启用UsePAM后用户登录失败

在configure openssh时，有设置参数 –with-pam，会提示：

PAM is enabled. You may need to install a PAM control file for sshd, otherwise password authentication may fail. Example PAM control files can be found in the contrib/subdirectory

在此之后登录服务器时，会发生登陆失败的问题。再次把UserPAM的参数禁用掉才可以正常登录服务器。

解决方法：

1. 备份原文件/etc/pam.d/sshd，将以下内容覆盖写入/etc/pam.d/sshd

#%PAM-1.0
auth       required pam_sepermit.so
auth       include      password-auth
account    required     pam_nologin.so
account    include      password-auth
password   include      password-auth
# pam_selinux.so close should be the first session rule
session    required     pam_selinux.so close
session    required     pam_loginuid.so
# pam_selinux.so open should only be followed by sessions to be executed in the user context
session    required     pam_selinux.so open env_params
session    optional     pam_keyinit.so force revoke
session    include      password-auth

2. 完成之后重启sshd。
3. 最后再次尝试登录服务器验证问题是否解决。