Re: dtlogin

From: Charles Clancy (security@xauth.net)
Date: 01/03/02 

Date: Thu, 3 Jan 2002 01:20:01 -0600 (CST)
From: Charles Clancy <security@xauth.net>
To: focus-sun@securityfocus.com

> > There is a file /etc/security/access.conf you can configur this file to
> > allow and dissalow local logons to the box by user id and group ID.... you
> > can allow all local users to log on to the box and nis users only ssh...
>
> Does this has to do with pam_access or any other module for pam ?
> I can't find any documentation about /etc/security/access.conf
> nor the file in 3 systems i've looked in.

Pam_access is a module shipped with Linux-PAM, and uses configuration file
/etc/security/access.conf (or one specified as an argument), but does not
come standard with Solaris. You'd be more likely to find it on your
favorite Linux distribution. I'm sure you could easily compile and
install it if you wanted; however, there are porting issues between
Solaris PAM and everyone else's.

> ps. thanks charles clancy for the pam module provided...

No problem. I'm a big PAM fan, and have found that it can solve all kinds
of little administrative problems when used properly. 

--
t. charles clancy <> tclancy@uiuc.edu <> www.uiuc.edu/~tclancy