<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title></title>
</head>
<body>
Denis S. Filimonov ÐÉÛÅÔ:<br>
<blockquote type="cite" cite="mid200303111856.23164.den@academ.org">
<blockquote type="cite">
<pre wrap="">
KDM, ssh ÐÒÅËÒÁÓÎÏ ÚÁÓÁÓÙ×ÁÀÔ ÐÁÒÏÌÉ ÉÚ LDAP-ÓÅÒ×ÅÒÁ É ÐÕÓËÁÀÔ
ÀÚÅÒÁ ÎÁ ËÏÍÐ, Á
ÅÓÌÉ ÒÅÇÉÓÔÒÉÒÏ×ÁÔØÓÑ login-ÏÍ ÎÁ ÏÂÙÞÎÏÍ /dev/ttyv1 - ÎÅ ÐÕÓËÁÅÔ.
ëÔÏ ÏÂßÑÓÎÉÔ Ñ×ÌÅÎÉÅ?
</pre>
</blockquote>
<pre wrap=""><!---->óÒÁ×ÎÉÔÅ ÓÏÄÅÒÖÉÍÏÅ ÆÁÊÌÏ× login, ssh, system-auth,
É system-auth-use_first_pass × ËÁÔÁÌÏÇÅ/etc/pam.d/
ÓËÏÒÅÅ ×ÓÅÇÏ ÜÔÏ ÏÂÎÁÒÕÖÉÔ ÐÒÏÂÌÅÍÕ. åÓÌÉ ÎÅÔ -- ËÉÄÁÊÔÅ ÉÈ ÓÀÄÁ.
</pre>
</blockquote>
îÅ ÒÁÚÏÂÒÁÌÓÑ. ÷ÏÔ ÆÁÊÌÙ ÉÚ pam.d:<br>
<br>
"login"<br>
-----------------------------------------------------<br>
#%PAM-1.0<br>
authššš requiredššššššš /lib/security/pam_securetty.so<br>
authššš requiredššššššš /lib/security/pam_stack.so service=system-auth<br>
authššš requiredššššššš /lib/security/pam_nologin.so<br>
authššš optionalššššššš /lib/security/pam_mail.so<br>
account requiredššššššš /lib/security/pam_stack.so service=system-auth<br>
passwordššššššš requiredššššššš /lib/security/pam_stack.so
service=system-auth<br>
session requiredššššššš /lib/security/pam_stack.so service=system-auth<br>
session optionalššššššš /lib/security/pam_lastlog.so nowtmp<br>
session optionalššššššš /lib/security/pam_motd.so<br>
session optionalššššššš /lib/security/pam_console.so<br>
-----------------------------------------------------<br>
<br>
"sshd"<br>
-----------------------------------------------------<br>
#%PAM-1.0<br>
authššš requiredššššššš /lib/security/pam_userpass.so<br>
authššš requiredššššššš /lib/security/pam_stack.so
service=system-auth-use_first_pass<br>
authššš requiredššššššš /lib/security/pam_nologin.so<br>
account requiredššššššš /lib/security/pam_stack.so service=system-auth<br>
passwordššššššš requiredššššššš /lib/security/pam_stack.so
service=system-auth<br>
session requiredššššššš /lib/security/pam_stack.so service=system-auth<br>
-----------------------------------------------------<br>
<br>
"system-auth"<br>
-----------------------------------------------------<br>
#%PAM-1.0<br>
authššš requiredššššššš /lib/security/pam_tcb.so shadow fork nullok<br>
account requiredššššššš /lib/security/pam_tcb.so shadow fork<br>
passwordššššššš requiredššššššš /lib/security/pam_passwdqc.so
min=disabled,24,12,8,7 max=40 passphrase=3 match=4 similar=deny
random=42 enforce=users retry=3<br>
passwordššššššš requiredššššššš /lib/security/pam_tcb.so use_authtok
shadow fork prefix=$2a$ count=8 write_to=tcb<br>
session requiredššššššš /lib/security/pam_tcb.so<br>
session requiredššššššš /lib/security/pam_limits.so<br>
-----------------------------------------------------<br>
<br>
"system-auth-use_first_pass"<br>
-----------------------------------------------------<br>
#%PAM-1.0<br>
authššš requiredššššššš /lib/security/pam_tcb.so shadow fork nullok
use_first_pass passwordššššššš requiredššššššš /lib/security/pam_tcb.so
use_authtok shadow fork prefix=$2a$ count=8 write_to=tcb<br>
-----------------------------------------------------<br>
<br>
<pre class="moz-signature" cols="200">--
SY. Arcady. <a class="moz-txt-link-freetext" href="mailto:arc@help0.ru">mailto:arc@help0.ru</a>, WWW - <a class="moz-txt-link-freetext" href="http://www.help0.ru">http://www.help0.ru</a>
</pre>
</body>
</html>