RE: Building OpenPegasus On Ubuntu with PAM

Biswapratap,

I've not tested on an Ubuntu system, but I think the RHEL pegasus should work fine on it.

Regarding PAM do you have a "wbem" file under /etc/pam.d ? This file will list the PAM security modules used for OpenPegasus. Copy this file from the RHEL system. Without this PAM authentication will not take place.

Below is a sample wbem file for RHEL

---------------------------------------------------------------------------------------------

#%PAM-1.0
auth        required      $ISA/pam_env.so
auth        sufficient    $ISA/pam_unix.so nullok
auth        required      $ISA/pam_deny.so

account     required      $ISA/pam_unix.so

password    required      $ISA/pam_cracklib.so retry=3 type=
password    sufficient    $ISA/pam_unix.so nullok use_authtok md5 shadow
password    required      $ISA/pam_deny.so

session     required      $ISA/pam_limits.so
session     required      $ISA/pam_unix.so

---------------------------------------------------------------------------------------------

For using PAM authentication, enableAuthentication should be true. You can also try using "PEGASUS_USE_PAM_STANDALONE_PROC".

For more information see "6.1.2 Remote User Authentication" section in pegasus/doc/ Admin_Guide_Release.pdf.

Regards,
Rohini

From: [email protected] [mailto:[email protected]]
Sent: Wednesday, May 30, 2012 6:05 PM
To: [email protected]
Cc: [email protected]; [email protected]
Subject: Building OpenPegasus On Ubuntu with PAM

Hi,

We had build open pegasus on RHEL 5.4 platform with PAM enabled (i.e with compile time env var : export PEGASUS_PAM_AUTHENTICATION=1).
The same Pegasus binary (CIMOM) is running fine on Ubuntu system, but the PAM module is unable to authenticate a correct username-password pair.

With "enableAuthentication=false" in cimserver_planned.conf the user is able to log into the CIMOM and enumerate classes or execute methods. So we
have concluded as, the PAM module in Ubuntu and RHEL are different, so its unable to authenticate a user.

Is our assumption correct? And, if yes, will a build of Pegasus on Ubuntu with export PEGASUS_PAM_AUTHENTICATION=1 solve the problem?

Since, we didn't find any platform specific to Ubuntu, we are using LINUX_IX86_GNU for the same. Is this assumption correct too? If not, then what
should be the solution for this.

Thanks in advance !

Regards,
Biswapratap.

"A sense of curiosity is nature's original school of education.
Encourage education, Live curious !!"


Please do not print this email unless it is absolutely necessary.

The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments.

WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.

www.wipro.com