Pluggable authentication modules (PAM)

learn more… | top users | synonyms

0
votes
0answers
11 views

PAM Not Working

I am trying to enable PAM in Ubuntu 14.04, but the rules I am trying are not working, Where as these rules are working with CentOS and RedHat. Can anyone tell me how can I use PAM.
1
vote
1answer
104 views

how to roll back broken privileges in 14.04?

I am running Ubuntu 14.04.3 32bit OS. A few months ago I wanted to install QTCAM from source which it requires systemd library files. As you know 14.04 Ubuntu doesn't use systemd yet, so, as the ...
0
votes
1answer
18 views

Password required to suspend in Kubuntu after the latest upgrade

Looks like something broke PAM yet again. Kubuntu with the Backports PPA asks for my password instead of suspending after a period of inactivity. Anyone found the reason and/or a workaround yet?
0
votes
0answers
12 views

Fingerprint reader authenticates but does not close dialog box

I have a T550 which sports the following reader: Bus 002 Device 016: ID 138a:0017 Validity Sensors, Inc. After plenty of tweaking around I managed to get it to work. I managed to register my ...
0
votes
0answers
35 views

force pam to return success

I want to be able to login (without systemd-user-sessions.service running, is it possible?). I masked the systemd-user-sessions.service, rebooted, but PAM wont let me in (I can login in tty1 though): ...
0
votes
0answers
20 views

How to get rid of “You must choose a longer password” fast and without thinking?

I'm a Slackware user and now I'm here in a Ubuntu 14.04. I tried to change my password (to a simpler one) with passwd and got: You must choose a longer password I did a quick search and found the ...
0
votes
0answers
42 views

How to enable password authentication limit on lock-screen in ubuntu 12.04 ?

I need to limit the user to 3 failed login attempts. If the user doesn't enter correct password after 3 attempts, I need to lock his account for certain configurable period of time. I have read about ...
0
votes
0answers
21 views

iniparser: cannot open /etc/security/pam_winbind.conf

Each time I type a sudo command I get this: iniparser: cannot open /etc/security/pam_winbind.conf What's this error and how can I get ride of it?
3
votes
0answers
64 views

I locked myself out from using su or sudo. I'd like to understand what I did there

In an attempt to increase the numer of files my domino server is allowed to handle, I changed /etc/security/limits.conf, adding following lines. notes soft nofile 60000 notes hard nofile 60000 ...
0
votes
1answer
59 views

samba4 nslcd lightdm and pam_mount

I'm stuck with my setup and hoping for some help. I've setup an AD with Samba4 and nslcd as nss both on the server and the clients. I'm aware that Samba does not recommend running the AD and ...
1
vote
0answers
33 views

winbind and passwd issues

I successfully configured a Ubuntu 15.10 Workstation to authenticate against Active Directory. The only thing left so far is the ability to change the Active Directory password. When I enter the ...
0
votes
1answer
95 views

How to get PamUSB working again in Ubuntu 15.10

I use pamusb to authenticate via a USB key. However pamusb seems to have been removed from Ubuntu 15.10. That's fine, but what is the replacement? How can I do USB key authentication in Ubuntu ...
0
votes
0answers
26 views

pam_mount, pam_ldap and screen unlocking

I am having trouble getting these three components to work in an ldap environment: authenticate the ldap user mount a folder (type cifs) on login using pam_mount be able to unlock the screen once it ...
2
votes
1answer
31 views

how to check what incorrect password as attempted

In /var/logs/auth.log I can see the unsuccessful login attempts. They are like lines below: Oct 16 05:04:02 myMachine unix_chkpwd[15793]: password check failed for user (user1). Now is there a way ...
0
votes
1answer
27 views

Using ONLY Pamusb as authentication

Is it possible to only use pamusb to login (into xfce/lightdm) and not have a password at all? When I try to change pamusb to required in /etc/pam.d/common-auth and comment out the password thingie I ...
2
votes
1answer
145 views

sed permission denied when using pam_exec with su

I'm using pam_mount.so to automatically mount a CIFS share for users on an Ubuntu 14.04 client. pam_mount uses a local conf in every users home directory. I'm running a bash script with pam_exec that ...
2
votes
2answers
84 views

pam_tally2 doesn't count fails over ssh

I have added line auth required pam_tally2.so deny=3 unlock_time=180 to my /etc/pam.d/login file, and that's fine and dandy in tty, after 3 attempts testuser gets suspended. However, that very ...
0
votes
0answers
73 views

How to Fuse Mount into Home Folders - After EcryptFS is mounted?

