How to configure PAM Securid for RHEL 6 or 7?
The documentation in the RSA Authentication Agent for PAM refers to RHEL version 4.8, which version is really old. And not the same as RHEL 6 or 7.
Please update your documentation.
We're using Securid for ssh logins, and we want to use Securid for sudo and su, also. But root user does not have an RSA token, so we want to allow console root logins and su - via password.
That documentation is not helpful for stacked auth files, here is the quote:
"The following section describes how to configure a connection tool (login tool) in a
stacked environment on RHEL 4.8."
I am asking about RHEL 6 & 7 to be documented with real examples, as those are not the same as the really old RHEL 4.8... really, why would you put something so old in new documentation?
We want sudo & su & logins to use SecurID, except for root (password)... we do have ssh working with securid.
I am checking on this for you to see if we have better real world examples for you.
Regards,
Erica
This is RHEL7
for sudo edit /etc/pam.d/sudo :
#%PAM-1.0
#auth include system-auth
auth required pam_securid.so
account include system-auth
password include system-auth
session optional pam_keyinit.so revoke
session required pam_limits.so
For root you can exclude it from RSA SecurID auth via /etc/sd_pam.conf
#INCL_EXCL_USERS :: 0 exclude users from securid authentication
# :: 1 include users for securid authentication
# default value is 0
INCL_EXCL_USERS=0
#LIST_OF_USERS :: a list of users to include or exclude from SecurID Authentication...Example:
LIST_OF_USERS=root:user2
David Strom,
If you take a look at the RSA SecurID Authentication Agent for PAM Technical Specifications page, RSA SecurID Authentication Agent 7.1 Patch 1 for PAM already supports RHEL 7.x (64-bit), Red Hat Enterprise Linux 5.8 (32-bit and 64-bit) and Red Hat Enterprise Linux 6.X (32-bit and 64-bit).
Click the link for RSA Auth Agent for PAM Downloads to download the agent.
Regards,
Erica