Pluggable authentication modules (PAM)
0
votes
0answers
9 views
How to make simple system user authentication work with postfix/dovecot on 12.10?
I have been wrestling on this a LOT. I never properly understood but I presume that authentication by the system users is done with PAM and the default authentication method for both Dovecot and ...
0
votes
0answers
16 views
stop pam_mount from issueing forceuid and forcegid (samba)
I got a problem mounting a samba share with /etc/security/pam_mount.conf.xml.
Client OS: Ubuntu 12.10 x64
When I manually mount it access right information (user/group/other) are displayed correctly ...
0
votes
1answer
20 views
How to recover faulty pam.d configuration?
I am struggle to login after configured kerberos in pam.d.
Eventhough , I tried with root user , it also no use. I know, I did something wrong on that but how can I restore the pam.d ...
0
votes
0answers
23 views
Unknown module with PAM authentication and IPSec/OpenSwan VPN on 12.10
I have setup a VPN on my home Ubuntu 12.10 server using instructions found here using CHAP authentication:
https://raymii.org/s/tutorials/IPSEC_L2TP_vpn_with_Ubuntu_12.10.html
I'd like to now change ...
0
votes
0answers
39 views
Password not accepted at login
I had tried to setup kerberos authentication to log into some ADS thing at my new university, however that didn't work and resulted in me having to enter my password twice for everything.
So I did: ...
0
votes
0answers
35 views
is it true that /etc/environment is only read during login and not re-read after that
On Ubuntu 12.10 server,
Is it true that /etc/environment is read only by pam during login, before bash starts and not re-read after that? If I run some combinabion of bash -cli .... can I get the ...
0
votes
0answers
28 views
LDAP / AD timeout issues
We are having issues which somehow related to LDAP and/or PAM and/or ....
The issue is that user lookup goes away. Eg on an ssh session I started a few days ago I get for whomai
xxx:/etc/init.d$ ...
3
votes
1answer
104 views
Login on local terminal without password
I have a virtual guest of Ubuntu on a KVM Machine, I've setup the machine so I can type virsh console and be dropped into a console.
I realise the security considerations here, but is it possible to ...
3
votes
2answers
231 views
How to configure pam.d files for ldap over ssh on 12.04?
I'm trying to set up an Ubuntu 12.04 server so that users with a valid account in a remote ldap server can login to the ubuntu server.
I've followed this guide closely: ...
3
votes
0answers
60 views
How to use PAM to restrict HTTP access for some users?
I've read that PAM can be used to restrict HTTP access for some users, but I can't figure out how to do it in Ubuntu 12.04.
The /etc/security/time.conf man page contains this example:
All users ...
1
vote
0answers
58 views
Accidentally removed /etc/pam.d/common-* files
I accidentally removed /etc/pam.d/common-* files on Ubuntu 12.04 through ssh. I have a backup of the files however, I am unable to use sudo nor log back in. Is there a way to fix this?
3
votes
1answer
166 views
How to enforce company password complexity in 10.04?
I need to configure a Ubuntu 10.04 server to follow a strict company password policy that specifies the following:
at least one upper case
at least one lower case
at least one digit
at least one ...
2
votes
1answer
190 views
Show a notification at login using pam_exec
This simple script will show a Zenity notification when the user logs in:
case "$PAM_TYPE" in
'open_session' )
if [ "$PAM_SERVICE" = "lightdm" ] ; then
DISPLAY=:0 sudo -u ...
0
votes
1answer
78 views
Difference between /etc/security/pam_env.conf and /etc/environment + making sudo read pam_env.conf
I struggle to see the difference between pam_env.conf and /etc/environment. To me they both do the same thing, with a difference syntax. The manpages were no help. So what is the difference?
...
3
votes
1answer
309 views
What causes “pam_unix … conversation failed” in auth.log
There are thousands of entries in my auth.log like this:
sudo: pam_unix(sudo:auth): conversation failed
What causes these to occur? I'd like to fix whatever it is but I'm a bit mystified as to ...
1
vote
0answers
45 views
How to use pam_blue with lightdm, and unity-greeter?
I want lightdm to skip asking for my password if my phone is nearby. How is that possible with lightdm, and unity-greeter? Also I'm interested in knowing whether its secure, because it doesn't seem ...
