Pluggable authentication modules (PAM)

learn more… | top users | synonyms

1
vote
0answers
19 views

Can't authenticate against LDAP. /etc/nsswitch.conf seems to be ignored

Running ubuntu 14.0.4.1 on a BananaPi (ARM). I've had a lot of luck getting LDAP authentication to work under 14.0.4 on x86, but something about this just isn't working. If you run getent passwd | ...
1
vote
0answers
10 views

How to enforce LDAP group membership with libpam_ldap for SSHD

I am running 14.04 servers that I have install the ldap authentication package ldap-auth-client on and configured to connect to our LDAP servers. I have the authentication part working as well as the ...
0
votes
0answers
14 views

How to use pamusb to ONLY autologin

Is it possible to configure pamusb to only handle the login authentication? Right now all my authentication can be done with an usb stick, which means sudo and other stuff can be run by any random ...
1
vote
0answers
27 views

Custom MOTD does not update until scripts finish

I recently got a small server and gave some friends accounts on it. They all have their own web pages in ~/public_html using lighttpd so I wrote a script to backup every user's public_html directory. ...
2
votes
0answers
36 views

lubuntu completely ignoring ldap setup. Followed guide, no contact with ldap server

We have LDAP authentication working on every other server and lxc container in our enterprise, but when we try and have a brand spankin new Lubuntu 14.04 installation do the same, it's completely ...
0
votes
0answers
16 views

Restrict Direct User Login with SSH but Allow SSH Access from Single User

I have a user (a) whose direct login must be restricted except for when user is ssh'd from a particular user (b). For all other users direct login must be restricted. Is there any way to accomplish ...
0
votes
0answers
118 views

Subversion (svnserve) authentication against system users via saslauthd with PAM (12.04LTS)

I've read many posts here and elsewhere, none really satisfies my question. I'm trying to get svnserve to authenticate users via sasl using the PAM method (ie, authenticate via system users). I've ...
1
vote
0answers
47 views

TRIM on encrypted device with Precise

I have migrated the main data to a new SSD. (That is Samsung 840 EVO, 120GB.) My ~ is an encrypted partition automounted by pam_mount. That is, there is a record in /etc/security/pam_mount.conf.xml ...
0
votes
0answers
55 views

Ubuntu 12.04: pam_motd sometimes displays only partial MOTD

This isn't a very big deal but it really irritates me somehow. We have a large number of machines running Ubuntu 12.04 (server/amd64) which i frequently ssh into. We have the standard set-up for this ...
2
votes
0answers
34 views

Biometric Enrollment

I am interested in developing a Match-on-card Logon functionality (biometric enrollment) for users on Ubuntu. I've searched through PAM modules, in Ubuntu Software Center, and with Google, and found ...
0
votes
0answers
10 views

Match-on-card Logon

I am interested in developing a Match-on-card Logon functionality for users on Ubuntu. I've searched through PAM modules, in Ubuntu Software Center, and with Google, and found nothing that would help ...
0
votes
0answers
89 views

CUPS isn't allowed to access SSSD for authentication

I'm running Ubuntu 14.04. The CUPS server requires authentication for all print jobs. If I send a job as a domain user I get the following errors. Any help would be appreciated. I can't find anything ...
0
votes
3answers
33 views

How do I change options in PAM configuration?

I have an issue that research indicates can be corrected by changing an option in a PAM configuration by running pam-auth-update. I've done that, but cannot for the life of me figure out how to change ...
0
votes
0answers
21 views

Allow alternate login method to decrypt home folder

I updated and rebuilt the guide for unlocking *buntu and derivatives via Common Access card here, and I've run into a sort of snag with logging into the DM (likely due to an encrypted home folder.) It ...
0
votes
1answer
147 views

PAM Module & nsswitch.conf

As i know, there are two authentication schema available on linux. PAM auth modules and, /etc/nsswitch.conf file When user logs in, which one take the precedence.?
0
votes
1answer
51 views

Most of my software just disappeared (Kubuntu)

Amarok, konsole, dolphin, volume control, and a lot of other software just disappeared after I restored pam.d to default last night. Is there some way for me to restore my software without restoring ...
0
votes
0answers
58 views

