Pluggable authentication modules (PAM)

learn more… | top users | synonyms

0
votes
0answers
21 views

NGINX Auth support and MYSQL

I have installed NGINX server. The requirement is to allow only certain IP addresses to access this service. The list of allowed IP are stored in a MYSQL database. I was able to install and configure ...
1
vote
0answers
36 views

Why do I have to set usePAM to 'no' to manage a ssh connection?

I have a system user named user1 (the main one). I've tried to set a ssh connection between a user named foreignuser and the main one (user1). For that, I've generated a couple of keys with ...
0
votes
0answers
20 views

Ubuntu 12.04 pam_tally2 counter increments by 2 instead of 1

I am a high school CS coach and am preparing a lesson on Ubuntu 12.04 failed login attempts (pam_tally2) with the objective of demonstrating how to lock out a user after x failed login attempts. I ...
0
votes
0answers
54 views

Mail server PAM authentication error

Few days ago, the mail server wasn't able to send any mail (only receiving), i checked the logs and found many errors "wrong authentication and buffer error" auth_pam: pam_authenticate failed: Memory ...
0
votes
1answer
34 views

systemd in LXC endlessly trying to umount pam_mount home

I use the following $HOME/.pam_mount.conf.xml to mount an LXC container filesystem when I log in via SSH: <?xml version="1.0" encoding="utf-8" ?> <!DOCTYPE pam_mount SYSTEM ...
0
votes
0answers
59 views

How to authenticate users via PAM using freeradius?

I have like 20 users in server2, and I need to configure PAM on server1 to authenticate users against /etc/passwd file using freeradius which is configured on server2 with a shared secret ...
3
votes
0answers
115 views

SSH with PAM Google

I have a server with Google Authenticator enabled. It worked fine, and one day I tried to login, and suddenly I'm not able to. Fortunately, I do have Ajenti installed with a terminal, so it's not a ...
0
votes
0answers
20 views

Conditional authentication

I want to use the following authentication in Linux: If during the boot flash drive is connected, the logon to the operating system is performed by the user "user1", in this case should be carried out ...
0
votes
0answers
10 views

Defining what happens after trying 3 times to add a user with a pass that doesn't match the pass-policy set in pam.d

I've set a password policy, when creating a user for example, so that just passwords with at least 1upper- 1lower-case, 1symbol, 1digit and minimum 10character length are accepted. Now the problem ...
0
votes
1answer
354 views

How to suppress pam_unix(sshd:session): session closed for user

I have a Ubuntu (14.x) host serving as a git repository box (via GitLab CE). Around 50 users are using shared user (in this case "gitlab") to connect to the box to sync their repositories. This method ...
1
vote
1answer
66 views

Can't log in from terminal

I have a server with a hosting provider (OVH). I've never had any trouble logging in via SSH, but I use RSA authentication, so I'm not sure if I could actually get in with a password. However, when ...
1
vote
0answers
47 views

Gnome-keyring is not being unlock when i log in in gdm

My ubuntu 14.04.2 is always asking the password for gnome-keyring after login. I want to automatically unlock that, but all that I've found is for too older versions of Ubuntu, and seems that answers ...
0
votes
1answer
234 views

how to setup two factor authentication in Ubuntu for Ubuntu users using Google authenticator?

How to setup two factor authentication in Ubuntu for Ubuntu users using Google authenticator (It can also be setup for non Google accounts)?
0
votes
0answers
91 views

PAM searches /lib/security when modules in /lib/x86…/security

While configuring PAM, many times I notice an error like Apr 12 11:09:09 localhost vsftpd: PAM unable to dlopen(pam_umask.so): /lib/security/pam_umask.so: cannot open shared object file: No such file ...
1
vote
1answer
180 views

PAM LDAP pam_ldap.so: failed to map segment from shared object: Cannot allocate memory

Im trying to get VSFTPD to work with LDAP using PAM. (since it does not sleep with SASL) If I login into FTP with a Shell credentails it works fine, but when I try to use an LDAP creds to login via ...
0
votes
0answers
145 views

Active Directory authentication with winbind on ubuntu 14.04 LTS not working

I am using Ubuntu 14.04 LTS and all required packages are already installed and I have configured /etc/samba/smb.conf file and /etc/krb5.conf file. The server is joined successfully to AD Server. I ...
4
votes
1answer
219 views

Permanently raising nofile limits in Ubuntu 14.04 LTS

I cannot seem to figure out what exactly is needed to allow the maximum number of file descriptors to be raised permanently for all users. /etc/security/limits.conf: root hard nofile ...
2
votes
0answers
61 views

How does LightDM treat PAM?