0
votes
0answers
190 views
Diagnose and Fix PAM Configuration
I have a server that has a number of wierd authentication related issues. Just to give a couple of examples, first, I cannot get adduser to work properly.
Adding user `test' ...
Adding new group ...
0
votes
0answers
181 views
Compiling against pam libraries fails
Problems with two different applications that I'm trying to compile with PAM support.
1) auth_pam - i gave up on this one for other reasons, but I still had the compiler problem -
...
3
votes
4answers
2k views
Desktop login fails, terminal works
I have a freshly setup 12.04 LTS pc system (120 GB SSD, 1 TB HDD, 16 GiB RAM); since a few days, I can't login to the graphical desktop anymore: there is very short flashing shell window which ...
1
vote
1answer
618 views
Mount the directory / HOME directory located on a remote Windows 2008 R2
I am currently working on the integration of Ubuntu 12.04 LTS Linux on an Active Directory domain in Windows 2008 R2.
I have managed to integrate my Ubuntu 12.04 machine to AD 2008, my user ...
1
vote
0answers
173 views
How to mount private network shares on login?
I've read all the existing entries I could find on using pam_mount but none of them seem to work for me. I'm trying to automatically mount shares on my local NAS at user login time.
The usernames ...
3
votes
0answers
213 views
How can I set up radius authentication properly?
On all of our linux workstations, we have configured the PAM modules to use radius authentication. This works well for all of the various things like login on the console, login using ssh, sudo, etc. ...
0
votes
2answers
373 views
NFS users getting a laggy GUI expierence
I am setting up a system (ubuntu 12.04) that uses ldap, pam, and autofs to load users and their home folders from a remote server. One of the options for login is sitting down at the machine and ...
1
vote
0answers
33 views
Is it possible to have different PAM requirements per network card?
I have a little Ubuntu box with two NICs ("front": internet, "back": wifi). What I would like is to set up standard/high levels of PAM goodness on the external NIC card, while on the internal (Wifi ...
3
votes
1answer
577 views
I cannot login into any TTYs
My system is Ubuntu 11.10 (installed from 0, without upgrades/updates). When I enter into any tty (1, 2, 3..) it ask me my login name and password but I can not move forward.
When I enter an user ...
1
vote
0answers
466 views
Configuring PAM with LDAP and Kerberos
I am trying to configure PAM with LDAP and Kerberos for authentication.
Command id <username> is working fine so LDAP seems to be working fine and also kinit is working (followed by klist) and ...
0
votes
0answers
103 views
How to use pam_mount if encryption and login passwords don't match
I'm trying to automount my encrypted partition on login and found libpam_mount. Can it ask the encryption password on login instead of trying to mount with my user's password?
0
votes
1answer
33 views
Can I manually reload the missing files?
I have Ubuntu 10.04 installed on my system. Recently, I was swapping out hard drives and, when I rebooted my system, I could not log in. I would enter my username and password; then the system would ...
46
votes
2answers
4k views
How can I use a passcode generator for authentication for remote logins?
I would like to strengthen the authentication of my SSH logins by adding another factor: a passcode generator device, or a passcode generation application on my mobile phone. The only obvious options ...
1
vote
0answers
394 views
Unable to login to ubuntu server 12.04
Unable to login Ubuntu Server 12.04. After enter login-password I see login page again.
Jun 29 16:32:54 machinename login[8450]: pam_unix(login:session):session opened for user username by ...
1
vote
1answer
190 views
with wrong pam_environment unable to login
I made some mistakes in my ~/.pam_environment file; the changes caused a login failure.
I cannot log in to my system. I only have one super account. I tried to press ctrl-alt-f1 to enter into full ...
4
votes
2answers
707 views
Setting Minimum Password Requirements
Is there any way to set up minimum passcode requirements, such as a minimum length, requirement of mixed case alphanumerics and at least 1 symbol in the passcode, and enforce that at passcode changes?
...
2
votes
2answers
689 views
sudo fails because of `pam_mount.c` assertion
I just upgraded to Kubuntu 12.04 from 11.10.
Now when I use sudo I almost always get:
sudo: pam_mount.c:417: modify_pm_count: Assertion `user != ((void *)0)' failed.
It makes the command fail.
...
