How to fix CloudLinux error UsePAM yes is missing

How to fix CloudLinux error UsePAM yes is missing


Just recently while going through email notifications for some of my servers, I noticed one of them was showing a CloudLinux error in reference to UsePAM yes being in the sshd_config file.  After checking the /etc/ssh/sshd_config and seeing that entry was in fact in there, I had to do a little bit of research to figure out how to fix it…

The exact error I was getting is this:

Detecting control panel: Control Panel - cPanel Control Panel verion - 11.40.0 
Check /etc/sysctl.conf: fs.enforce_symlinksifowner - 1 
Detecting SuEXEC:WARNING SuEXEC without CageFS jail 
Detecting SuPHP:WARNING SuPHP without CageFS jail 
Check /etc/ssh/sshd_config:WARNING "UsePAM yes" is missing

When I checked the /etc/ssh/sshd_config file “UsePAM yes” was un-commented and technically I shouldn’t be getting that error.

WELL, turns out this is a bug in CloudLinux, and the fix was very simple.

Open up the /etc/ssh/sshd_config file and find the line with UsePAM yes on it.  

If it is already un-commented, add a space before UsePAM yes, so if it looks like this right now:

# this is a comment
# and another one
UsePAM yes

smyles 56 14

All you have to do is add a single space before “UsePAM yes”, save the file and run the check below.

You can test to make sure CloudLinux isn’t having this error anymore by running this command:

cldiag --check-usepam


Source: sMyles
CloudLinux cPanel hosting Linux Software SSH sshd sshd_config suexec suphp Troubleshooting Tutorials usepam