Modifying the PAM Configuration on HDInsight Standard

As mentioned in a previous blog post on HDInsight standard, Microsoft modify the PAM configuration (at least this is the case on HDInsight 3.5) such that when you create a user and try to set the password you are asked to set the password twice.

The gist below can be used to reset the PAM configuration. In the code below the various PAM configuration files have been gzipped and base64 encoded.

This technique of using gzip compressed and base64 encoded files is very useful when running script actions on HDInsight or even configuring VMs via custom script actions on Linux.

echo 'H4sIACqlxVgAA5VUyW7bMBA9218xiA9JANtpeigKFDnkAwoEaG9FEYzFkT0xRapc7Khf30dKNrK0
h54Mk5w3b5nRYr6gG0nNTc/d2tw0vuu8W3HT+OwSrYhz2vmgvzmpdxQlJXXbSOM7Sp7YWhyHgzYS
5wugfd9ppFatEH7VNTYbMdQG35FPOwmn16vYS6OtNvRw/xWArtVtrYtLoLAzFHc+W1OuEqsjJqsx
kW8JMG+Idd5kVOKGExlp1QlAyrtGXApsCZIkRuq91Wag1gfKUahowKM4xCTdmkBeSjlnmwr95IHi
nR1w6IYT8yIbxSHScecBMrkViYOQPPcaIBiEq69xx8Yf19Wa+1jYw2m6XX9Y364+LdH9hVsdO96i
djOUR6sicZV7w0nK0cRrXTz2lHiPzubAMGcroysal6SVeJCSkLhiffVk8HnyOIMkuwEo1jcw5mSd
aE1nI/AGeIG4TfifXjiyQcV+WbOBfiC8ZQljRg2wykpTowGzMfepEVz+Jn8pvvp8XWMxgrRtLI7h
EQql+lp49BJWPTf70uBE+6pcXDwE7TgMFyPF6/kUyexHzDX3u4/k5PhY2iW/fwzyy9wZ787S7nTr
IPvnDKQes9PndfT0HuX2P1CO6jbqTAUadVzGqqLFymyggrQl5ychVFuIieemQM8aNclsVvHKBAKs
GAexoyExFZwjksN29B6v9SAIP+Xg6MA2S2mSqoka3SW2B2zZBmEzfKkbgmHhg1cTEelUiQ1HxiQh
II6njJ3bSMNlXRySLLf4DqCMJlswWKYEGrHtI69TOLzx4HNUfCOEm90I9pS7HpFCpHktFmszaUXQ
naZRbZm28xR0ZTb/PQb3xmgZOrbnSVgQtmBau1ezOm7D/A8+arm/AQUAAA==' | base64 -d | gunzip > common-account
echo 'H4sIAK2lxVgAA3VUTWvbQBA9279iiA9JwFaaQkuh5GBoC6UpBNqeSjGr3ZE9sbSr7odd/fu+Xckh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' | base64 -d | gunzip > common-auth
echo 'H4sIAPSlxVgAA3VU224TSRB9tr+i5DwEpHiCg2BXu/KDiSIhIS7agHhYIW/PdI1duKd76IuD/35P
zy0EyNNcuuvUqVOn6mx+Rpccq8tWNYW+rFzTOLtsVQh3zmta0vi69GxUZE2N08lwoP4qRUfKGArs
j1JxmJ8B8ONeAtVimPAUW5mkEVh715CLe/bj7WVouZJaKvqweQtAW8uuiwsXQFFWU9i7ZHQ+ikos
KTISIrl6YhH3KpLmWizjnScemVfJQEkBqfFR7ZXdcf70U02hIHDlHK+SiZktZNgmK9+LOWJvvrdG
WRUFdSLneEauzb/CX0OxTIuwVy9WV4vhhNiqMrMLymTJbl9vcPog7WeJKC2CM5L2Ubnm+JDNp5yt
8qc2IuSDF+cJbWAVgN0XhvtDzkWjXyyKe0quDFXyPHHyjGI6ZXIMRP3v/avb60//3GyvX99cv7nd
3rzbvDofb4sFjnE7sQX4hB73lnuRJyEaZVsFVWsQ6zs7SNPJtwmDarQqnhWr5cuLvtzRGYhGsKby
lC8tVYr7ZWo1XJZ/DTIUuR5HUR2YlD4qGAEJgZuhLkg6nTxnN7LVnSRwxMmlwU+QAE46ddVUykzG
Yen4lgzuwPOk6ojvHxtQIuJw0fkQYgPhZ5awVV8DbGe4Gn3SKzEkQuMg26/BT/582smmGc42vWAI
A1k/iMwec1gdMvxI+kk+WMAIjfKnRU/w6Xz01czztyRBIs9ms9yjyiPeSFkEB4miP62fk5baHfKz
8qwlrpcrMuPrFTViDdv16hm5+/M0vd6n+jekCmYK66tRrrXsLKT8MptGCFkHE2b9trn46A4EHtta
fIjbjEb96IBfw03Jfv3Hb5KsfpvkTmwpVuc8j+MPsp73vq+xq0qIQlKTdYOu1KVhHR5XUrM9IU9u
I8QfVk3MQHfwEfZS63Bbjpx1Tt7SUZnEOUvsmirBnmNvYUkp41np09/dsMO66uhE52keIsXu4Dhi
72GOrwnbruRKoT7wRQBOA0eE0aANbK6zvQL2bM9rNIsqHfjcCbYzq2rfg31NTQuLuWT1T9Wix0Ox
cF4jsS83m3+yZZNH5XFfbjRcghlQZrLmGVahHrbAg9Hph3P+Pyb57/5/BgAA' | base64 -d | gunzip > common-password
echo 'H4sIADemxVgAA3VUy27bMBA8x1+xsA95wFKaS1Gg6CEfUCBAcyuKghJX9sYUqfLhVH/fIfVImqYH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' | base64 -d | gunzip > common-session
echo 'H4sIAH6mxVgAA3VUy27cMAw8b76C2BySAGunuRQFih7yAQUCNLeiKGSJ3mVWllw9NvXfdyTbmzRN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' | base64 -d | gunzip > common-session-noninteractive
The code creates files:

  • common-account
  • common-auth
  • common-password
  • common-session
  • common-session-noninteractive


These should replace the ones in /etc/pam.d/

Comments

Popular Posts