2
votes
1answer
875 views
After Upgrade to 12.04 the Login takes forever
I recently upgraded from Xubuntu 11.10 to 12.04. Since then it takes a very long time for me to Login.
The time it takes to get to the login screen is normal but after I type in my password it takes ...
2
votes
1answer
136 views
“AND Operator” in PAM
I need to prevent users from authenticating through Kerberos when the encrypted /home/users has not yet been mounted. (This is to avoid corrupting the ecryptfs mountpoint)
Currently I have these ...
7
votes
2answers
2k views
How to Run Pam Face Authentication
I am using Ubuntu 11.10.
I went to the following URL to download the software Pam Face Authentication
and downloaded the version for natty narhwall.
I installed the software using the following ...
1
vote
1answer
178 views
What are the common pitfalls that would stop Authorised Key SSH access, and how do I find and correct for them?
EDIT: This question was reworked to make it more useful to the community and less specific to me.
Questions seem to come up reasonably often regarding ssh and problems with authorised keys access, ...
0
votes
1answer
2k views
su: Authentication failure (Ignored)
Keeping in mind this was working before:
When I try to login as :
su jira1
I get error:
su: Authentication failure
(Ignored)
more /etc/passwd returns:
...
0
votes
1answer
436 views
How can I set up Active Directory user authentication?
I am an Active Directory engineer, so not really a Linux savvy person. I basically know enough to break a Linux workstation or server.
We have a team that needs to use Ubuntu workstations with their ...
1
vote
1answer
592 views
Enable ecryptfs for all new users, even those authenticating through kerberos and ldap
How do I make sure that all users have their home directory encrypted when the login for the first time?
I have setup pam to use Kerberos authentication and LDAP authorization (which I think should ...
3
votes
0answers
472 views
Synchronize SSHFS mount with local filesystem
I've got a directory called "secure" that I mount on my laptop via sshfs whenever the server is in reach.
While this server is in reach I want to keep it in two-way sync with a directory called ...
0
votes
0answers
722 views
Unable to log into FTP Server [closed]
I just set up a ftp server on my ubuntu 11.10 server. I was able to authenticate with basic users before i joined the server to my domain. Now, i'm using PAM authentication and i can't log on with ...
17
votes
1answer
910 views
Setup for mounting kerberized nfs home directory - gssd not finding valid kerberos ticket
Our home directories are exported via kerberized nfs, so the user needs a valid kerberos ticket to be able to mount its home. This setup works fine with our existing clients & server.
Now we want ...
1
vote
3answers
295 views
Ubuntu, Gnome, PAM and ecryptfs
I would like to have a directory accessible to a couple of users, and not readable by maintenance types ... I can do what I want using ecryptfs and a password known only to the "couple of users" in ...
1
vote
2answers
1k views
Pam_mount won't automount encrypted partiton
As usual, when I install a new version of Ubuntu I install pam_mount to automount my with LUKS encrypted partition on login. However, for Ubuntu 11.10, I followed the same procedure as usual, but I ...
0
votes
1answer
2k views
How do I enable account lockout using pam_tally? [closed]
I am trying to implement account lockout in ubuntu using pam_tally. I have tried adding the follwing lines in /etc/pam.d/common-auth
auth required pam_tally.so deny=3
account required ...
4
votes
1answer
425 views
SSSD + Encrypted /home, no longer automounts at login
I've switched a few boxes over to SSSD, so they now authenticate against a central LDAP server, and cache the credentials when I'm offline. This works fine, and the Ubuntu packages installed fine.
...
4
votes
3answers
4k views
Where are passwords stored?
How do you figure out where are user's passwords stored, for users that can login? I know the system is using LDAP for users (username, home path, etc.), but it doesn't contain any kind of passwords. ...
4
votes
2answers
860 views
Can't log in to Samba PDC with domain account
I have a problem. I like to login on a Samba Server with my Ubuntu 10.04/11.04 PC. On my Samba Server there are some accounts with data, but I couldn't connect to it. I have done this:
aptitude -y ...
5
votes
1answer
1k views
“CRON: Module is unknown” after upgrading to 10.04
I just upgraded our server to Ubuntu 10.04 and cron just stopped working. I tried to restart the server, restart cron but nothing worked for me. It just reports in /var/log/syslog:
May 12 16:32:01 ...
