<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<div dir="ltr">
<div>Hi Andy,</div>
<div><br>
</div>
<div>We have RHEL7, and pam_slurm_adopt is working for us as well, with memory constraint working</div>
<div><br>
</div>
<div>pam.d/sshd:</div>
<div style="margin-left:40px">#%PAM-1.0<br>
auth required pam_sepermit.so<br>
auth substack password-auth<br>
auth include postlogin<br>
# Used with polkit to reauthorize users in remote sessions<br>
-auth optional pam_reauthorize.so prepare<br>
account required pam_nologin.so<br>
account include password-auth<br>
# Ensure that users can only login if they have a job on the node<br>
account required pam_slurm_adopt.so<br>
password include password-auth<br>
# pam_selinux.so close should be the first session rule<br>
session required pam_selinux.so close<br>
session required pam_loginuid.so<br>
# pam_selinux.so open should only be followed by sessions to be executed in the user context<br>
session required pam_selinux.so open env_params<br>
session required pam_namespace.so<br>
session optional pam_keyinit.so force revoke<br>
session include password-auth<br>
session include postlogin<br>
# Used with polkit to reauthorize users in remote sessions<br>
-session optional pam_reauthorize.so prepare</div>
<div style="margin-left:40px"><br>
</div>
<div>pam.d/system-auth:</div>
<div style="margin-left:40px">#%PAM-1.0<br>
# This file is auto-generated.<br>
# User changes will be destroyed the next time authconfig is run.<br>
auth required pam_env.so<br>
auth sufficient pam_unix.so nullok try_first_pass<br>
auth requisite pam_succeed_if.so uid >= 1000 quiet_success<br>
auth required pam_deny.so<br>
<br>
account required pam_unix.so<br>
account sufficient pam_localuser.so<br>
account sufficient pam_succeed_if.so uid < 1000 quiet<br>
account required pam_permit.so<br>
<br>
password requisite pam_pwquality.so try_first_pass local_users_only retry=3 authtok_type=<br>
password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok<br>
password required pam_deny.so<br>
<br>
session optional pam_keyinit.so revoke<br>
session required pam_limits.so<br>
-session optional pam_systemd.so<br>
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid<br>
session required pam_unix.so</div>
<div style="margin-left:40px"><br>
</div>
Sean<br>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr"><br>
</div>
<div dir="ltr">--</div>
<div dir="ltr">Sean Crosby</div>
<div dir="ltr">
<div dir="ltr">Senior DevOpsHPC Engineer and HPC Team Lead | Research Platform Services</div>
<div>Research Computing | CoEPP | School of Physics<br>
</div>
</div>
<div dir="ltr"><span style="font-size:12.8px">University of Melbourne</span><br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Wed, 17 Jul 2019 at 21:05, Andy Georges <<a href="mailto:andy.georges@ugent.be">andy.georges@ugent.be</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
Hi Mark, Chris,<br>
<br>
On Mon, Jul 15, 2019 at 01:23:20PM -0400, Mark Hahn wrote:<br>
> > Could it be a RHEL7 specific issue?<br>
><br>
> no - centos7 systems here, and pam_adopt works.<br>
<br>
Can you show what your /etc/pam.d/sshd looks like?<br>
<br>
<br>
Kind regards,<br>
-- Andy<br>
</blockquote>
</div>
</body>
</html>