I use XFCE as my desktop, and I wanna know how LightDM works with PAM. when I use normal kernel arguments, LightDM starts and then XFCE is started by LightDM. When I add "text" to kernel parameter, ...
0
votes
0answers
80 views

Why dpkg asks “Override local changes to /etc/pam.d/common-*?” when libpam-runtime/override is set to false?

In my system, libpam-runtime/override is set to false (which I can see using debconf-get-selections). Why when upgrading the system, specifically libpam-systemd, dpkg still pops up the window ...
0
votes
0answers
97 views

minimal data showing in auth.log

I have locked my server down and to help troubleshoot any holes, I look in the logs, especially auth.log. In the logs, it shows that there are attempts to log in but no data shows. I am not able to ...
0
votes
1answer
174 views

Slow login when CIFS mounts are unavailable

I installed a PC with Ubuntu 14.04, Sssd and accounts in our OpenLDAP directory. Network shares residing on our Samba server are mounted automatically when a user logs in, through pam_mount ...
0
votes
0answers
355 views

What is the correct way to modify /etc/pam.d/common-auth?

By default /etc/pam.d/common-auth looks like this $ cat /etc/pam.d/common-auth # # /etc/pam.d/common-auth - authentication settings common to all services # # This file is included from other ...
0
votes
0answers
132 views

How to resolve failed PAM radius authentications for local account?

I have a local account which is not set up for radius on my 14.04 server, then I have multiple radius accounts. The local account is used for automatic file transfers from network devices and creates ...
2
votes
0answers
210 views

How do we implement requirements of password policy?

This question might look similar but I could not find a solution to this which covers all the below requirements of the policy, Hence please help me: - Incorrect pass lockout (after 3 incorrect ...
0
votes
1answer
488 views

How to install PECL PAM in Ubuntu 14.04

Can any one help to install PECL PAM in ubuntu 14.04 system . I have tried to install via terminal using sudo aptitude install php5-auth-pam this is what we get "Couldn't find any package whose name ...
1
vote
0answers
53 views

Can login via ssh, but not system tty

Here's something weird. I can: ssh xyz@localhost provide my password, and login as xyz. However, I if hit ctrl-alt-F3 to go to the system prompt, and try to login as the same user xyz I get a ...
2
votes
1answer
512 views

Why is sssd an unrecognized service, even though it is installed and can be restarted?

Why is sssd an unrecognized service, even though it is installed and can be restarted? BTW: This concerns Ubuntu 14.04.1 LTS, it was not like that in 12.04 I will show what I mean below, I think it is ...
0
votes
0answers
44 views

Ubuntu 14.04 logon weirdness

Something weird has happened to my 14.04 installation Now at the login screen I can simply click in the box where you enter the password and it logs me in without any need for a password Is this not ...
0
votes
1answer
96 views

Kerberos/NIS users require shadow hack

If I have a Ubuntu system to use Kerberos for authentication and NIS for information, users cannot log in unless I copy the content of my NIS shadow map to /etc/shadow. They get insta-rejected. If I ...
2
votes
0answers
400 views

Can't authenticate against LDAP. /etc/nsswitch.conf seems to be ignored

Running ubuntu 14.0.4.1 on a BananaPi (ARM). I've had a lot of luck getting LDAP authentication to work under 14.0.4 on x86, but something about this just isn't working. If you run getent passwd | ...
1
vote
0answers
112 views

How to enforce LDAP group membership with libpam_ldap for SSHD

I am running 14.04 servers that I have install the ldap authentication package ldap-auth-client on and configured to connect to our LDAP servers. I have the authentication part working as well as the ...
0
votes
0answers
86 views

How to use pamusb to ONLY autologin

Is it possible to configure pamusb to only handle the login authentication? Right now all my authentication can be done with an usb stick, which means sudo and other stuff can be run by any random ...
1
vote
0answers
74 views

Custom MOTD does not update until scripts finish

I recently got a small server and gave some friends accounts on it. They all have their own web pages in ~/public_html using lighttpd so I wrote a script to backup every user's public_html directory. ...
2
votes
0answers
122 views

lubuntu completely ignoring ldap setup. Followed guide, no contact with ldap server

