pam.d/su & sshd -- pam_ns error

standtech

I came across this issue with su / ssh pam module, for some reason it disallowing logins with the below error. Not sure if this will affect for a particular range of UIDs .

" su: cannot open session: Cannot make/remove an entry for the specified session"

Disabled the below entry in su and sshd as a temporary fix.

"session required pam_ns.so user_map=/tmp/user_map"

Enhance Team : These pam files are updated by Enhance , any comments on how to deal with this?

Adam

This module is very important to ensure that ssh, su and cron sessions are placed inside the PHP container. It should not be disabled.

Enhance uids start at 2048. If you want to create a user outside of Enhance which isn't jailed, it needs to have a uid < 2048.

standtech

Adam sure adam , but if such changes are changing the OS behavior, would appreciate it if you could notify and document as well. possible to change behavior by using other attributes to remove such dependency ?

Adam

You're right there isn't really any documentation on this, we will add some. It's not possible to change the behaviour of the module, it's required for proper operation of Enhance.

danielpugh

confused the heck out of me until i found this
phew