Mention how to configure pam_hpsec on HP-UX to play nicely with

sudo.

--HG--
branch : 1.7

diff --git a/INSTALL b/INSTALL
index a8b0e37dcdbb92fe954b865fc8aab10dda06c72f..0c26377621158362afbe162506b31d2cf48d76cb 100644 (file)
--- a/INSTALL
+++ b/INSTALL
@@ -737,6 +737,12 @@ HP-UX:
 
     sudo       session required        libpam_hpsec.so.1 bypass_umask
 
+    If every command run via sudo displays information about the last
+    successful login and the last authentication failure you should
+    make use an /etc/pam.conf line like:
+
+    sudo       session required        libpam_hpsec.so.1 bypass_umask bypass_last_login
+
 Digital UNIX:
     By default, sudo will use SIA (Security Integration Architecture)
     to validate a user.  If you want to use an alternative authentication

diff --git a/configure b/configure
index cc1db331e2ff727bfff7249126b6694acb9a7b05..8c19e5c09910630d584ca58f29f0e42c07ecc86f 100755 (executable)
--- a/configure
+++ b/configure
@@ -22111,6 +22111,14 @@ fi
 
 if test "$with_pam" = "yes"; then
     case $host in
+       *-*-hpux*)
+           if  -f /usr/lib/security/libpam_hpsec.so.1 ; then
+               { $as_echo "$as_me:${as_lineno-$LINENO}: You may wish to add the following line to /etc/pam.conf" >&5
+$as_echo "$as_me: You may wish to add the following line to /etc/pam.conf" >&6;}
+               { $as_echo "$as_me:${as_lineno-$LINENO}: sudo session required libpam_hpsec.so.1 bypass_umask bypass_last_login" >&5
+$as_echo "$as_me: sudo session required libpam_hpsec.so.1 bypass_umask bypass_last_login" >&6;}
+           fi
+           ;;
        *-*-linux*)
            { $as_echo "$as_me:${as_lineno-$LINENO}: You will need to customize sample.pam and install it as /etc/pam.d/sudo" >&5
 $as_echo "$as_me: You will need to customize sample.pam and install it as /etc/pam.d/sudo" >&6;}

diff --git a/configure.in b/configure.in
index 3351322c7fcda74caa6eace519f56c25a2e93fca..ccce9ba9c5ccdcf26e04d1a2f347d182e3bd4856 100644 (file)
--- a/configure.in
+++ b/configure.in
@@ -2978,6 +2978,12 @@ dnl Spew any text the user needs to know about
 dnl
 if test "$with_pam" = "yes"; then
     case $host in
+       *-*-hpux*)
+           if [ -f /usr/lib/security/libpam_hpsec.so.1 ]; then
+               AC_MSG_NOTICE([You may wish to add the following line to /etc/pam.conf])
+               AC_MSG_NOTICE([sudo session required libpam_hpsec.so.1 bypass_umask bypass_last_login])
+           fi
+           ;;
        *-*-linux*)
            AC_MSG_NOTICE([You will need to customize sample.pam and install it as /etc/pam.d/sudo])
            ;;