Pluggable authentication modules (PAM)

learn more… | top users | synonyms

1
vote
0answers
15 views

Ubuntu 16.04 auth_pam broken

I'm trying to set up a mail server on a fresh Ubuntu 16.04 machine but I can't get it to work properly. I'm using a Postfix/Courier setup with MySQL for authentication. Receiving emails and reading ...
0
votes
0answers
15 views

Installing and configuring LDAP & NSCD break 16.04 Xenial

I have done many installs and always end up breaking the system. The steps I take are: Fresh, clean install (have done both LVM and non-LVM, UEFI and EFI) on HDD with no other OSes in place Reboot ...
0
votes
5answers
51 views

Lockscreen access denied (AD auth via sssd)

On xenial, the lock screen doesn't work for me. Whether I enter the correct password or not, it won't let me in. However, if I click on the menu at the top right corner of the screen and choose ...
0
votes
0answers
9 views

How to overwrite PAM rule from `common-auth` ? (`nullok` to make sshd accept empty passwords)

I got advice to change pam configuration (as I look for a way to make ssh user with empty password): sudo sed -i 's/nullok_secure/nullok/' /etc/pam.d/common-auth However in /etc/pam.d/common-auth I ...
1
vote
1answer
40 views

pam_sss System error, how to find the problem?

I was using Ubuntu 15.10, but upgraded to 16.04 LTS today. Since the upgrade I can no longer authenticate against our AD. I have tried using https://help.ubuntu.com/lts/serverguide/sssd-ad.html as a ...
0
votes
0answers
23 views

How do I setup Homeshares that ask for the password that uses pam authentication?

How do I setup shares that lists the users under homes for the home directory share and when clicking on the username it requests the password from the pam authentication module? This will happen when ...
1
vote
0answers
16 views

shutdown or reboot after entering wrong password x times

My laptop is configured with a bios password to unlock the encrypted ssd. Most times I don't shut it down and use just suspend/resume - this of course leaves the ssd accessible. To increase security ...
1
vote
1answer
67 views

pam_mount stopped working

This is how it worked: my Ubuntu workstations authenticate against Active Directory, and pam_mount mounts some CIFS directories on user logon. Now, for some reason, pam_mount stopped working and no ...
1
vote
1answer
59 views

Problem with PAM authorization in Dovecot

I've been using postfix with sasl and dovecot for many years. Three days ago, authorization for dovecot via PAM stopped working which means no IMAP or POP3. SASL was working as I could tunnel in with ...
6
votes
0answers
99 views

How to force user to run quiz after login and before displaying desktop

I have a kid and I want to allow him to use the computer only after he solves a certain quiz at logon. I can write a quiz application itself. What I don't know is how to set it up in the way, that ...
0
votes
0answers
26 views

Password not working on “Switch User” only

I have Ubuntu 15.10 x64, which was upgraded in a long series of upgrades going back to 9.04. Over time, many things (including most of the hardware by now) have changed. What has not changed, however ...
0
votes
1answer
30 views

PAM configuration error can cause “The system is running in low-graphics mode” error

I want to add this information to the question 'How to fix “The system is running in low-graphics mode” error?', but I'm newly registered and don't have the reputation to comment on that question. ...
0
votes
0answers
10 views

Lightdm - Login using two passwords?

I was thinking of an extra security layer by using two passwords for login. Is it possible to configure lightdm in such a way that it will ask you for two correct passphrases? I thought of including ...
1
vote
0answers
27 views

PAM USB: require USB device only for some users

I have configured the pam_usb module on my Ubuntu 14.04.4 system. The current common-auth rules look like this: auth sufficient pam_usb.so auth [success=1 default=ignore] ...
1
vote
0answers
27 views

Connect with an AD user to a ubuntu Machine

I try to log on under a ubuntu machine with an AD user via the GUI lightdm , but access is denied with "invalid password , please try again " My machine has been added in the AD : net ads join -U ...
0
votes
0answers
47 views

PAM Not Working

I am trying to enable PAM in Ubuntu 14.04, but the rules I am trying are not working, Where as these rules are working with CentOS and RedHat. Can anyone tell me how can I use PAM. I am trying to ...
1
vote
1answer
146 views

how to roll back broken privileges in 14.04?

