Git Product home page Git Product logo

pam_ipahbac's Issues

Help in getting more debug on AIX

Hello !

I'm trying to configure pam_ipahbac on a AIX 7.1/7.2 systems.

/etc/pam.conf

sshd    account required        pam_aix
sshd    account required        /tmp/pam_ipahbac/src/.libs/pam_ipahbac.so blameGetOpt -d 1 -k /etc/security/ldap/ldap.kdb -K /etc/ldap2.secret -u aix -b dc=idm,dc=acme,dc=fr -P /etc/ldap.secret -l ldaps://idm01.idm.acme.fr -x /etc/hbacexclude

secure log :

Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: while cycle for opt k
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: parsing keydb file path
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: got a keydb path: [ /etc/security/ldap/ldap.kdb ]
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: while cycle for opt K
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: parsing keydb password file
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: got a keydb password from a file
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: while cycle for opt u
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: parsing bind user
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: bind user: aix
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: while cycle for opt b
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: parsing ldap base
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: got an ldap base: dc=idm,dc=acme,dc=fr
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: while cycle for opt p
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: parsing bind password
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: got a bind password
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: while cycle for opt l
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: parsing ldap server list
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: got an ldap serverlist: [ ldaps://idm01.idm.acme.fr ]
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: while cycle for opt x
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: parsing user check exclusions file
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: checking user check exclusions
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: user not excluded from hbac
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: fqdn host: aix01.acme.fr
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: generating ldap bind dn
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: bind dn: uid=aix,cn=sysaccounts,cn=etc,dc=idm,dc=acme,dc=fr
Feb 10 16:23:16 aix01 auth|security:debug pam_ipahbac[13172826]: ipa_check_hbac(ldaps://idm01.idm.acme.fr, dc=idm,dc=acme,dc=fr, uid=aix,cn=sysaccounts,cn=etc,dc=idm,dc=acme,dc=fr, aix01.acme.fr, sshd, aixtest, /etc/security/ldap/ldap.kdb)

idm ldap log doesn't show any requests on cn=hbac like its supposed to.

Manual ldapsearch from the client works :

/opt/freeware/bin/ldapsearch -H ldaps://idm01.idm.acme.fr -b cn=hbac,dc=idm,dc=acme,dc=fr -D "uid=aix,cn=sysaccounts,cn=etc,dc=idm,dc=acme,dc=fr" -w 'password' '(&(objectclass=ipahbacrule)(ipaenabledflag=true)(accessruletype=allow))' memberuser memberhost memberservice

Is there any way to get more debug to help solve my issue ?

Thank you

working binaries for AIX

Hello,

Do you have working binaries for AIX ? Or would you share how to compile the code on AIX ?

Thank you.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.