Pluggable authentication modules (PAM)

learn more… | top users | synonyms

1
vote
0answers
33 views

How to configuring PAM to use different language / locale settings

Currently we are using a database client with a ISO-8859-1 character set. The Ubuntu server is running with de_DE.utf8. If the user uses a username or password containing other characters than 7-bit ...
0
votes
0answers
23 views

Authentication vsftpd account using remote LDAP user

I'm trying to authenticate vsftpd from LDAP logins which hosted remotely another server . vsftpd hosted on Ubuntu 14.04.2 LTS (GNU/Linux 3.13.0-48-generic x86_64) amazon aws . from the LDAP server ...
0
votes
0answers
10 views

lightgdm change password dialog for domain users

I did enable login to a freeIPA domain in lightdm by setting greeter-show-manual-login = True. Login is working except if a password is expired. The change password dialog is not shown in lightdm. ...
1
vote
0answers
22 views

“incorrect login” come at virtual console at the time of trying to fix “nothing appeared issue after login” at ubuntu 16.04

I am running Ubuntu 16.04 LTS in dual boot along with Windows 10. Everything worked fine. But, today after applying software update and reboot, when I type password at login screen and hit Enter, ...
1
vote
0answers
37 views

How do I configure the lockscreen to use my PAM module in 16.04

In 14.04 I was able to do this by adding a line to /etc/pam.d/lightdm and my module is invoked for both login and the lock screen. In 16.04 it is only invoked at the login screen; the lock screen ...
0
votes
0answers
11 views

How can I re-enable LDAP authentication?

I was attempting to create a new account for a user on a machine via LDAP. He could authenticate via terminal with his LDAP account, but not into the display manager (lightdm). After unsuccessfully ...
0
votes
0answers
86 views

Need help configuring 16.04 Xenial to auth via LDAP and PAM

I am trying to get Ubuntu Server 16.04 configured so I can authenticate via pam and LDAP to our Active Directory servers. I have this combination working in 14.04. Following the same configuration ...
4
votes
1answer
690 views

Error “System is booting up. See pam_nologin(8)” [closed]

This morning, I see this error message showed in lightdm login interface, and cannot enter password. So I went to TTY1 and saw: [** ] A start job is running for monitor and control system power ...
0
votes
1answer
29 views

pam / ad issue with cron

Jobs in /etc/crontab which belong to non-local users now fail. That is a bit of a problem for us: May 26 13:05:01 machineXYZ CRON[26927]: pam_sss(cron:account): \ Access denied for ...
0
votes
2answers
89 views

pam / ad issues with server-based application

Following the 16.04 upgrade we had some pam / ad issues which were solved based on community answers (ie lockscreen, authentication). We now have a new and critical one. We run a lot of RStudio ...
0
votes
0answers
94 views

Authenticate user agains Active Directory LDAP

I'm trying to let users login on a Ubuntu 16.04 Desktop with their active directory user/pass. I'm using pam/ldap to do so, but I'm running into a problem when the rebinding occurs. I have a read-...
0
votes
0answers
177 views

Ubuntu 16.04 Unable to locate package pamusb-tools

Im trying to install PAM so I can unlock my computer with my usb drive but when I try to install pamusb-tools and libpam-usb, it can't find those pakages. Is there a repository I need to add?
1
vote
3answers
268 views

Ubuntu 16.04 auth_pam broken

I'm trying to set up a mail server on a fresh Ubuntu 16.04 machine but I can't get it to work properly. I'm using a Postfix/Courier setup with MySQL for authentication. Receiving emails and reading ...
0
votes
0answers
199 views

Installing and configuring LDAP & NSCD break 16.04 Xenial

I have done many installs and always end up breaking the system. The steps I take are: Fresh, clean install (have done both LVM and non-LVM, UEFI and EFI) on HDD with no other OSes in place Reboot ...
0
votes
4answers
397 views

Lockscreen access denied (AD auth via sssd)

On xenial, the lock screen doesn't work for me. Whether I enter the correct password or not, it won't let me in. However, if I click on the menu at the top right corner of the screen and choose "...
0
votes
0answers
40 views

How to overwrite PAM rule from `common-auth` ? (`nullok` to make sshd accept empty passwords)

I got advice to change pam configuration (as I look for a way to make ssh user with empty password): sudo sed -i 's/nullok_secure/nullok/' /etc/pam.d/common-auth However in /etc/pam.d/common-auth I ...
1
vote
1answer
308 views

pam_sss System error, how to find the problem?