I am running Ubuntu 14.04.3 32bit OS. A few months ago I wanted to install QTCAM from source which it requires systemd library files. As you know 14.04 Ubuntu doesn't use systemd yet, so, as the ...
0
votes
1answer
26 views

Password required to suspend in Kubuntu after the latest upgrade

Looks like something broke PAM yet again. Kubuntu with the Backports PPA asks for my password instead of suspending after a period of inactivity. Anyone found the reason and/or a workaround yet?
0
votes
0answers
27 views

Fingerprint reader authenticates but does not close dialog box

I have a T550 which sports the following reader: Bus 002 Device 016: ID 138a:0017 Validity Sensors, Inc. After plenty of tweaking around I managed to get it to work. I managed to register my ...
0
votes
0answers
90 views

force pam to return success

I want to be able to login (without systemd-user-sessions.service running, is it possible?). I masked the systemd-user-sessions.service, rebooted, but PAM wont let me in (I can login in tty1 though): ...
0
votes
0answers
39 views

How to get rid of “You must choose a longer password” fast and without thinking?

I'm a Slackware user and now I'm here in a Ubuntu 14.04. I tried to change my password (to a simpler one) with passwd and got: You must choose a longer password I did a quick search and found the ...
0
votes
0answers
60 views

How to enable password authentication limit on lock-screen in ubuntu 12.04 ?

I need to limit the user to 3 failed login attempts. If the user doesn't enter correct password after 3 attempts, I need to lock his account for certain configurable period of time. I have read about ...
0
votes
0answers
45 views

iniparser: cannot open /etc/security/pam_winbind.conf

Each time I type a sudo command I get this: iniparser: cannot open /etc/security/pam_winbind.conf What's this error and how can I get ride of it?
3
votes
0answers
92 views

I locked myself out from using su or sudo. I'd like to understand what I did there

In an attempt to increase the numer of files my domino server is allowed to handle, I changed /etc/security/limits.conf, adding following lines. notes soft nofile 60000 notes hard nofile 60000 ...
0
votes
1answer
163 views

samba4 nslcd lightdm and pam_mount

I'm stuck with my setup and hoping for some help. I've setup an AD with Samba4 and nslcd as nss both on the server and the clients. I'm aware that Samba does not recommend running the AD and ...
1
vote
0answers
64 views

winbind and passwd issues

I successfully configured a Ubuntu 15.10 Workstation to authenticate against Active Directory. The only thing left so far is the ability to change the Active Directory password. When I enter the ...
0
votes
1answer
175 views

How to get PamUSB working again in Ubuntu 15.10

I use pamusb to authenticate via a USB key. However pamusb seems to have been removed from Ubuntu 15.10. That's fine, but what is the replacement? How can I do USB key authentication in Ubuntu ...
0
votes
0answers
46 views

pam_mount, pam_ldap and screen unlocking

I am having trouble getting these three components to work in an ldap environment: authenticate the ldap user mount a folder (type cifs) on login using pam_mount be able to unlock the screen once it ...
2
votes
1answer
33 views

how to check what incorrect password as attempted

In /var/logs/auth.log I can see the unsuccessful login attempts. They are like lines below: Oct 16 05:04:02 myMachine unix_chkpwd[15793]: password check failed for user (user1). Now is there a way ...
0
votes
1answer
39 views

Using ONLY Pamusb as authentication

Is it possible to only use pamusb to login (into xfce/lightdm) and not have a password at all? When I try to change pamusb to required in /etc/pam.d/common-auth and comment out the password thingie I ...
2
votes
1answer
260 views

sed permission denied when using pam_exec with su

I'm using pam_mount.so to automatically mount a CIFS share for users on an Ubuntu 14.04 client. pam_mount uses a local conf in every users home directory. I'm running a bash script with pam_exec that ...
2
votes
2answers
179 views

pam_tally2 doesn't count fails over ssh

I have added line auth required pam_tally2.so deny=3 unlock_time=180 to my /etc/pam.d/login file, and that's fine and dandy in tty, after 3 attempts testuser gets suspended. However, that very ...
0
votes
0answers
108 views

How to Fuse Mount into Home Folders - After EcryptFS is mounted?

