PingIntelligence

Recovering ASE from unavailable pam.d script

About this task

When an invalid script name is entered while changing to PAM authentication, the PAM module defaults to etc/pam.d/others for authentication. This makes ASE inaccessible to administrators. If this happens, you must recover ASE.

To recover ASE:

Steps

  1. Copy etc/pam.d/login to etc/pam.d/other.

    Result:

    ASE will use the credentials in etc/pam.d/login to authenticate administrators.

  2. After signing back on to ASE, change the authentication method to use the correct file name.

    Copying the contents of etc/pam.d/login to etc/pam.d/other does not require a restart of ASE or the host operating system.