We have LDAP authentication working on every other server and lxc container in our enterprise, but when we try and have a brand spankin new Lubuntu 14.04 installation do the same, it's completely ...
0
votes
0answers
62 views

Restrict Direct User Login with SSH but Allow SSH Access from Single User

I have a user (a) whose direct login must be restricted except for when user is ssh'd from a particular user (b). For all other users direct login must be restricted. Is there any way to accomplish ...
0
votes
0answers
742 views

Subversion (svnserve) authentication against system users via saslauthd with PAM (12.04LTS)

I've read many posts here and elsewhere, none really satisfies my question. I'm trying to get svnserve to authenticate users via sasl using the PAM method (ie, authenticate via system users). I've ...
1
vote
1answer
122 views

TRIM on encrypted device with Precise

I have migrated the main data to a new SSD. (That is Samsung 840 EVO, 120GB.) My ~ is an encrypted partition automounted by pam_mount. That is, there is a record in /etc/security/pam_mount.conf.xml ...
1
vote
0answers
151 views

Ubuntu 12.04: pam_motd sometimes displays only partial MOTD

This isn't a very big deal but it really irritates me somehow. We have a large number of machines running Ubuntu 12.04 (server/amd64) which i frequently ssh into. We have the standard set-up for this ...
3
votes
0answers
64 views

Biometric Enrollment

I am interested in developing a Match-on-card Logon functionality (biometric enrollment) for users on Ubuntu. I've searched through PAM modules, in Ubuntu Software Center, and with Google, and found ...
0
votes
0answers
12 views

Match-on-card Logon

I am interested in developing a Match-on-card Logon functionality for users on Ubuntu. I've searched through PAM modules, in Ubuntu Software Center, and with Google, and found nothing that would help ...
0
votes
0answers
253 views

CUPS isn't allowed to access SSSD for authentication

I'm running Ubuntu 14.04. The CUPS server requires authentication for all print jobs. If I send a job as a domain user I get the following errors. Any help would be appreciated. I can't find anything ...
0
votes
3answers
149 views

How do I change options in PAM configuration?

I have an issue that research indicates can be corrected by changing an option in a PAM configuration by running pam-auth-update. I've done that, but cannot for the life of me figure out how to change ...
0
votes
1answer
441 views

PAM Module & nsswitch.conf

As i know, there are two authentication schema available on linux. PAM auth modules and, /etc/nsswitch.conf file When user logs in, which one take the precedence.?
0
votes
1answer
68 views

Most of my software just disappeared (Kubuntu)

Amarok, konsole, dolphin, volume control, and a lot of other software just disappeared after I restored pam.d to default last night. Is there some way for me to restore my software without restoring ...
2
votes
2answers
3k views

14.04 Not authenticating on chsh command

I am trying to change my default shell to zsh. I have the entry placed correctly in /etc/shells file. Each attempt I have made with this command has ended with the same error message: chsh -s ...
1
vote
0answers
916 views

pam_systemd delays SSH login - required?

On our Saucy servers (13.10) we are seeing long delays when logging into the systems via SSH. I figured out it is related to the line session optional pam_systemd.so in ...
0
votes
2answers
375 views

Can't login after killing X Server with encrypted home directory

I have ctrl-alt-backspace enabled to terminate Xorg in an xorg.conf.d file: Section "InputClass" Identifier "Keyboard Defaults" MatchIsKeyboard "yes" Option ...
0
votes
1answer
2k views

PAM USB on 14.04 su “username” = “no passwd entry for user 'Thornton'”

I followed the directions located here http://linuxconfig.org/linux-authentication-login-with-usb-device Once I reached step 4 I found that the changed authorizations did nothing, so I reverted back, ...
2
votes
0answers
97 views

In /etc/pam.d/sshd, what does “# [1]” mean?

In the PAM configuration file /etc/pam.d/sshd, there are a few lines ending in # [1]; for example: session optional pam_motd.so # [1] This doesn't seem to appear in any of the other PAM ...
3
votes
1answer
151 views

How to properly invoke motd for SSH connections with PAM disabled

I have configured a nice motd message that shows me lots of relevant infos when I login to my VPS via SSH. As password authentication is disabled in sshd_config I would also prefer to disable PAM as ...