Pluggable authentication modules (PAM)

learn more… | top users | synonyms

1
vote
0answers
17 views

How do I configure the lockscreen to use my PAM module in 16.04

In 14.04 I was able to do this by adding a line to /etc/pam.d/lightdm and my module is invoked for both login and the lock screen. In 16.04 it is only invoked at the login screen; the lock screen ...
0
votes
0answers
10 views

How can I re-enable LDAP authentication?

I was attempting to create a new account for a user on a machine via LDAP. He could authenticate via terminal with his LDAP account, but not into the display manager (lightdm). After unsuccessfully ...
0
votes
0answers
54 views

Need help configuring 16.04 Xenial to auth via LDAP and PAM

I am trying to get Ubuntu Server 16.04 configured so I can authenticate via pam and LDAP to our Active Directory servers. I have this combination working in 14.04. Following the same configuration ...
4
votes
1answer
540 views

Error “System is booting up. See pam_nologin(8)” [closed]

This morning, I see this error message showed in lightdm login interface, and cannot enter password. So I went to TTY1 and saw: [** ] A start job is running for monitor and control system power ...
0
votes
1answer
23 views

pam / ad issue with cron

Jobs in /etc/crontab which belong to non-local users now fail. That is a bit of a problem for us: May 26 13:05:01 machineXYZ CRON[26927]: pam_sss(cron:account): \ Access denied for ...
0
votes
2answers
78 views

pam / ad issues with server-based application

Following the 16.04 upgrade we had some pam / ad issues which were solved based on community answers (ie lockscreen, authentication). We now have a new and critical one. We run a lot of RStudio ...
0
votes
0answers
69 views

Authenticate user agains Active Directory LDAP

I'm trying to let users login on a Ubuntu 16.04 Desktop with their active directory user/pass. I'm using pam/ldap to do so, but I'm running into a problem when the rebinding occurs. I have a read-...
0
votes
0answers
135 views

Ubuntu 16.04 Unable to locate package pamusb-tools

Im trying to install PAM so I can unlock my computer with my usb drive but when I try to install pamusb-tools and libpam-usb, it can't find those pakages. Is there a repository I need to add?
1
vote
2answers
196 views

Ubuntu 16.04 auth_pam broken

I'm trying to set up a mail server on a fresh Ubuntu 16.04 machine but I can't get it to work properly. I'm using a Postfix/Courier setup with MySQL for authentication. Receiving emails and reading ...
0
votes
0answers
147 views

Installing and configuring LDAP & NSCD break 16.04 Xenial

I have done many installs and always end up breaking the system. The steps I take are: Fresh, clean install (have done both LVM and non-LVM, UEFI and EFI) on HDD with no other OSes in place Reboot ...
0
votes
4answers
295 views

Lockscreen access denied (AD auth via sssd)

On xenial, the lock screen doesn't work for me. Whether I enter the correct password or not, it won't let me in. However, if I click on the menu at the top right corner of the screen and choose "...
0
votes
0answers
35 views

How to overwrite PAM rule from `common-auth` ? (`nullok` to make sshd accept empty passwords)

I got advice to change pam configuration (as I look for a way to make ssh user with empty password): sudo sed -i 's/nullok_secure/nullok/' /etc/pam.d/common-auth However in /etc/pam.d/common-auth I ...
1
vote
1answer
193 views

pam_sss System error, how to find the problem?

I was using Ubuntu 15.10, but upgraded to 16.04 LTS today. Since the upgrade I can no longer authenticate against our AD. I have tried using https://help.ubuntu.com/lts/serverguide/sssd-ad.html as a ...
0
votes
0answers
42 views

How do I setup Homeshares that ask for the password that uses pam authentication?