Question: In Linux, how do you automate a folder to be mounted into a User's Home Folder? -- But with these constraints: Only After their Encrypted Home Folder has been mounted -- so the mount ...
0
votes
0answers
19 views

password changed by poppassd doesn't reflect smbpasswd

I have installed poppassd and coded a php script for users to change their passwords via web. However I noticed that what being changed via poppassd did not reflect users' samba password. Any pointers ...
0
votes
0answers
25 views

What pam packages to install so that PAM running on OSx will compile and run on Ubuntu 15.04

In the Ubuntu Linux-pam 1.1.8 package the pam_prompt function is a void while in Linux-Pam and BSD packages it is a int function. Why the difference? We have PAM running on OSX and want to now use ...
3
votes
1answer
163 views

How to validate passwords with pam

I have got a bash script which asks for your password, and then needs to validate the password using pam, I have installed libpam0g-dev as I understand I need it for this, but how exactly do I go ...
0
votes
0answers
47 views

How do I enter password via keyboard without using pamUSB?

I installed pamUSB and I have used my USB flash drive to store and enter my password automatically in ubuntu 14.04. But my USB memory is formatted. Therefore, the system shows the following message ...
0
votes
0answers
290 views

NGINX Auth support and MYSQL

I have installed NGINX server. The requirement is to allow only certain IP addresses to access this service. The list of allowed IP are stored in a MYSQL database. I was able to install and configure ...
1
vote
0answers
242 views

Why do I have to set usePAM to 'no' to manage a ssh connection?

I have a system user named user1 (the main one). I've tried to set a ssh connection between a user named foreignuser and the main one (user1). For that, I've generated a couple of keys with ...
0
votes
0answers
46 views

Ubuntu 12.04 pam_tally2 counter increments by 2 instead of 1

I am a high school CS coach and am preparing a lesson on Ubuntu 12.04 failed login attempts (pam_tally2) with the objective of demonstrating how to lock out a user after x failed login attempts. I ...
0
votes
0answers
202 views

Mail server PAM authentication error

Few days ago, the mail server wasn't able to send any mail (only receiving), i checked the logs and found many errors "wrong authentication and buffer error" auth_pam: pam_authenticate failed: Memory ...
0
votes
1answer
94 views

systemd in LXC endlessly trying to umount pam_mount home

I use the following $HOME/.pam_mount.conf.xml to mount an LXC container filesystem when I log in via SSH: <?xml version="1.0" encoding="utf-8" ?> <!DOCTYPE pam_mount SYSTEM ...
0
votes
0answers
259 views

How to authenticate users via PAM using freeradius?

I have like 20 users in server2, and I need to configure PAM on server1 to authenticate users against /etc/passwd file using freeradius which is configured on server2 with a shared secret ...
3
votes
0answers
161 views

SSH with PAM Google

I have a server with Google Authenticator enabled. It worked fine, and one day I tried to login, and suddenly I'm not able to. Fortunately, I do have Ajenti installed with a terminal, so it's not a ...
0
votes
0answers
28 views

Conditional authentication

I want to use the following authentication in Linux: If during the boot flash drive is connected, the logon to the operating system is performed by the user "user1", in this case should be carried out ...
0
votes
0answers
14 views

Defining what happens after trying 3 times to add a user with a pass that doesn't match the pass-policy set in pam.d

I've set a password policy, when creating a user for example, so that just passwords with at least 1upper- 1lower-case, 1symbol, 1digit and minimum 10character length are accepted. Now the problem ...
0
votes
1answer
835 views

How to suppress pam_unix(sshd:session): session closed for user

I have a Ubuntu (14.x) host serving as a git repository box (via GitLab CE). Around 50 users are using shared user (in this case "gitlab") to connect to the box to sync their repositories. This method ...
1
vote
1answer
209 views

Can't log in from terminal

I have a server with a hosting provider (OVH). I've never had any trouble logging in via SSH, but I use RSA authentication, so I'm not sure if I could actually get in with a password. However, when ...
1
vote
0answers
92 views

Gnome-keyring is not being unlock when i log in in gdm

My ubuntu 14.04.2 is always asking the password for gnome-keyring after login. I want to automatically unlock that, but all that I've found is for too older versions of Ubuntu, and seems that answers ...
3
votes
1answer
2k views

how to setup two factor authentication in Ubuntu for Ubuntu users using Google authenticator?

