Why do I have in /etc/pam.d a link between system-auth and system-auth-cm when before upgrading the link was between system-auth and system-auth-ac ?


Article ID: 127921


Updated On:


CA Virtual Privilege Manager CA Privileged Identity Management Endpoint (PIM) CA Privileged Access Manager (PAM)


Before PIM was upgraded to 12.8 SP1 build 3134, when we checked the files in /etc/pam.d we could see that a link existed between system-auth and system-auth-ac. 

However, after installing the new version, the link has changed and we seen now that the link is made between system-auth and system-auth-cm. This disrupts our procedures because we have some changes made to system-auth-ac. Why has this changed ?


CA PIM 12.81 SP1 build 3134


Basically what happens is that when installing, CA PIM is renaming system-auth-ac to system-auth-cm to prevent it from being overwritten when authconfig --update is run. authconfig --update creates a default system-auth-ac which contains just the basic links 

In this particular case it seems it has not been renamed back to system-auth-ac so the old link remains. In general it is safe to recreate the old link if the system has not been able to do so. Check, however, the contents of both files, system-auth-ac and system-auth-cm before restoring the old link to make sure there have not been significant changes introduced with the new version, and to take them into account if necessary.