How do I setup shares that lists the users under homes for the home directory share and when clicking on the username it requests the password from the pam authentication module? This will happen when ...
1
vote
0answers
23 views

shutdown or reboot after entering wrong password x times

My laptop is configured with a bios password to unlock the encrypted ssd. Most times I don't shut it down and use just suspend/resume - this of course leaves the ssd accessible. To increase security ...
1
vote
2answers
156 views

pam_mount stopped working

This is how it worked: my Ubuntu workstations authenticate against Active Directory, and pam_mount mounts some CIFS directories on user logon. Now, for some reason, pam_mount stopped working and no ...
1
vote
1answer
144 views

Problem with PAM authorization in Dovecot

I've been using postfix with sasl and dovecot for many years. Three days ago, authorization for dovecot via PAM stopped working which means no IMAP or POP3. SASL was working as I could tunnel in with ...
7
votes
1answer
133 views

How to force user to run quiz after login and before displaying desktop

I have a kid and I want to allow him to use the computer only after he solves a certain quiz at logon. I can write a quiz application itself. What I don't know is how to set it up in the way, that ...
0
votes
0answers
46 views

Password not working on “Switch User” only

I have Ubuntu 15.10 x64, which was upgraded in a long series of upgrades going back to 9.04. Over time, many things (including most of the hardware by now) have changed. What has not changed, however (...
0
votes
1answer
34 views

PAM configuration error can cause “The system is running in low-graphics mode” error

I want to add this information to the question 'How to fix “The system is running in low-graphics mode” error?', but I'm newly registered and don't have the reputation to comment on that question. ...
0
votes
0answers
13 views

Lightdm - Login using two passwords?

I was thinking of an extra security layer by using two passwords for login. Is it possible to configure lightdm in such a way that it will ask you for two correct passphrases? I thought of including ...
1
vote
0answers
36 views

PAM USB: require USB device only for some users

I have configured the pam_usb module on my Ubuntu 14.04.4 system. The current common-auth rules look like this: auth sufficient pam_usb.so auth [success=1 default=ignore] ...
1
vote
0answers
42 views

Connect with an AD user to a ubuntu Machine

I try to log on under a ubuntu machine with an AD user via the GUI lightdm , but access is denied with "invalid password , please try again " My machine has been added in the AD : net ads join -U ...
0
votes
0answers
56 views

PAM Not Working

I am trying to enable PAM in Ubuntu 14.04, but the rules I am trying are not working, Where as these rules are working with CentOS and RedHat. Can anyone tell me how can I use PAM. I am trying to ...
1
vote
1answer
157 views

how to roll back broken privileges in 14.04?

I am running Ubuntu 14.04.3 32bit OS. A few months ago I wanted to install QTCAM from source which it requires systemd library files. As you know 14.04 Ubuntu doesn't use systemd yet, so, as the ...
0
votes
1answer
30 views

Password required to suspend in Kubuntu after the latest upgrade

Looks like something broke PAM yet again. Kubuntu with the Backports PPA asks for my password instead of suspending after a period of inactivity. Anyone found the reason and/or a workaround yet?
0
votes
0answers
31 views

Fingerprint reader authenticates but does not close dialog box

I have a T550 which sports the following reader: Bus 002 Device 016: ID 138a:0017 Validity Sensors, Inc. After plenty of tweaking around I managed to get it to work. I managed to register my ...
1
vote
0answers
666 views

force pam to return success

I want to be able to login (without systemd-user-sessions.service running, is it possible?). I masked the systemd-user-sessions.service, rebooted, but PAM wont let me in (I can login in tty1 though): ...
0
votes
0answers
51 views

How to get rid of “You must choose a longer password” fast and without thinking?

I'm a Slackware user and now I'm here in a Ubuntu 14.04. I tried to change my password (to a simpler one) with passwd and got: You must choose a longer password I did a quick search and found the ...
0
votes
0answers
75 views

How to enable password authentication limit on lock-screen in ubuntu 12.04 ?

I need to limit the user to 3 failed login attempts. If the user doesn't enter correct password after 3 attempts, I need to lock his account for certain configurable period of time. I have read about ...
0
votes
0answers
53 views

iniparser: cannot open /etc/security/pam_winbind.conf

Each time I type a sudo command I get this: iniparser: cannot open /etc/security/pam_winbind.conf What's this error and how can I get ride of it?
3
votes
0answers
111 views

I locked myself out from using su or sudo. I'd like to understand what I did there

In an attempt to increase the numer of files my domino server is allowed to handle, I changed /etc/security/limits.conf, adding following lines. notes soft nofile 60000 notes hard nofile 60000 ...
0
votes
1answer
221 views

samba4 nslcd lightdm and pam_mount

I'm stuck with my setup and hoping for some help. I've setup an AD with Samba4 and nslcd as nss both on the server and the clients. I'm aware that Samba does not recommend running the AD and ...
1
vote
0answers
86 views

winbind and passwd issues

I successfully configured a Ubuntu 15.10 Workstation to authenticate against Active Directory. The only thing left so far is the ability to change the Active Directory password. When I enter the ...
0
votes
1answer
220 views

