Skip to content

LU-3705: Make cldiag accept no UsePAM setting in sshd in CL9 #232

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: dev
Choose a base branch
from
Open

LU-3705: Make cldiag accept no UsePAM setting in sshd in CL9 #232

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 7 additions & 3 deletions docs/command-line_tools/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3134,11 +3134,15 @@ Fails if CageFS is not enabled for suphp binary.

#### check-usepam

Checks UsePAM in <span class="notranslate">`/etc/ssh/sshd_config`</span>.
Checks usepam setting in <span class="notranslate">`sshd -T`</span> output.

Checking if <span class="notranslate">`/etc/ssh/sshd_config`</span> config file contains <span class="notranslate">`UsePAM yes`</span> line, which is required for pam_lve correct work with sshd.
Checking if <span class="notranslate">`sshd -T`</span> output contains <span class="notranslate">`usepam yes`</span> line, which is required for pam_lve correct work with sshd.

Fails if <span class="notranslate">`/etc/ssh/sshd_config`</span> contains <span class="notranslate">`UsePAM no`</span> line.
Fails if <span class="notranslate">`sshd -T`</span> output contains <span class="notranslate">`usepam no`</span>. You could specify `UsePAM yes` in `/etc/ssh/sshd_config`

::: tip Note
Cldiag checks `sshd -T` output in <span class="notranslate">**lve-utils >= 6.4.8**</span>. Lower versions check whether `/etc/ssh/sshd_config` file contains `UsePAM yes` line.
:::

#### check-symlinkowngid

Expand Down