Question: In Linux, how do you automate a folder to be mounted into a User's Home Folder? -- But with these constraints: Only After their Encrypted Home Folder has been mounted -- so the mount ...
0
votes
0answers
33 views

password changed by poppassd doesn't reflect smbpasswd

I have installed poppassd and coded a php script for users to change their passwords via web. However I noticed that what being changed via poppassd did not reflect users' samba password. Any pointers ...
0
votes
0answers
29 views

What pam packages to install so that PAM running on OSx will compile and run on Ubuntu 15.04

In the Ubuntu Linux-pam 1.1.8 package the pam_prompt function is a void while in Linux-Pam and BSD packages it is a int function. Why the difference? We have PAM running on OSX and want to now use ...
3
votes
1answer
219 views

How to validate passwords with pam

I have got a bash script which asks for your password, and then needs to validate the password using pam, I have installed libpam0g-dev as I understand I need it for this, but how exactly do I go ...
0
votes
0answers
61 views

How do I enter password via keyboard without using pamUSB?

I installed pamUSB and I have used my USB flash drive to store and enter my password automatically in ubuntu 14.04. But my USB memory is formatted. Therefore, the system shows the following message ...
0
votes
0answers
432 views

NGINX Auth support and MYSQL

I have installed NGINX server. The requirement is to allow only certain IP addresses to access this service. The list of allowed IP are stored in a MYSQL database. I was able to install and configure ...
1
vote
0answers
297 views

Why do I have to set usePAM to 'no' to manage a ssh connection?

I have a system user named user1 (the main one). I've tried to set a ssh connection between a user named foreignuser and the main one (user1). For that, I've generated a couple of keys with ...
0
votes
0answers
52 views

Ubuntu 12.04 pam_tally2 counter increments by 2 instead of 1

I am a high school CS coach and am preparing a lesson on Ubuntu 12.04 failed login attempts (pam_tally2) with the objective of demonstrating how to lock out a user after x failed login attempts. I ...
0
votes
0answers
209 views

Mail server PAM authentication error

Few days ago, the mail server wasn't able to send any mail (only receiving), i checked the logs and found many errors "wrong authentication and buffer error" auth_pam: pam_authenticate failed: Memory ...
0
votes
1answer
109 views

systemd in LXC endlessly trying to umount pam_mount home

I use the following $HOME/.pam_mount.conf.xml to mount an LXC container filesystem when I log in via SSH: <?xml version="1.0" encoding="utf-8" ?> <!DOCTYPE pam_mount SYSTEM ...
0
votes
0answers
325 views

How to authenticate users via PAM using freeradius?

I have like 20 users in server2, and I need to configure PAM on server1 to authenticate users against /etc/passwd file using freeradius which is configured on server2 with a shared secret ...
2
votes
0answers
182 views

SSH with PAM Google

I have a server with Google Authenticator enabled. It worked fine, and one day I tried to login, and suddenly I'm not able to. Fortunately, I do have Ajenti installed with a terminal, so it's not a ...
0
votes
0answers
33 views

Conditional authentication

I want to use the following authentication in Linux: If during the boot flash drive is connected, the logon to the operating system is performed by the user "user1", in this case should be carried out ...
0
votes
0answers
15 views

Defining what happens after trying 3 times to add a user with a pass that doesn't match the pass-policy set in pam.d

I've set a password policy, when creating a user for example, so that just passwords with at least 1upper- 1lower-case, 1symbol, 1digit and minimum 10character length are accepted. Now the problem ...
0
votes
1answer
1k views

How to suppress pam_unix(sshd:session): session closed for user

I have a Ubuntu (14.x) host serving as a git repository box (via GitLab CE). Around 50 users are using shared user (in this case "gitlab") to connect to the box to sync their repositories. This method ...
1
vote
1answer
301 views

Can't log in from terminal

I have a server with a hosting provider (OVH). I've never had any trouble logging in via SSH, but I use RSA authentication, so I'm not sure if I could actually get in with a password. However, when ...
1
vote
0answers
105 views

Gnome-keyring is not being unlock when i log in in gdm

My ubuntu 14.04.2 is always asking the password for gnome-keyring after login. I want to automatically unlock that, but all that I've found is for too older versions of Ubuntu, and seems that answers ...
5
votes
1answer
3k views

how to setup two factor authentication in Ubuntu for Ubuntu users using Google authenticator?

How to setup two factor authentication in Ubuntu for Ubuntu users using Google authenticator (It can also be setup for non Google accounts)?