Bug 190456
Summary: | limits.conf ignored by ssh pam logins | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
Product: | Red Hat Enterprise Linux 4 | Reporter: | Timothy Stotts <stotts> | ||||||||
Component: | pam | Assignee: | Tomas Mraz <tmraz> | ||||||||
Status: | CLOSED NOTABUG | QA Contact: | Jay Turner <jturner> | ||||||||
Severity: | medium | Docs Contact: | |||||||||
Priority: | medium | ||||||||||
Version: | 4.0 | CC: | srevivo | ||||||||
Target Milestone: | --- | ||||||||||
Target Release: | --- | ||||||||||
Hardware: | x86_64 | ||||||||||
OS: | Linux | ||||||||||
Whiteboard: | |||||||||||
Fixed In Version: | Doc Type: | Bug Fix | |||||||||
Doc Text: | Story Points: | --- | |||||||||
Clone Of: | Environment: | ||||||||||
Last Closed: | 2006-05-03 06:42:58 UTC | Type: | --- | ||||||||
Regression: | --- | Mount Type: | --- | ||||||||
Documentation: | --- | CRM: | |||||||||
Verified Versions: | Category: | --- | |||||||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||||
Cloudforms Team: | --- | Target Upstream Version: | |||||||||
Embargoed: | |||||||||||
Attachments: |
|
Description
Timothy Stotts
2006-05-02 15:38:14 UTC
Could you try to upgrade to the latest pam package available? (0.77-66.14) And if it doesn't help could you attach your /etc/security/limits.conf here? Updated to pam-0.77-66.14 . Overwrote configs with .rpmnew for all of /etc/pam.d/ and /etc/security/ . CASE 1: /bin/su - user limits are applied just as expected. CASE 2: ssh user@localhost limits are not applied Created attachment 128523 [details]
File from /etc/ssh/sshd_config
This config works fine with limits on RHEL3 .
Created attachment 128524 [details]
File from /etc/pam.d/sshd .
Comes with openssh-3.9p1-8.RHEL4.9 .
Created attachment 128525 [details]
File from /etc/security/limits.conf
Each limit applies perfectly when using '/bin/su - user', but not via ssh.
Console login behavior, unknown.
Updated to openssh-3.9p1-8.RHEL4.12 and restarted service. No difference. Added explicit 'UsePAM yes' to /etc/ssh/sshd_config. Limits are now applied correctly. Apparently, PAM authentication was default on RHEL3, but is not on RHEL4. Used a Gentoo box to figure this out :-). NOTABUG as 'UsePAM yes' is in the default sshd_config in the openssh package. After upgrade you must compare the .rpmnew file and the old one and make appropriate changes. |