Mention how to configure pam_hpsec on HP-UX to play nicely with sudo.

diff --git a/INSTALL b/INSTALL
index 35065407c917f6b0a4c58ee8dcd6a1f292140abc..7c9d32a68e5564a093579b4a585b182b9d95a9cf 100644 (file)
--- a/INSTALL
+++ b/INSTALL
@@ -738,6 +738,12 @@ HP-UX:
 
     sudo       session required        libpam_hpsec.so.1 bypass_umask
 
+    If every command run via sudo displays information about the last
+    successful login and the last authentication failure you should
+    make use an /etc/pam.conf line like:
+
+    sudo       session required        libpam_hpsec.so.1 bypass_umask bypass_last_login
+
 Digital UNIX:
     By default, sudo will use SIA (Security Integration Architecture)
     to validate a user.  If you want to use an alternative authentication

diff --git a/configure b/configure
index 91313be886a847b70cda670ab50fc4e101076641..7561536ea67cccddabb25b6421453160bd66db4d 100755 (executable)
--- a/configure
+++ b/configure
@@ -22023,6 +22023,14 @@ fi
 
 if test "$with_pam" = "yes"; then
     case $host in
+       *-*-hpux*)
+           if  -f /usr/lib/security/libpam_hpsec.so.1 ; then
+               { $as_echo "$as_me:${as_lineno-$LINENO}: You may wish to add the following line to /etc/pam.conf" >&5
+$as_echo "$as_me: You may wish to add the following line to /etc/pam.conf" >&6;}
+               { $as_echo "$as_me:${as_lineno-$LINENO}: sudo session required libpam_hpsec.so.1 bypass_umask bypass_last_login" >&5
+$as_echo "$as_me: sudo session required libpam_hpsec.so.1 bypass_umask bypass_last_login" >&6;}
+           fi
+           ;;
        *-*-linux*)
            { $as_echo "$as_me:${as_lineno-$LINENO}: You will need to customize sample.pam and install it as /etc/pam.d/sudo" >&5
 $as_echo "$as_me: You will need to customize sample.pam and install it as /etc/pam.d/sudo" >&6;}

diff --git a/configure.in b/configure.in
index ee4007fd34f6413fb8163ab3cca1446c1e3c6287..57374bbca2686c6c72601b63e097597a36d514fd 100644 (file)
--- a/configure.in
+++ b/configure.in
@@ -3065,6 +3065,12 @@ dnl Spew any text the user needs to know about
 dnl
 if test "$with_pam" = "yes"; then
     case $host in
+       *-*-hpux*)
+           if [ -f /usr/lib/security/libpam_hpsec.so.1 ]; then
+               AC_MSG_NOTICE([You may wish to add the following line to /etc/pam.conf])
+               AC_MSG_NOTICE([sudo session required libpam_hpsec.so.1 bypass_umask bypass_last_login])
+           fi
+           ;;
        *-*-linux*)
            AC_MSG_NOTICE([You will need to customize sample.pam and install it as /etc/pam.d/sudo])
            ;;