Pluggable authentication modules (PAM)

learn more… | top users | synonyms

1
vote
0answers
26 views

PAM authentication using ssh key instead of password

When I try to use chsh to change my default shell, I get prompted for my user password. The problem is I log in using my SSH key and do not have a user password - by design. Yes, I can set a ...
4
votes
1answer
62 views

How do I enable a specific pam config in the lockscreen?

In Trusty, there is a new lockscreen that fits the look and feel of lightdm, and shares some config files, especially for pam. I am using libpam-fprintd to allow using my fingerprint reader when ...
-1
votes
0answers
14 views

Server allows users to log in with any random password but not correct password

I just realized that any valid user can ssh into my 12.04 server with any random password, but they cannot log in with a correct password ("Permission denied, please try again."). Accounts are from ...
0
votes
0answers
14 views

How to change location of .config directory

My home directory is located on a network filer with fixed quota. I'm running out of my quota as different applications saving their data in home directory. For example google-chrome, storing data ...
0
votes
0answers
19 views

PAM authentication failure

I got a dedicated server from a reputable hosting company. Unfortunately, they're one of those companies that thinks enabling root access is a good idea. I've successfully disabled root access and ...
0
votes
1answer
28 views

Non-root users to shutdown using PAM

I want to configure PAM to enable non-root normal users to be able to shutdown. how to do that? I'm using Ubuntu server 12.04 I know how to do that with many ways such as changing permissions of ...
0
votes
1answer
31 views

filter PAM_yubico.so debug stdout

I want to use the yubico-pam module (https://github.com/Yubico/yubico-pam) to enable challenge-response authentification using my yubikey when sudoing. I've managed to do that by adding the line ...
0
votes
1answer
84 views

Kerberos and google-authenticator (2-factor auth)

Does anyone know how can I use google-authenticator in combination with kerberos and thus provide to my users 2-factor authentication?
0
votes
0answers
51 views

libnss-extrausers change password

I have Ubuntu 12.04. Installed libnss-extrausers and configured nsswitch.conf. Now, users registered in /var/lib/extrausers/{passwd,group,shadow} are recognized by the system and can login. However, ...
0
votes
0answers
50 views

Running xrandr With pam_exec

Can anyone tell me why xrandr doesn't work when I run it using pam_exec? I'm having the same issue as 12.04 Resolution Changes on Lock + KVM only in 13.10, but I think I'm close to a solution. It's ...
0
votes
1answer
175 views

vsftpd hanging when using pam_exec or pam_script

I have VSFTPD integrated with pam_mysql, allowing me to successfully login to an FTP server using accounts kept in a mysql database. I need to automatically create a directory for the user if it is ...
0
votes
1answer
97 views

MOTD is updated very rarely

I understand that pam_motd updates the MOTD upon login, but sometimes MOTD just doesn't get updated for days and I'm puzzled what might be the reason. I'd like to add uptime and who outputs to the ...
1
vote
1answer
191 views

Sudo does not recognize my password anymore

The problem is happening on a remote server, so everything is done through ssh. I can login with my key, no problem here. I can change my password at will with passwd (which I believe shows that it's ...
-1
votes
1answer
52 views

Gnome doesn't store password in keyring

I'm on 12.04, trying to extract my login credintials from ~/.gnome2/keyrings/login.keyring and not having much luck, looks like that keyring is empty. seahorse is showing it as an empty keystore. I ...
0
votes
0answers
212 views

How to mount a Truecrypt volume with cryptsetup 1.6 and above via pam_mount?

I installed cryptsetup 1.6.2 in 13.10 from this PPA. Versions above 1.6 feature Truecrypt volume support and I can successfully mount my volume from the terminal but haven't been able to automatically ...
0
votes
0answers
39 views

How to get users accounts info on Ubuntu Desktop using Mono C#?

