Authentication of SSH user in AIX

[mack3]

I need to write an application on AIX 5.2 which would be driven after system authentication of the ssh user; the application would send additional prompts over the ssh connection to the end user. Based on the responses to these prompts, the user would be accepted or rejected. We currently use an AIX LAM imterface to do this for telnet clients. I am trying to add the same support for ssh clients. Would PAM allow this? Thanks, Meredith

 

[Zahier]

This might not be what you want, but why not add the extra prompting in the .profile of the user. In this way based on their responses you could still exit them from the server if the responses are incorrect or allow login if correct.

 

[markus38]

OK,

Not sure if this answers your question, but will help... here is a pam.conf that will make SSH work with PAM. Required for using SSH with LDAP for example...

OTHER auth required /usr/lib/security/pam_aix
OTHER account required /usr/lib/security/pam_aix
OTHER session required /usr/lib/security/pam_aix
OTHER password required /usr/lib/security/pam_aix

Mark