After ldap and pam installation I cannot log in my computer

after ldap (Server) and pam (client) installation I cannot log with my user or my root in my computer. Maybe I configured wrong in pam. But I know password for root and ldap admin. After reboot I ...
2
votes
1answer
1k views

14.04 Not authenticating on chsh command

I am trying to change my default shell to zsh. I have the entry placed correctly in /etc/shells file. Each attempt I have made with this command has ended with the same error message: chsh -s ...
0
votes
0answers
20 views

what is PAM.d directory usage

I saw pam.d directory on the etc directory. What is PAM and its usage . I saw that for the first time in here. Is that for authentication users ?
0
votes
0answers
335 views

pam_systemd delays SSH login - required?

On our Saucy servers (13.10) we are seeing long delays when logging into the systems via SSH. I figured out it is related to the line session optional pam_systemd.so in ...
-1
votes
2answers
164 views

Can't login after killing X Server with encrypted home directory

I have ctrl-alt-backspace enabled to terminate Xorg in an xorg.conf.d file: Section "InputClass" Identifier "Keyboard Defaults" MatchIsKeyboard "yes" Option ...
0
votes
1answer
1k views

PAM USB on 14.04 su “username” = “no passwd entry for user 'Thornton'”

I followed the directions located here http://linuxconfig.org/linux-authentication-login-with-usb-device Once I reached step 4 I found that the changed authorizations did nothing, so I reverted back, ...
2
votes
0answers
52 views

In /etc/pam.d/sshd, what does “# [1]” mean?

In the PAM configuration file /etc/pam.d/sshd, there are a few lines ending in # [1]; for example: session optional pam_motd.so # [1] This doesn't seem to appear in any of the other PAM ...
0
votes
0answers
301 views

Add all new users and guest user to a group dynamically on ubuntu 14.04

I would like to add all the users (current, new, guest) to a particular group, lets say "audio" dynamically. Can you tell me how I can accomplish this ?
3
votes
1answer
89 views

How to properly invoke motd for SSH connections with PAM disabled

I have configured a nice motd message that shows me lots of relevant infos when I login to my VPS via SSH. As password authentication is disabled in sshd_config I would also prefer to disable PAM as ...
1
vote
0answers
198 views

Network Manager asks to unlock keyring after auto login

After updating from Precise to Trusty I get a popup requesting to unlock the keyring for Network Manager after each login (autologin is enabled). On the net people advise to make the connection ...
1
vote
0answers
90 views

PAM authentication using ssh key instead of password

When I try to use chsh to change my default shell, I get prompted for my user password. The problem is I log in using my SSH key and do not have a user password - by design. Yes, I can set a ...
4
votes
1answer
194 views

How do I enable a specific pam config in the lockscreen?

In Trusty, there is a new lockscreen that fits the look and feel of lightdm, and shares some config files, especially for pam. I am using libpam-fprintd to allow using my fingerprint reader when ...
0
votes
0answers
27 views

How to change location of .config directory

My home directory is located on a network filer with fixed quota. I'm running out of my quota as different applications saving their data in home directory. For example google-chrome, storing data ...
0
votes
0answers
174 views

PAM authentication failure

I got a dedicated server from a reputable hosting company. Unfortunately, they're one of those companies that thinks enabling root access is a good idea. I've successfully disabled root access and ...
0
votes
1answer
103 views

Non-root users to shutdown using PAM

I want to configure PAM to enable non-root normal users to be able to shutdown. how to do that? I'm using Ubuntu server 12.04 I know how to do that with many ways such as changing permissions of ...
0
votes
1answer
86 views

filter PAM_yubico.so debug stdout

I want to use the yubico-pam module (https://github.com/Yubico/yubico-pam) to enable challenge-response authentification using my yubikey when sudoing. I've managed to do that by adding the line ...
0
votes
1answer
332 views

Kerberos and google-authenticator (2-factor auth)

Does anyone know how can I use google-authenticator in combination with kerberos and thus provide to my users 2-factor authentication?
0
votes
0answers
85 views

libnss-extrausers change password

I have Ubuntu 12.04. Installed libnss-extrausers and configured nsswitch.conf. Now, users registered in /var/lib/extrausers/{passwd,group,shadow} are recognized by the system and can login. However, ...
0
votes
0answers
99 views

