[TriLUG] ssh trouble

Jason Tower jason at cerient.net
Mon Jul 19 15:36:43 EDT 2004


> On Mon, 2004-07-19 at 15:23, Jason Tower wrote:
>> yes, you will almost certainly need /etc/shadow, and /etc/groups and
>> gshadow wouldn't hurt either.  the encrypted passwd is stored in shadow,
>> not passwd.
>>
>
> Jason, according to the HOWTO, all you need to copy is /etc/passwd.
> This is because authentication should actually be done through PAM, not
> by reading /etc/shadow directly.  But I don't know the details on what
> configuration, if any, must be done to PAM to get it to work properly
> from inside the chroot.
>
> --Jeremy

yeah, i thought of that after i sent my reply :-)  but as you point out,
getting pam to work in the chroot (assuming its using pam) might be a fun
little exercise.

jason



More information about the TriLUG mailing list