[Spacewalk-list] Spacewalk & pam_ldap

[Brandon Perkins]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Andy Speagle wrote:
> Hi Team,
> 
> I can't seem to get anywhere configuring Spacewalk to use the PAM
> facilities for authenticating users.  The few Satellite config docs and
> web posts I've seen seem to indicate this is very straight-forward, but
> I guess I can't seem to get the magic just right.
> 
> Can anyone point me in the right direction?
> 
> Thanks,
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list

http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.2.0/html/Installation_Guide/s1-maintenance-pam-auth.html

is the best starting point.  First things to check:

1) Can you authenticate the user using LDAP for a different daemon, like
SSH successfully?  If not, take another look at your authconfig.

2) Paste your /etc/pam.d/rhn-satellite file so we can take a look at it.
 Your LDAP configuration may also be useful, but I would understand if
you don't want to share it.

3) Make sure 'pam_auth_service = rhn-satellite' is in /etc/rhn/rhn.conf.

4) If you did not use the rhn-satellite name, and instead did something
else, you made sure that the pam.d file and the rhn.conf configuration
match.

5) Make sure you restart Spacewalk for it to take effect.

Generally it is straight-forward, so we should be able to get you moving.

Thanks.
Brandon
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Red Hat - http://enigmail.mozdev.org

iD8DBQFKkvm1hwQhj8l1t/cRAgNBAJ9VdfW7tK1SkJhP+TWEbSGci2/1DgCgnBKH
U64bIBZxQW7cwqn1SKIw6pM=
=G1m3
-----END PGP SIGNATURE-----