Debian PHP. How to make authorization for root in PAM?

K

Ksyusha2016-05-02 23:00:05

linux

Ksyusha, 2016-05-02 23:00:05

Installed PAM. Authorization on the site works for everyone except root. I read that I need to change something in the configs /etc/pam.d/ Please tell me what needs to be changed? I can't find it at all.
Heh, just found a solution. In /etc/pam.d/php you need to comment out the line auth [success=ok new_authtok_reqd=ok ignore=ignore user_unknown=bad default=die]

Reply

Answer the question

In order to leave comments, you need to log in

2 answer(s)

C

CityCat4, 2016-05-02
@CityCat4

Telepaths are on vacation, sorry :) PAM is a system of plug-in authentication modules designed to flexibly configure authentication, authorization and other things that have little to do with the site. As well as the root on the site, there is absolutely nothing to do. How is the task formed?

P

Pavel Selivanov, 2016-05-02
@selivanov_pavel

Ksyusha :
1. You are trying to shoot yourself in the leg very painfully. Almost always, if root rights are required somewhere, you can issue only the necessary part of them through sudo/acl/capabilities.
2. But, without shooting yourself in the foot, you won't gain experience, and indeed "because I can" is our main motto, therefore:
- check that root can log in with this password locally
- see what interesting things appear in /var/ log/auth.log
- remove everything else from /etc/pam.d/php. In theory, you can leave only pam_unix