Does RSA PAM Agent support SELinux?
Originally Published: 2008-12-12
Article Number
Applies To
Redhat
SELinux Security Enhanced Linux
Support for SELinux
Issue
What can I configure with SELinux?
acetest authentication works
Authentication via SSH or other method fails with RSA
Resolution
Contact RSA Support to Request an Enhancement to the PAM agent if you need full support for SELinux
Red Hat Linux (all supported versions):
1. Change to /etc/pam.d and open the login file.
The following text is displayed:
#%PAM-1.0
auth required pam_securetty.so
auth required pam_stack.so service=system-auth
auth required pam_nologin.so
account required pam_stack.so service=system-auth
password required pam_stack.so service=system-auth
RSA Authentication Agent 6.0 for PAM Installation and Configuration Guide
# pam_selinux.so close should be the first session rule
session required pam_selinux.so close
session required pam_stack.so service=system-auth
session required pam_loginuid.so
session optional pam_console.so
# pam_selinux.so open should be the last session rule
session required pam_selinux.so open
2. Comment out the following lines:
auth required pam_securetty.so
auth required pam_stack.so service=system-auth
auth required pam_nologin.so
3. Replace them with the following lines:
auth required pam_securid.so
auth required pam_ldap.so
Notes
Enhancement Request ID: AAPAM-370
Related Articles
Does RSA Security supply schema files for Oracle LDAP server? Number of Views PAM agent fails on acetest with error 'Cannot Do AceInitialize for communication with ACE/Server' | RSA Authentication Man… Number of Views RSA Authentication Agent 7.1 for PAM for AIX acetest program fails to authenticate a username Number of Views How to turn on debug logging to troubleshoot AFX connectors in version 7.5.2 of RSA Governance & Lifecycle Number of Views RSA MFA Agent 9.0 for PAM - Installation and Configuration Guide for Solaris Number of Views
Trending Articles
RSA Authentication Manager 8.9 Release Notes (January 2026) How to delete old or pending certificate signing requests for RSA Authentication Manager console or virtual host replaceme… Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory How to import CA signed console cert from AM 8.x primary into a new primary with same FQDN How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device
Don't see what you're looking for?
