diff options
| author | Stephen Hemminger <stephen.hemminger@vyatta.com> | 2008-06-04 10:05:45 -0700 |
|---|---|---|
| committer | Stephen Hemminger <stephen.hemminger@vyatta.com> | 2008-06-04 10:05:45 -0700 |
| commit | 2eb541b4cc64ff0d14c57f550cf85a3f07f31b40 (patch) | |
| tree | 69b7d44a20f7ec8e99d4a53cac4edfd464538043 | |
| parent | b25e631dcc357f16d05fb2ac4f1570d7e86ec0ef (diff) | |
| download | quagga-2eb541b4cc64ff0d14c57f550cf85a3f07f31b40.tar.bz2 quagga-2eb541b4cc64ff0d14c57f550cf85a3f07f31b40.tar.xz | |
Fix vtysh authorization
The PAM system is asking for quagga (not vyatta-quagga) so need
to change the name of the pam file. Make sure file is setup to allow
users in quaggavty group to access vtysh without password.
| -rw-r--r-- | debian/quagga.pam | 5 | ||||
| -rw-r--r-- | debian/vyatta-quagga.pam | 6 |
2 files changed, 5 insertions, 6 deletions
diff --git a/debian/quagga.pam b/debian/quagga.pam new file mode 100644 index 00000000..6dd5d474 --- /dev/null +++ b/debian/quagga.pam @@ -0,0 +1,5 @@ +# This allows root to do vtysh without passwords +auth sufficient pam_rootok.so + +# Only users in group quaggavty can run vtysh +auth required pam_wheel.so trust group=quaggavty diff --git a/debian/vyatta-quagga.pam b/debian/vyatta-quagga.pam deleted file mode 100644 index 0da44ecb..00000000 --- a/debian/vyatta-quagga.pam +++ /dev/null @@ -1,6 +0,0 @@ -# This allows root to do vtysh without passwords -auth sufficient pam_rootok.so - -# Any user may call vtysh but only those belonging to the group quaggavty can -# actually connect to the socket and use the program. -auth sufficient pam_wheel.so quaggavty |