[oe] [PATCH 0/1] quagga: add pam support for vtysh

Joe MacDonald joe at deserted.net
Tue Nov 26 16:23:23 UTC 2013


The latest (and slightly tweaked to resolve a trivial conflict) version
merged.  Thanks.
-J.

[[oe] [PATCH 0/1] quagga: add pam support for vtysh] On 13.11.08 (Fri 12:32) Hongxu Jia wrote:

> Test Case:
> 1. Add DISTRO_FEATURES += 'pam' to local.conf and build image with
>    quagga.
> 
> 2. On target:
> 1) cat /etc/pam.d/guagga
> #
> # The PAM configuration file for the quagga `vtysh' service
> #
> 
> # This allows root to change user infomation without being
> # prompted for a password
> auth		sufficient	pam_rootok.so
> 
> # The standard Unix authentication modules, used with
> # NIS (man nsswitch) as well as normal /etc/passwd and
> # /etc/shadow entries.
> auth       include      common-auth
> 
> 2) add option debug to pam_rootok.so
>  auth	    sufficient	pam_rootok.so debug
> 
> 3) pam_rootok.so
> run command vtysh as root, enter qemu0#:
> root at qemu0:~# vtysh 
> 
> Hello, this is Quagga (version 0.99.21).
> Copyright 1996-2005 Kunihiro Ishiguro, et al.
> 
> qemu0# 
> log info in /var/log/message(or /var/log/auth.log) shows pam_rootok.so return success:
> 2013-11-08T03:33:44.898360+00:00 qemu0 vtysh: pam_rootok(quagga:auth): root check succeeded
> 
> 4) pam_unix.so
> the content of common-auth are shown at section "Common configure files"
> comment the configure file quagga pam_rootok.so line, because it will make pam return success:
>  #auth		sufficient	pam_rootok.so
> and modify the pam_unix.so line in common-auth to remove nullok_secure:
>  auth	[success=1 default=ignore]	pam_unix.so debug
> 
> 5) run commands with invalid password:
> root at qemu0:~# vtysh 
> Password: 
> root at qemu0:~# 
> log in /var/log/message(or /var/log/auth.log):
> 2013-11-08T04:20:49.418763+00:00 qemu0 vtysh: pam_unix(quagga:auth): authentication failure; logname=root uid=0 euid=0 tty= ruser= rhost=  user=root
> 
> //Hongxu
> 
> 
> The following changes since commit ffb5434823195cbdc41c76a110eaa6ae04e2b010:
> 
>   dnsmasq: uprev to 2.6.3 (2013-11-06 15:12:45 -0500)
> 
> are available in the git repository at:
> 
>   git://git.pokylinux.org/poky-contrib hongxu/fix-quagga-pam
>   http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=hongxu/fix-quagga-pam
> 
> Hongxu Jia (1):
>   quagga: add pam support for vtysh
> 
>  meta-networking/recipes-protocols/quagga/files/quagga.pam | 13 +++++++++++++
>  meta-networking/recipes-protocols/quagga/quagga.inc       | 13 ++++++++++++-
>  2 files changed, 25 insertions(+), 1 deletion(-)
>  create mode 100644 meta-networking/recipes-protocols/quagga/files/quagga.pam
> 
-- 
-Joe MacDonald.
:wq
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://lists.openembedded.org/pipermail/openembedded-devel/attachments/20131126/77d9f174/attachment-0002.sig>


More information about the Openembedded-devel mailing list