-# This example is a stock debian "login" file with libpam_arvados -# replacing pam_unix, and the "noprompt" option in use. It can be -# installed as /etc/pam.d/shellinabox . +# This example is a stock debian "login" file with pam_arvados +# replacing pam_unix. It can be installed as /etc/pam.d/shellinabox . auth optional pam_faildelay.so delay=3000000 auth [success=ok new_authtok_reqd=ok ignore=ignore user_unknown=bad default=die] pam_securetty.so @@ -160,7 +159,11 @@ session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux session required pam_env.so readenv=1 session required pam_env.so readenv=1 envfile=/etc/default/locale -auth [success=1 default=ignore] pam_python.so /usr/lib/security/libpam_arvados.py ClusterID.example.com shell.ClusterID.example.com noprompt +# The first argument is the address of the API server. The second +# argument is this shell node's hostname. The hostname must match the +# "hostname" field of the virtual_machine record. +auth [success=1 default=ignore] /usr/lib/pam_arvados.so ClusterID.example.com shell.ClusterID.example.com + auth requisite pam_deny.so auth required pam_permit.so @@ -180,5 +183,8 @@ session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux h2(#confirm-working). Confirm working installation -A user should be able to log in to the shell server, using webshell via workbench. Please refer to "Accessing an Arvados VM with Webshell":{{site.baseurl}}/user/getting_started/vm-login-with-webshell.html +We recommend using the "Cluster diagnostics tool.":diagnostics.html + +Here are some other checks you can perform manually. +A user should now be able to log in to the shell server, using webshell via workbench. Please refer to "Accessing an Arvados VM with Webshell":{{site.baseurl}}/user/getting_started/vm-login-with-webshell.html