CentOS 6.5 OpenSSH PAM Config

Home » CentOS » CentOS 6.5 OpenSSH PAM Config
CentOS 1 Comment

Sorry – without the signing this time.


Our products use CentOS 6.5 and we would like to deploy them with custom openssh RPMs. I have downloaded the sources from http://athena.caslab.queensu.ca/pub/OpenBSD/OpenSSH/portable and built the RPMs, but the PAM configuration file is wrong after installation.

When I install the default openssh-5.3p1 RPMs from the CentOS 6.5
repository, the configuration looks like this:

# cat /etc/pam.d/sshd

auth required pam_sepermit.so
auth include password-auth
account required pam_nologin.so
account include password-auth
password include password-auth
# pam_selinux.so close should be the first session rule
session required pam_selinux.so close
session required pam_loginuid.so
# pam_selinux.so open should only be followed by sessions to be executed
in the
user context
session required pam_selinux.so open env_params
session optional pam_keyinit.so force revoke
session include password-auth

However, when I rebuild this exact RPM from the source and install it, I
get the following:

# cat /etc/pam.d/sshd

auth required pam_stack.so service=system-auth
account required pam_nologin.so
account required pam_stack.so service=system-auth
password required pam_stack.so service=system-auth
session required pam_stack.so service=system-auth

I was wondering if there are any build logs that would show how the openssh RPMs were built from the source for CentOS 6.5. Perhaps there is some type of configuration I am missing that would ensure that I get the same PAM configuration.


One thought on - CentOS 6.5 OpenSSH PAM Config