I was using Ubuntu 15.10, but upgraded to 16.04 LTS today. Since the upgrade I can no longer authenticate against our AD. I have tried using https://help.ubuntu.com/lts/serverguide/sssd-ad.html as a ...
0
votes
0answers
42 views

How do I setup Homeshares that ask for the password that uses pam authentication?

How do I setup shares that lists the users under homes for the home directory share and when clicking on the username it requests the password from the pam authentication module? This will happen when ...
1
vote
0answers
25 views

shutdown or reboot after entering wrong password x times

My laptop is configured with a bios password to unlock the encrypted ssd. Most times I don't shut it down and use just suspend/resume - this of course leaves the ssd accessible. To increase security ...
1
vote
2answers
182 views

pam_mount stopped working

This is how it worked: my Ubuntu workstations authenticate against Active Directory, and pam_mount mounts some CIFS directories on user logon. Now, for some reason, pam_mount stopped working and no ...
1
vote
1answer
179 views

Problem with PAM authorization in Dovecot

I've been using postfix with sasl and dovecot for many years. Three days ago, authorization for dovecot via PAM stopped working which means no IMAP or POP3. SASL was working as I could tunnel in with ...
7
votes
1answer
135 views

How to force user to run quiz after login and before displaying desktop

I have a kid and I want to allow him to use the computer only after he solves a certain quiz at logon. I can write a quiz application itself. What I don't know is how to set it up in the way, that ...
0
votes
0answers
54 views

Password not working on “Switch User” only

I have Ubuntu 15.10 x64, which was upgraded in a long series of upgrades going back to 9.04. Over time, many things (including most of the hardware by now) have changed. What has not changed, however (...
0
votes
1answer
36 views

PAM configuration error can cause “The system is running in low-graphics mode” error

I want to add this information to the question 'How to fix “The system is running in low-graphics mode” error?', but I'm newly registered and don't have the reputation to comment on that question. ...
0
votes
0answers
13 views

Lightdm - Login using two passwords?

I was thinking of an extra security layer by using two passwords for login. Is it possible to configure lightdm in such a way that it will ask you for two correct passphrases? I thought of including ...
2
votes
0answers
41 views

PAM USB: require USB device only for some users

I have configured the pam_usb module on my Ubuntu 14.04.4 system. The current common-auth rules look like this: auth sufficient pam_usb.so auth [success=1 default=ignore] ...
1
vote
0answers
44 views

Connect with an AD user to a ubuntu Machine

I try to log on under a ubuntu machine with an AD user via the GUI lightdm , but access is denied with "invalid password , please try again " My machine has been added in the AD : net ads join -U ...
0
votes
0answers
68 views

PAM Not Working

I am trying to enable PAM in Ubuntu 14.04, but the rules I am trying are not working, Where as these rules are working with CentOS and RedHat. Can anyone tell me how can I use PAM. I am trying to ...
1
vote
1answer
163 views

how to roll back broken privileges in 14.04?

I am running Ubuntu 14.04.3 32bit OS. A few months ago I wanted to install QTCAM from source which it requires systemd library files. As you know 14.04 Ubuntu doesn't use systemd yet, so, as the ...
0
votes
1answer
30 views

Password required to suspend in Kubuntu after the latest upgrade

Looks like something broke PAM yet again. Kubuntu with the Backports PPA asks for my password instead of suspending after a period of inactivity. Anyone found the reason and/or a workaround yet?
0
votes
0answers
32 views

Fingerprint reader authenticates but does not close dialog box

I have a T550 which sports the following reader: Bus 002 Device 016: ID 138a:0017 Validity Sensors, Inc. After plenty of tweaking around I managed to get it to work. I managed to register my ...
1
vote
0answers
731 views

force pam to return success

I want to be able to login (without systemd-user-sessions.service running, is it possible?). I masked the systemd-user-sessions.service, rebooted, but PAM wont let me in (I can login in tty1 though): ...
0
votes
0answers
61 views

How to get rid of “You must choose a longer password” fast and without thinking?

I'm a Slackware user and now I'm here in a Ubuntu 14.04. I tried to change my password (to a simpler one) with passwd and got: You must choose a longer password I did a quick search and found the ...
0
votes
0answers
83 views

How to enable password authentication limit on lock-screen in ubuntu 12.04 ?

