auth       optional    pam_keyring.so try_first_pass
> > auth       optional    pam_ssh.so try_first_pass
> > auth       include     system-auth
> > account    required    pam_nologin.so
> > account    include     system-auth
> > password   include     system-auth
> > session    optional    pam_keyinit.so force revoke
> > session    include     system-auth
> > session    required    pam_loginuid.so
> > session    optional    pam_console.so
> > session    optional    pam_ssh.so
> 
> That works.  Thanks!  I'm very happy to finally see this working.
> 
> It appears that pam_keyring isn't needed if pam_ssh is used.  I've
> removed the pam_keying lines and only added the pam_ssh and things are
> great.

pam_keyring is for gnome-keyring, that's where the WEP/WPA keys are
stored when you use NetworkManager. I have no idea what else uses it so
if you don't have wireless on your computer you might not need it.

-- 
Jean-Rene Cormier <jrc at jrcormier.com>




More information about the users mailing list