[CLUG] SSH Public Key authentication

[David Dorgan]

Quoting ghooton (g.hooton at ucc.ie):
> I discovered that all the users the are requesting
> pass words have UID < 1000.

This is probably a PAM feature. Look in /etc/pam.d/system-auth
(or if you have pointed this elsewhere, then go look there).

You might see:
account sufficient pam_succeed_if.so uid < 1000

This is the offending line. But this is done for
a reason. If you change anything here, it could have
a security effect.

Another idea might be changing this line to optional.

> Any ideas ?

More logs would be good, a tail of /var/log/secure
might show it, but if that is the case, go to
/etc/pam.d/system-auth and put the debug option in
for all the modules (except pam_deny.so).

David