pam.conf permission problem

[zum]

After rebooting my HP-UX Server I received this error message:

Error: check /etc/pam.conf file permissions and ownership
Boot in single-user mode for missing /etc/pam.conf

I cannot login to the server because of the error so I booted into single-user mode. I noticed there isn't a pam.conf file and I'm not sure how to fix this problem. I have a backup that I created using SAM but I can't access SAM in single user mode. Any suggestions?

Thanks.

 

[tman138]

In HP-UX 11 the pam.conf file should be read only owned by root/sys and the content be as follows:

#
# PAM Configuration
#
# Account Management
#
dtaction account required /usr/lib/security/libpam_unix.1
dtlogin account required /usr/lib/security/libpam_unix.1
ftp account required /usr/lib/security/libpam_unix.1
login account required /usr/lib/security/libpam_unix.1
su account required /usr/lib/security/libpam_unix.1
OTHER account required /usr/lib/security/libpam_unix.1
#
# Authentication Management
#
dtaction auth required /usr/lib/security/libpam_unix.1
dtlogin auth required /usr/lib/security/libpam_unix.1
ftp auth required /usr/lib/security/libpam_unix.1
login auth required /usr/lib/security/libpam_unix.1
su auth required /usr/lib/security/libpam_unix.1
OTHER auth required /usr/lib/security/libpam_unix.1
#
# Password Management
#
dtaction password required /usr/lib/security/libpam_unix.1
dtlogin password required /usr/lib/security/libpam_unix.1
login password required /usr/lib/security/libpam_unix.1
passwd password required /usr/lib/security/libpam_unix.1
OTHER password required /usr/lib/security/libpam_unix.1
#
# Session Management
#
dtaction session required /usr/lib/security/libpam_unix.1
dtlogin session required /usr/lib/security/libpam_unix.1
login session required /usr/lib/security/libpam_unix.1
OTHER session required /usr/lib/security/libpam_unix.1

If you cannot easily restore you can create a new file in the /etc folder.
Hope this helps... T

 

[bi]

zum: I vaguely remember using sam when I was in single user mode once. You have to manually mount /var, /opt and /usr, though.

 

[evanski]

tman138 is right! try making a new pam.conf and use the data above.