How to get PamUSB working again in Ubuntu 15.10

I use pamusb to authenticate via a USB key. However pamusb seems to have been removed from Ubuntu 15.10. That's fine, but what is the replacement? How can I do USB key authentication in Ubuntu 15.10?...
0
votes
0answers
63 views

pam_mount, pam_ldap and screen unlocking

I am having trouble getting these three components to work in an ldap environment: authenticate the ldap user mount a folder (type cifs) on login using pam_mount be able to unlock the screen once it ...
2
votes
1answer
34 views

how to check what incorrect password as attempted

In /var/logs/auth.log I can see the unsuccessful login attempts. They are like lines below: Oct 16 05:04:02 myMachine unix_chkpwd[15793]: password check failed for user (user1). Now is there a way ...
0
votes
1answer
52 views

Using ONLY Pamusb as authentication

Is it possible to only use pamusb to login (into xfce/lightdm) and not have a password at all? When I try to change pamusb to required in /etc/pam.d/common-auth and comment out the password thingie I ...
2
votes
1answer
336 views

sed permission denied when using pam_exec with su

I'm using pam_mount.so to automatically mount a CIFS share for users on an Ubuntu 14.04 client. pam_mount uses a local conf in every users home directory. I'm running a bash script with pam_exec that ...
2
votes
2answers
266 views

pam_tally2 doesn't count fails over ssh

I have added line auth required pam_tally2.so deny=3 unlock_time=180 to my /etc/pam.d/login file, and that's fine and dandy in tty, after 3 attempts testuser gets suspended. However, that very ...
0
votes
0answers
130 views

How to Fuse Mount into Home Folders - After EcryptFS is mounted?

Question: In Linux, how do you automate a folder to be mounted into a User's Home Folder? -- But with these constraints: Only After their Encrypted Home Folder has been mounted -- so the mount ...
0
votes
0answers
35 views

password changed by poppassd doesn't reflect smbpasswd

I have installed poppassd and coded a php script for users to change their passwords via web. However I noticed that what being changed via poppassd did not reflect users' samba password. Any pointers ...
0
votes
0answers
32 views

What pam packages to install so that PAM running on OSx will compile and run on Ubuntu 15.04

In the Ubuntu Linux-pam 1.1.8 package the pam_prompt function is a void while in Linux-Pam and BSD packages it is a int function. Why the difference? We have PAM running on OSX and want to now use ...
2
votes
1answer
281 views

How to validate passwords with pam

I have got a bash script which asks for your password, and then needs to validate the password using pam, I have installed libpam0g-dev as I understand I need it for this, but how exactly do I go ...
0
votes
0answers
71 views

How do I enter password via keyboard without using pamUSB?

I installed pamUSB and I have used my USB flash drive to store and enter my password automatically in ubuntu 14.04. But my USB memory is formatted. Therefore, the system shows the following message ...
0
votes
0answers
498 views

NGINX Auth support and MYSQL

I have installed NGINX server. The requirement is to allow only certain IP addresses to access this service. The list of allowed IP are stored in a MYSQL database. I was able to install and configure ...
1
vote
0answers
318 views

Why do I have to set usePAM to 'no' to manage a ssh connection?

I have a system user named user1 (the main one). I've tried to set a ssh connection between a user named foreignuser and the main one (user1). For that, I've generated a couple of keys with ssh-keygen....
0
votes
1answer
119 views

systemd in LXC endlessly trying to umount pam_mount home

I use the following $HOME/.pam_mount.conf.xml to mount an LXC container filesystem when I log in via SSH: <?xml version="1.0" encoding="utf-8" ?> <!DOCTYPE pam_mount SYSTEM "pam_mount.conf....
2
votes
0answers
193 views

SSH with PAM Google

I have a server with Google Authenticator enabled. It worked fine, and one day I tried to login, and suddenly I'm not able to. Fortunately, I do have Ajenti installed with a terminal, so it's not a ...
0
votes
1answer
1k views

How to suppress pam_unix(sshd:session): session closed for user

I have a Ubuntu (14.x) host serving as a git repository box (via GitLab CE). Around 50 users are using shared user (in this case "gitlab") to connect to the box to sync their repositories. This method ...