Re: can't get lastlogin info wen loging in trough ssh

["Matías López Bergero" <mlopezb@udesa.edu.ar>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hello,
Finally I solved the problem.

This is my /etc/pam.d/sshd file:

#%PAM-1.0
auth       required     pam_stack.so service=system-auth
auth       required     pam_nologin.so
account    required     pam_stack.so service=system-auth
password   required     pam_stack.so service=system-auth
session    required     pam_stack.so service=system-auth
session    required     pam_limits.so
session    optional     pam_console.so
session    optional     /lib/security/pam_lastlog.so


I was reading a little bit about pam, and find out that there is a debug
flag to set on a pam module.

So, i set the module pam_lastlog to debug like this:
session    optional     /lib/security/pam_lastlog.so debug

I add the following line to my syslog.conf to capture all the
authentication procedures:
auth.*                                                  /var/log/authlog

And guess what find the the /var/log/atuhlog file???
PAM-lastlog[5890]: unable to open /var/log/lastlog file

Damn...
Problem solved. I chmod to 644 that file.

The option LASTLOG_ENAB in /etc/login.def it's not required to display
the lastlog message.

Many thanks to all for the help!
BR,
Matías


Laurent CARON wrote:
| Matías López Bergero wrote:
|
|> -----BEGIN PGP SIGNED MESSAGE-----
|> Hash: SHA1
|>
|> Adrian C. wrote:
|> | See /etc//login.defs
|> |
|> | LASTLOG_ENAB      yes
|
|
| /etc/pam.d/ssh
|
| #%PAM-1.0
| auth       required     pam_nologin.so
| auth       required     pam_unix.so
| auth       required     pam_env.so # [1]
|
| account    required     pam_unix.so
|
| session    required     pam_unix.so
| session    optional     pam_lastlog.so # [1]
| session    optional     pam_motd.so # [1]
| session    optional     pam_mail.so standard noenv # [1]
| session    required     pam_limits.so
|
| password   required     pam_unix.so
|

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFBgpBcRB0HKLRQp/gRAsTRAKC7jzOXkT9xhYQcirC1aJavFWZGrACfXZfL
dT/05ljBoy7TpO9dNLHjUEU=
=h/8P
-----END PGP SIGNATURE-----
-
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html