How to setup two factor authentication in Ubuntu for Ubuntu users using Google authenticator (It can also be setup for non Google accounts)?
0
votes
0answers
226 views

PAM searches /lib/security when modules in /lib/x86…/security

While configuring PAM, many times I notice an error like Apr 12 11:09:09 localhost vsftpd: PAM unable to dlopen(pam_umask.so): /lib/security/pam_umask.so: cannot open shared object file: No such file ...
1
vote
1answer
437 views

PAM LDAP pam_ldap.so: failed to map segment from shared object: Cannot allocate memory

Im trying to get VSFTPD to work with LDAP using PAM. (since it does not sleep with SASL) If I login into FTP with a Shell credentails it works fine, but when I try to use an LDAP creds to login via ...
0
votes
0answers
219 views

Active Directory authentication with winbind on ubuntu 14.04 LTS not working

I am using Ubuntu 14.04 LTS and all required packages are already installed and I have configured /etc/samba/smb.conf file and /etc/krb5.conf file. The server is joined successfully to AD Server. I ...
5
votes
1answer
1k views

Permanently raising nofile limits in Ubuntu 14.04 LTS

I cannot seem to figure out what exactly is needed to allow the maximum number of file descriptors to be raised permanently for all users. /etc/security/limits.conf: root hard nofile ...
2
votes
0answers
88 views

How does LightDM treat PAM?

I use XFCE as my desktop, and I wanna know how LightDM works with PAM. when I use normal kernel arguments, LightDM starts and then XFCE is started by LightDM. When I add "text" to kernel parameter, ...
1
vote
1answer
202 views

Why dpkg asks “Override local changes to /etc/pam.d/common-*?” when libpam-runtime/override is set to false?

In my system, libpam-runtime/override is set to false (which I can see using debconf-get-selections). Why when upgrading the system, specifically libpam-systemd, dpkg still pops up the window ...
0
votes
1answer
311 views

Slow login when CIFS mounts are unavailable

I installed a PC with Ubuntu 14.04, Sssd and accounts in our OpenLDAP directory. Network shares residing on our Samba server are mounted automatically when a user logs in, through pam_mount ...
1
vote
0answers
930 views

What is the correct way to modify /etc/pam.d/common-auth?

By default /etc/pam.d/common-auth looks like this $ cat /etc/pam.d/common-auth # # /etc/pam.d/common-auth - authentication settings common to all services # # This file is included from other ...
2
votes
0answers
366 views

How do we implement requirements of password policy?

This question might look similar but I could not find a solution to this which covers all the below requirements of the policy, Hence please help me: - Incorrect pass lockout (after 3 incorrect ...
0
votes
1answer
884 views

How to install PECL PAM in Ubuntu 14.04

Can any one help to install PECL PAM in ubuntu 14.04 system . I have tried to install via terminal using sudo aptitude install php5-auth-pam this is what we get "Couldn't find any package whose name ...
1
vote
0answers
78 views

Can login via ssh, but not system tty

Here's something weird. I can: ssh xyz@localhost provide my password, and login as xyz. However, I if hit ctrl-alt-F3 to go to the system prompt, and try to login as the same user xyz I get a ...
2
votes
1answer
1k views

Why is sssd an unrecognized service, even though it is installed and can be restarted?

Why is sssd an unrecognized service, even though it is installed and can be restarted? BTW: This concerns Ubuntu 14.04.1 LTS, it was not like that in 12.04 I will show what I mean below, I think it is ...
0
votes
1answer
134 views

Kerberos/NIS users require shadow hack

If I have a Ubuntu system to use Kerberos for authentication and NIS for information, users cannot log in unless I copy the content of my NIS shadow map to /etc/shadow. They get insta-rejected. If I ...
2
votes
0answers
852 views

Can't authenticate against LDAP. /etc/nsswitch.conf seems to be ignored

Running ubuntu 14.0.4.1 on a BananaPi (ARM). I've had a lot of luck getting LDAP authentication to work under 14.0.4 on x86, but something about this just isn't working. If you run getent passwd | ...
2
votes
0answers
183 views

How to enforce LDAP group membership with libpam_ldap for SSHD

I am running 14.04 servers that I have install the ldap authentication package ldap-auth-client on and configured to connect to our LDAP servers. I have the authentication part working as well as the ...