Is there an Mono C# class or lib their can retrieve info abort all local users accounts on a Ubuntu/ linux system? For Ubuntu systems their is NOT on an domain-controller.
2
votes
2answers
1k views

Type password into login screen, hit enter - nothing happens

I first install Ubuntu 13.10 a few weeks ago and its been going great. I'm still pretty new to Linux, so I haven't been doing a whole lot. The past couple days I've tried installing LAMP, then ...
2
votes
1answer
33 views

how to manage ubuntu users from php

I have an Ubuntu 12.04 server machine in a local net, and I would like to log in my user through php. I have tried with pam_auth() but it wasn't configured neither activated for php. I tried a ...
0
votes
1answer
574 views

Getting error sudo: pam_authenticate: Module is unknown

I am new to Ubuntu and have installed Ubuntu 12.04.3 on my laptop. I need to install VAS on it but when I do I get the error: sudo: pam_authenticate: Module is unknown. And I cannot make any other ...
1
vote
3answers
125 views

Restore accidentally with rm'ed pam.conf?

I have accidently removed the files /etc/pam.conf and /etc/security/pam_env.confusing rm. Now I get this error message when I try to use sudo: sudo: unable to initialize PAM: No such file or ...
0
votes
0answers
245 views

Login with facial recognition in Ubuntu 13.04?

I have tried to install „PAM face authentication“ with the following commands: sudo add-apt-repository ppa:antonio.chiurazzi sudo apt-get update sudo apt-get install pam-face-authentication But it ...
0
votes
1answer
84 views

Identification and Authentication methods in Ubuntu

Since I have a very long password, I would like to additionally use an alternative login method. Which other authentication methods are possible in Ubuntu to log in?
0
votes
1answer
99 views

How to make sshd create non-existing user when using kerberos?

I am setting my sshd to use kerberos auth. Everything was fine until I actually login via ssh. I got invalid user. If I added the account to the server running sshd, then I could login using password ...
0
votes
0answers
50 views

Cascading Authentication PAM login

I'm trying to set up an authentication scheme for Ubuntu using the pam files. However, I cannot figure out how to have two separate methods of authentication. I've set up a Yubikey authentication, ...
1
vote
0answers
90 views

pam radius module access-reject

I am trying to set up an Ubuntu server that my users will connect to. I already have a Radius server running on a Windows box, and I would like for connections to this Ubuntu box to authenticate to ...
0
votes
0answers
122 views

USB PAM login with SD Card

I am trying to set up a PAM login token. I want to use an SD card instead of a normal USB flash disk. When I run the pamusb-conf to set up a new device, with the SD card inserted, it says that there ...
0
votes
0answers
237 views

passwd history through PAM not working (and weird 'Authentication token manipulation error' when using passwd)

I'm trying to set my password policy to remember the last two passwords a user chose, and to prevent him or her from re-using those particular passwords. I'm currently running Ubuntu 12.10 through ...
0
votes
0answers
116 views

Squid proxy pam_auth password expired in 60 days not taking ldap password policy

My openldap server Ubuntu 10.04.4 LTS with kernel verion 2.6.32-46-server my New proxy server 12.04.2 Lts with kernel 3.2.0-51-generic Ldap server having a policy for password expired in 90 days I ...
0
votes
1answer
94 views

Pam face authentication terminal install went wrong

I was following the steps from this link http://lkubuntu.wordpress.com/2011/06/28/pam-face-authentication/ I was trying to set it so I could use my webcam and face recognition to unlock my computer. ...
0
votes
0answers
378 views

pam authentication and ldpam bugs

I'm using Ubuntu 13.04. I know if you want to combine vsftpd with mysql you should install libpam-ldap first, if not you will get a 'missing some libraries' error message, but after I installed the ...
0
votes
0answers
101 views

Checking if a password is correct is taking a very long time?

When trying to log in to KDE or Unity, or to switch users with su, I type my password and have to wait just over two minutes to be logged in to any of my various accounts on my local system. This did ...
0
votes
0answers
239 views

How do I get pam_mount to mount user home directories via ldap

I have a centralised server for users and home directories set up (using zentyal) On another machine I am trying to login and mount against these. I can login okay but not mount home directory Using ...
1
vote
0answers
19 views

Portable users on network

I am moving all my windows desktops to Ubuntu in my office. I have a phone system which allows my users to login on any phone thus any desk they sit at is 'their desk' I would like to do something ...
1
vote
0answers
136 views

ppolicy with pam_ldap - pwdReset has no effect when logging in from Ubuntu

We installed ppolicy overlay on our ldap server. Password policies work correctly for locking out user after X incorrect password attempts, but we can't enforce user to change his password. When we ...
1
vote
0answers
134 views

