[SOLVED] What pam file is used to log in with the webui?

[kv71h]

Hi, i would like to run a script when somebody logs in using PAM authentication via the webui. You can do this by adding a line to a pam configuration file in /etc/pam.d/ , But there seems to be no proxmox related file, what pam config file does the webui use for logging in users?

 

[fabian]

PVE will use "proxmox-ve-auth" as service name. so you can either create and configure that, or it will fall back to the default one.

 

[kv71h]

So i can make a file named "proxmox-ve-auth" in "/etc/pam.d/" and it will use that file?

 

[fabian]

yes, see https://bugzilla.proxmox.com/show_bug.cgi?id=1670 and https://git.proxmox.com/?p=pve-acce...ff;h=01f191c8c445b4ac3fe8eafd45a9b3df71581dac

 

[kv71h]

I just created the file "proxmox-ve-auth" by doing cp other proxmox-ve-auth because i read this line: "If the file does not exist, pam will use `/etc/pam.d/other`". I added my script line but it didn't run. Any ideas why it didn't?

 

[fabian]

what do you mean with "added my script line"?

 

[kv71h]

I have to add a line of text to the pam file that will run a script, here's the line: session optional pam_exec.so seteuid /path/to/script.sh

Thank you for the quick replies.

 

[fabian]

PVE doesn't open a session (as there are no sessions in PVE).. it only does authentication and account validation.

 

[kv71h]

So i'm guessing auth optional pam_exec.so seteuid /path/to/script.sh would work then?

 

[kv71h]

It did work. Thank you for your help, how can i mark this thread as solved?

 

[fabian]

edit at the top and select the prefix

 

[kv71h]

Perfect!

 

[SSTALIN]

edit at the top and select the prefix

Hello, could you help me with some problems that I have because I am new to proxmox and I don't know what I might be doing wrong.

 

[fabian]

please don't hijack unrelated threads - post your question in a new thread, or if there is a clearly matching one with the same issue/question, post it there.