From 045df04ed65375cb186c9b708aacf28399891c6f Mon Sep 17 00:00:00 2001 From: Grigory Ponomarenko Date: Thu, 16 Feb 2023 13:51:47 +0100 Subject: [PATCH] LU-3705: Make cldiag accept no UsePAM setting in sshd in CL9 --- docs/command-line_tools/README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/command-line_tools/README.md b/docs/command-line_tools/README.md index 458f19af4..61bcfb7ef 100644 --- a/docs/command-line_tools/README.md +++ b/docs/command-line_tools/README.md @@ -3134,11 +3134,11 @@ Fails if CageFS is not enabled for suphp binary. #### check-usepam -Checks UsePAM in `/etc/ssh/sshd_config`. +Checks usepam setting in `sshd -T` output. -Checking if `/etc/ssh/sshd_config` config file contains `UsePAM yes` line, which is required for pam_lve correct work with sshd. +Checking if `sshd -T` output contains `usepam yes` line, which is required for pam_lve correct work with sshd. -Fails if `/etc/ssh/sshd_config` contains `UsePAM no` line. +Fails if `sshd -T` output contains `usepam no`. You could specify `UsePAM yes` in `/etc/ssh/sshd_config` #### check-symlinkowngid