8.10. Implementing PAM Authentication

Configuring RHN Satellite to use PAM

1. Create a PAM service file in the /etc/pam.d/ directory:

   touch /etc/pam.d/rhn-satellite

2. Edit the file with the following information:

   auth        required      pam_env.so
   auth        sufficient    pam_sss.so 
   auth        required      pam_deny.so
   account     sufficient    pam_sss.so
   account     required      pam_deny.so
   

3. Instruct the satellite to use the PAM service file by adding the following line to the /etc/rhn/rhn.conf file:

   pam_auth_service = rhn-satellite

4. Restart the service to pick up the changes:

   rhn-satellite restart
   

5. To enable a user to authenticate against PAM, select the checkbox labeled Pluggable Authentication Modules (PAM). It is positioned below the password and password confirmation fields on the Create User page.