How to fix CloudLinux error UsePAM yes is missing

How to fix CloudLinux error UsePAM yes is missing

CloudLinux

Just recently while going through email notifications for some of my servers, I noticed one of them was showing a CloudLinux error in reference to UsePAM yes being in the sshd_config file.  After checking the /etc/ssh/sshd_config and seeing that entry was in fact in there, I had to do a little bit of research to figure out how to fix it…

The exact error I was getting is this:

Detecting control panel: Control Panel - cPanel Control Panel verion - 11.40.0 
Check /etc/sysctl.conf: fs.enforce_symlinksifowner - 1 
Detecting SuEXEC:WARNING SuEXEC without CageFS jail 
Detecting SuPHP:WARNING SuPHP without CageFS jail 
Check /etc/ssh/sshd_config:WARNING "UsePAM yes" is missing

When I checked the /etc/ssh/sshd_config file “UsePAM yes” was un-commented and technically I shouldn’t be getting that error.

WELL, turns out this is a bug in CloudLinux, and the fix was very simple.

Open up the /etc/ssh/sshd_config file and find the line with UsePAM yes on it.  

If it is already un-commented, add a space before UsePAM yes, so if it looks like this right now:

# this is a comment
# and another one
UsePAM yes

advertisement:
smyles 56 14
sMyl.es

All you have to do is add a single space before “UsePAM yes”, save the file and run the check below.

You can test to make sure CloudLinux isn’t having this error anymore by running this command:

cldiag --check-usepam

Profit!

 
Source: sMyles
CloudLinux cPanel hosting Linux Software SSH sshd sshd_config suexec suphp Troubleshooting Tutorials usepam