Can not ssh into servers

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

Cannot verify a Linux/Unix account in PAM.

Environment

Release : 4.0.x and 4.1.x

Component : PRIVILEGED ACCESS MANAGEMENT

Resolution

In our logs (Tomcat) -> we are getting the following error

{log = 'com.cloakware.cspm.server.plugin.ScriptProcessorImpl$Log@30fa8786'}, {result = 'Error Code: -1

even though our login was successful.  

Ultimately for PAM to be successful, when we log in, we do the following right away:

echo $?

If it returns a 0 -> that means the login was successful.  Anything else is not successful -> they were getting a -1.

Traditionally when we see this -> if we take PAM out of the equation and log in directly and do a echo $? -> to see the results.

It it is a non-zero -> we have to look at the /etc/profile or the user's .profile to see what is causing this.