GNOME Does Not Enforce Password Complexity in 12.04

I'm lost on this: I have password complexity configured in /etc/pam.d/common-password and /etc/pam.d/common-auth. While logged in as a regular user I can reset a password from a terminal window and ...
1
vote
1answer
936 views

how to increase maximum open files for memcached service

Using ulimit -n i am able to set per shell based maximum open files limit To make this value persistent i am able to edit this is in /etc/security/limits.conf and restart the ubuntu 12.10 box, here ...
1
vote
0answers
449 views

How to make simple system user authentication work with postfix/dovecot on 12.10?

I have been wrestling on this a LOT. I never properly understood but I presume that authentication by the system users is done with PAM and the default authentication method for both Dovecot and ...
0
votes
0answers
113 views

stop PAM mount from issuing “forceuid” and “forcegid” options when mounting a samba share

I got a problem mounting a samba share with /etc/security/pam_mount.conf.xml. Client OS: Ubuntu 12.10 x64 When I manually mount it access right information (user/group/other) are displayed correctly ...
0
votes
1answer
258 views

How to recover faulty pam.d configuration?

I am struggle to login after configured kerberos in pam.d. Eventhough , I tried with root user , it also no use. I know, I did something wrong on that but how can I restore the pam.d ...
0
votes
0answers
195 views

Unknown module with PAM authentication and IPSec/OpenSwan VPN on 12.10

I have setup a VPN on my home Ubuntu 12.10 server using instructions found here using CHAP authentication: https://raymii.org/s/tutorials/IPSEC_L2TP_vpn_with_Ubuntu_12.10.html I'd like to now change ...
0
votes
1answer
164 views

Password not accepted at login

I had tried to setup kerberos authentication to log into some ADS thing at my new university, however that didn't work and resulted in me having to enter my password twice for everything. So I did: ...
3
votes
1answer
540 views

Login on local terminal without password

I have a virtual guest of Ubuntu on a KVM Machine, I've setup the machine so I can type virsh console and be dropped into a console. I realise the security considerations here, but is it possible to ...
3
votes
2answers
3k views

How to configure pam.d files for ldap over ssh on 12.04?

I'm trying to set up an Ubuntu 12.04 server so that users with a valid account in a remote ldap server can login to the ubuntu server. I've followed this guide closely: ...
4
votes
1answer
147 views

How to use PAM to restrict HTTP access for some users?

I've read that PAM can be used to restrict HTTP access for some users, but I can't figure out how to do it in Ubuntu 12.04. The /etc/security/time.conf man page contains this example: All users ...
2
votes
0answers
85 views

Accidentally removed /etc/pam.d/common-* files

I accidentally removed /etc/pam.d/common-* files on Ubuntu 12.04 through ssh. I have a backup of the files however, I am unable to use sudo nor log back in. Is there a way to fix this?
3
votes
1answer
1k views

How to enforce company password complexity in 10.04?

I need to configure a Ubuntu 10.04 server to follow a strict company password policy that specifies the following: at least one upper case at least one lower case at least one digit at least one ...
2
votes
1answer
366 views

Show a notification at login using pam_exec

This simple script will show a Zenity notification when the user logs in: case "$PAM_TYPE" in 'open_session' ) if [ "$PAM_SERVICE" = "lightdm" ] ; then DISPLAY=:0 sudo -u ...
0
votes
1answer
207 views

Difference between /etc/security/pam_env.conf and /etc/environment + making sudo read pam_env.conf

I struggle to see the difference between pam_env.conf and /etc/environment. To me they both do the same thing, with a difference syntax. The manpages were no help. So what is the difference? ...
3
votes
1answer
1k views

What causes “pam_unix … conversation failed” in auth.log

There are thousands of entries in my auth.log like this: sudo: pam_unix(sudo:auth): conversation failed What causes these to occur? I'd like to fix whatever it is but I'm a bit mystified as to ...
1
vote
1answer
105 views

How to use pam_blue with lightdm, and unity-greeter?

I want lightdm to skip asking for my password if my phone is nearby. How is that possible with lightdm, and unity-greeter? Also I'm interested in knowing whether its secure, because it doesn't seem ...