Does RSA PAM Agent support SELinux?
Originally Published: 2008-12-12
Article Number
Applies To
Redhat
SELinux Security Enhanced Linux
Support for SELinux
Issue
What can I configure with SELinux?
acetest authentication works
Authentication via SSH or other method fails with RSA
Resolution
Contact RSA Support to Request an Enhancement to the PAM agent if you need full support for SELinux
Red Hat Linux (all supported versions):
1. Change to /etc/pam.d and open the login file.
The following text is displayed:
#%PAM-1.0
auth required pam_securetty.so
auth required pam_stack.so service=system-auth
auth required pam_nologin.so
account required pam_stack.so service=system-auth
password required pam_stack.so service=system-auth
RSA Authentication Agent 6.0 for PAM Installation and Configuration Guide
# pam_selinux.so close should be the first session rule
session required pam_selinux.so close
session required pam_stack.so service=system-auth
session required pam_loginuid.so
session optional pam_console.so
# pam_selinux.so open should be the last session rule
session required pam_selinux.so open
2. Comment out the following lines:
auth required pam_securetty.so
auth required pam_stack.so service=system-auth
auth required pam_nologin.so
3. Replace them with the following lines:
auth required pam_securid.so
auth required pam_ldap.so
Notes
Enhancement Request ID: AAPAM-370
Related Articles
PAM agent fails on acetest with error 'Cannot Do AceInitialize for communication with ACE/Server' | RSA Authentication Man… Number of Views RSA SecurID Authentication Manager Security Vulnerability for Java (CVE-2015-2590) - False Positive(s) Number of Views RSA Authentication Agent 7.1 for PAM for AIX acetest program fails to authenticate a username Number of Views Does RSA support the installation of third party software or applications on the RSA Authentication Manager 8.X (virtual) … Number of Views RSA MFA Agent 9.0 for PAM - Installation and Configuration Guide for Solaris Number of Views
Trending Articles
RSA Authentication Manager Upgrade Process RSA Release Notes for RSA Authentication Manager 8.8 RSA RADIUS Server service failed to start in the RSA Authentication Manager 8.1 Operations Console Microsoft Entra ID External MFA - Relying Party Configuration Using OIDC - RSA Ready Implementation Guide RSA Release Notes: Cloud Access Service and RSA Authenticators
Don't see what you're looking for?