Running xrandr With pam_exec

Can anyone tell me why xrandr doesn't work when I run it using pam_exec? I'm having the same issue as 12.04 Resolution Changes on Lock + KVM only in 13.10, but I think I'm close to a solution. It's ...
0
votes
1answer
534 views

vsftpd hanging when using pam_exec or pam_script

I have VSFTPD integrated with pam_mysql, allowing me to successfully login to an FTP server using accounts kept in a mysql database. I need to automatically create a directory for the user if it is ...
6
votes
2answers
280 views

MOTD is updated very rarely

I understand that pam_motd updates the MOTD upon login, but sometimes MOTD just doesn't get updated for days and I'm puzzled what might be the reason. I'd like to add uptime and who outputs to the ...
1
vote
1answer
465 views

Sudo does not recognize my password anymore

The problem is happening on a remote server, so everything is done through ssh. I can login with my key, no problem here. I can change my password at will with passwd (which I believe shows that it's ...
-1
votes
1answer
87 views

Gnome doesn't store password in keyring

I'm on 12.04, trying to extract my login credintials from ~/.gnome2/keyrings/login.keyring and not having much luck, looks like that keyring is empty. seahorse is showing it as an empty keystore. I ...
0
votes
0answers
517 views

How to mount a Truecrypt volume with cryptsetup 1.6 and above via pam_mount?

I installed cryptsetup 1.6.2 in 13.10 from this PPA. Versions above 1.6 feature Truecrypt volume support and I can successfully mount my volume from the terminal but haven't been able to automatically ...
0
votes
0answers
47 views

How to get users accounts info on Ubuntu Desktop using Mono C#?

Is there an Mono C# class or lib their can retrieve info abort all local users accounts on a Ubuntu/ linux system? For Ubuntu systems their is NOT on an domain-controller.
3
votes
2answers
4k views

Type password into login screen, hit enter - nothing happens

I first install Ubuntu 13.10 a few weeks ago and its been going great. I'm still pretty new to Linux, so I haven't been doing a whole lot. The past couple days I've tried installing LAMP, then ...
2
votes
1answer
42 views

how to manage ubuntu users from php

I have an Ubuntu 12.04 server machine in a local net, and I would like to log in my user through php. I have tried with pam_auth() but it wasn't configured neither activated for php. I tried a ...
0
votes
1answer
2k views

Getting error sudo: pam_authenticate: Module is unknown

I am new to Ubuntu and have installed Ubuntu 12.04.3 on my laptop. I need to install VAS on it but when I do I get the error: sudo: pam_authenticate: Module is unknown. And I cannot make any other ...
1
vote
3answers
286 views

Restore accidentally with rm'ed pam.conf?

I have accidently removed the files /etc/pam.conf and /etc/security/pam_env.confusing rm. Now I get this error message when I try to use sudo: sudo: unable to initialize PAM: No such file or ...
1
vote
1answer
460 views

Login with facial recognition in Ubuntu 13.04?

I have tried to install „PAM face authentication“ with the following commands: sudo add-apt-repository ppa:antonio.chiurazzi sudo apt-get update sudo apt-get install pam-face-authentication But it ...
0
votes
1answer
96 views

Identification and Authentication methods in Ubuntu

Since I have a very long password, I would like to additionally use an alternative login method. Which other authentication methods are possible in Ubuntu to log in?
0
votes
1answer
183 views

How to make sshd create non-existing user when using kerberos?

I am setting my sshd to use kerberos auth. Everything was fine until I actually login via ssh. I got invalid user. If I added the account to the server running sshd, then I could login using password ...
0
votes
1answer
69 views

Cascading Authentication PAM login

I'm trying to set up an authentication scheme for Ubuntu using the pam files. However, I cannot figure out how to have two separate methods of authentication. I've set up a Yubikey authentication, ...
1
vote
0answers
120 views

pam radius module access-reject

I am trying to set up an Ubuntu server that my users will connect to. I already have a Radius server running on a Windows box, and I would like for connections to this Ubuntu box to authenticate to ...