This page last changed on Apr 21, 2010 by dcline.

Pam.d settings

As root user, in /etc/pam.d, check your settings against these. These are correct to allow for rsh, ssh, and rexec across nodes, but not rlogin.

/etc/pamd.d/rexec
#auth       required	pam_nologin.so
#auth       required	pam_securetty.so
/etc/pamd.d/rsh
auth       sufficient	pam_nologin.so
auth       optional 	pam_securetty.so
auth       sufficient	pam_env.so
auth       sufficient	pam_rhosts_auth.so
account    sufficient	pam_stack.so service=system-auth
session    sufficient	pam_stack.so service=system-auth
/etc/pamd.d/rlogin
auth       sufficient	pam_rhosts_auth.so
#auth       required	pam_securetty.so
auth       required	pam_nologin.so
auth       required     pam_env.so
auth       required	pam_stack.so service=system-auth
account    required	pam_stack.so service=system-auth
password   required	pam_stack.so service=system-auth
session    required	pam_stack.so service=system-auth
/etc/pamd.d/sshd
auth       required     pam_stack.so service=system-auth
auth       sufficient	pam_nologin.so
account    required     pam_stack.so service=system-auth
password   required     pam_stack.so service=system-auth
session    required     pam_stack.so service=system-auth
session    required     pam_limits.so
session    optional     pam_console.so

SSH settings

Check if the following are in /etc/ssh/ssh_config,

/etc/ssh/ssh_config
Host *
ForwardX11 yes
StrictHostKeyChecking no
UsePrivilegedPort no

then restart the service

service sshd restart
Document generated by Confluence on Feb 03, 2026 14:12