Trying passworded user with PAM

stackhpc · Aug 15, 2023 · 131a45c · 131a45c
1 parent be0ec37
commit 131a45c
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/image/Dockerfile b/image/Dockerfile
@@ -46,6 +46,7 @@ RUN set -ex \
        openssh-server \
        apptainer \
        ondemand \
+       mod_authnz_pam
     && yum clean all \
     && rm -rf /var/cache/yum
 
@@ -93,7 +94,7 @@ RUN mkdir /etc/sysconfig/slurm \
     && useradd -r --uid=990 slurm \
     && chown -R slurm:slurm /var/*/slurm* \
     && useradd -u 1000 rocky \
-    && usermod -p '*' rocky # unlocks account but sets no password
+    && usermod -p 'openssl password' rocky
 
 VOLUME /etc/slurm
 COPY docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh

diff --git a/image/docker-entrypoint.sh b/image/docker-entrypoint.sh
@@ -131,6 +131,10 @@ then
 
     /usr/libexec/httpd-ssl-gencerts
 
+    cp /etc/pam.d/sshd /etc/pam.d/ood
+    chmod 640 /etc/shadow
+    chgrp apache /etc/shadow
+
     mkdir --parents /opt/rh/httpd24/root/etc/httpd/
     /usr/bin/htpasswd -cb /opt/rh/httpd24/root/etc/httpd/apache-passwords rocky $ROCKY_OOD_PASS