Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

How do I test the changes to the pam.d configuration files:

  • Do I need to restart the PAM service to test the changes?
  • Should I go through every service listed in the /etc/pam.d/ directory?

I'm about to make changes to the pam.d/common-* files in an effort to put an Ubuntu box into an active directory controlled network.

I'm just learning what to do, so I'm preparing the configuration in a VM, which I plan to deploy in metal in the coming week.

It is a clean install of Ubuntu 10.04 Beta 2 server, so other than SSH daemon, all other services are stock.

share|improve this question
add comment

2 Answers

up vote 1 down vote accepted

PAM configuration files are read dynamically. To test, you can authenticate to the appropriate software and view the logs.

It is often wise to understand all the configuration files in question if you are attempting to make expansive configuration changes.

PAM man page

share|improve this answer
    
'... often wise ...' No arguments there. But unfortunately I haven't the luxury of becoming a subject matter expert (I do this type of thing once every couple of years) and must rely on best practices for testing. –  Jamie Apr 21 '10 at 15:03
add comment

I usually use the pamtester for checking the pam configuration, this way I can check whatever all restrictions are working correctly on all services that have specific config files without using specific clients for each and every service.

share|improve this answer
    
Is the animal you speak of? pamtester.sourceforge.net –  Jamie Oct 1 '10 at 17:03
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.