I need to limit the user to 3 failed login attempts. If the user doesn't enter correct password after 3 attempts, I need to lock his account for certain configurable period of time. I have read about ...
0
votes
0answers
55 views

iniparser: cannot open /etc/security/pam_winbind.conf

Each time I type a sudo command I get this: iniparser: cannot open /etc/security/pam_winbind.conf What's this error and how can I get ride of it?
3
votes
0answers
118 views

I locked myself out from using su or sudo. I'd like to understand what I did there

In an attempt to increase the numer of files my domino server is allowed to handle, I changed /etc/security/limits.conf, adding following lines. notes soft nofile 60000 notes hard nofile 60000 ...
0
votes
1answer
235 views

samba4 nslcd lightdm and pam_mount

I'm stuck with my setup and hoping for some help. I've setup an AD with Samba4 and nslcd as nss both on the server and the clients. I'm aware that Samba does not recommend running the AD and ...
1
vote
0answers
88 views

winbind and passwd issues

I successfully configured a Ubuntu 15.10 Workstation to authenticate against Active Directory. The only thing left so far is the ability to change the Active Directory password. When I enter the ...
0
votes
1answer
239 views

How to get PamUSB working again in Ubuntu 15.10

I use pamusb to authenticate via a USB key. However pamusb seems to have been removed from Ubuntu 15.10. That's fine, but what is the replacement? How can I do USB key authentication in Ubuntu 15.10?...
0
votes
0answers
66 views

pam_mount, pam_ldap and screen unlocking

I am having trouble getting these three components to work in an ldap environment: authenticate the ldap user mount a folder (type cifs) on login using pam_mount be able to unlock the screen once it ...
2
votes
1answer
36 views

how to check what incorrect password as attempted

In /var/logs/auth.log I can see the unsuccessful login attempts. They are like lines below: Oct 16 05:04:02 myMachine unix_chkpwd[15793]: password check failed for user (user1). Now is there a way ...
0
votes
1answer
58 views

Using ONLY Pamusb as authentication

Is it possible to only use pamusb to login (into xfce/lightdm) and not have a password at all? When I try to change pamusb to required in /etc/pam.d/common-auth and comment out the password thingie I ...
2
votes
1answer
355 views

sed permission denied when using pam_exec with su

I'm using pam_mount.so to automatically mount a CIFS share for users on an Ubuntu 14.04 client. pam_mount uses a local conf in every users home directory. I'm running a bash script with pam_exec that ...
2
votes
2answers
303 views

pam_tally2 doesn't count fails over ssh

I have added line auth required pam_tally2.so deny=3 unlock_time=180 to my /etc/pam.d/login file, and that's fine and dandy in tty, after 3 attempts testuser gets suspended. However, that very ...
0
votes
0answers
137 views

How to Fuse Mount into Home Folders - After EcryptFS is mounted?

Question: In Linux, how do you automate a folder to be mounted into a User's Home Folder? -- But with these constraints: Only After their Encrypted Home Folder has been mounted -- so the mount ...
0
votes
0answers
36 views

password changed by poppassd doesn't reflect smbpasswd

I have installed poppassd and coded a php script for users to change their passwords via web. However I noticed that what being changed via poppassd did not reflect users' samba password. Any pointers ...
0
votes
0answers
35 views

What pam packages to install so that PAM running on OSx will compile and run on Ubuntu 15.04

In the Ubuntu Linux-pam 1.1.8 package the pam_prompt function is a void while in Linux-Pam and BSD packages it is a int function. Why the difference? We have PAM running on OSX and want to now use ...
2
votes
1answer
296 views

How to validate passwords with pam

I have got a bash script which asks for your password, and then needs to validate the password using pam, I have installed libpam0g-dev as I understand I need it for this, but how exactly do I go ...
0
votes
0answers
75 views

How do I enter password via keyboard without using pamUSB?

I installed pamUSB and I have used my USB flash drive to store and enter my password automatically in ubuntu 14.04. But my USB memory is formatted. Therefore, the system shows the following message ...
0
votes
0answers
521 views

NGINX Auth support and MYSQL

I have installed NGINX server. The requirement is to allow only certain IP addresses to access this service. The list of allowed IP are stored in a MYSQL database. I was able to install and configure ...