Questions tagged [pam]
Pluggable authentication modules (PAM)
308
questions
4
votes
1
answer
439
views
How to use PAM to restrict HTTP access for some users?
I've read that PAM can be used to restrict HTTP access for some users, but I can't figure out how to do it in Ubuntu 12.04.
The /etc/security/time.conf man page contains this example:
All users ...
- 724
4
votes
2
answers
3k
views
Can't log in to Samba PDC with domain account
I have a problem. I like to login on a Samba Server with my Ubuntu 10.04/11.04 PC. On my Samba Server there are some accounts with data, but I couldn't connect to it. I have done this:
aptitude -y ...
4
votes
0
answers
152
views
Ubuntu 20.04 GDM increments pam_tally without password input
I have an Ubuntu 20.04 machine with slightly modified common-auth and common-password files to lock the user out for 10 minutes if an incorrect password is tried 10 times. This works fine in the ...
- 41
4
votes
0
answers
256
views
Is it possible to use pam_mount with gvfs and how?
Is it possible to use gvfs with pam_mount, using user's password for the mounting command ?
How would one achieve that ?
Reading the documentation, it seems this might be a good start, but no way to ...
- 263
4
votes
1
answer
3k
views
Ubuntu 14.04 | Reset password asking me to Retype new password twice. Ideally it should be once
I recently tried to implement password policy (at least one digit, upper case, lowercase, a special character) using pam_cracklib module. After that, the system asks me to retype password twice ...
- 113
4
votes
1
answer
8k
views
What causes “pam_unix … conversation failed” in auth.log
There are thousands of entries in my auth.log like this:
sudo: pam_unix(sudo:auth): conversation failed
What causes these to occur? I'd like to fix whatever it is but I'm a bit mystified as to where ...
- 354
4
votes
0
answers
3k
views
Synchronize SSHFS mount with local filesystem [closed]
I've got a directory called "secure" that I mount on my laptop via sshfs whenever the server is in reach.
While this server is in reach I want to keep it in two-way sync with a directory ...
- 1,902
4
votes
1
answer
7k
views
Error "System is booting up. See pam_nologin(8)" [closed]
This morning, I see this error message showed in lightdm login interface, and cannot enter password.
So I went to TTY1 and saw:
[** ] A start job is running for monitor and control system power ...
- 271
3
votes
1
answer
6k
views
Finding pam module
I've started to read the documentation on pam and it says that the available modules should be stored in /lib/security or /lib/security64 for the examples they give to be applicable. My problem is ...
- 43
3
votes
2
answers
5k
views
Pam_mount won't automount encrypted partiton
As usual, when I install a new version of Ubuntu I install pam_mount to automount my with LUKS encrypted partition on login. However, for Ubuntu 11.10, I followed the same procedure as usual, but I ...
- 480
3
votes
1
answer
5k
views
Fingerprint reader compatibility
Preamble
I need to buy 8 external fingerprint readers but I'm not sure they will work on the latest version of Ubuntu and I do not want to spend money blindly.
The readers I would like to purchase ...
- 3,140
3
votes
1
answer
2k
views
how to check what incorrect password as attempted
In /var/logs/auth.log I can see the unsuccessful login attempts. They are like lines below:
Oct 16 05:04:02 myMachine unix_chkpwd[15793]: password check failed for user (user1).
Now is there a way ...
- 437
3
votes
1
answer
5k
views
How to set up centralized user authentication on Ubuntu?
I have installed OpenLDAP, and configured some basic users. Next, I want to configure users in my directory to be able to authenticate through my server. I was reading a little about something called ...
- 121
3
votes
1
answer
13k
views
pam_systemd delays SSH login - required?
On our Saucy servers (13.10) we are seeing long delays when logging into the systems via SSH.
I figured out it is related to the line
session optional pam_systemd.so
in /etc/pam.d/common-...
- 131
3
votes
3
answers
3k
views
vsftpd hanging when using pam_exec or pam_script
I have VSFTPD integrated with pam_mysql, allowing me to successfully login to an FTP server using accounts kept in a mysql database.
I need to automatically create a directory for the user if it is ...
- 131
3
votes
1
answer
5k
views
KdeWallet auto unlock at login
Just installed ubuntu 19.04 minimal with apt install plasma-desktop sddm dolphin konsole kdeconnect --no-install-recommends and apt install kwin kleopatra kwalletmanager libpam-kwallet5. All good. ...
- 103
3
votes
2
answers
8k
views
How to configure pam.d files for ldap over ssh on 12.04?
I'm trying to set up an Ubuntu 12.04 server so that users with a valid account in a remote ldap server can login to the ubuntu server.
I've followed this guide closely: http://wiki.linuxquestions.org/...
- 191
3
votes
0
answers
4k
views
pam_open_session: Module is unknown
I am using Ubuntu 20.10 in WSL, and there are problems with changing the ulimit -n. I tried several methods and one of them needed to add session required pam_limits.so line to the /etc/pam.d/common-...
- 161
3
votes
0
answers
1k
views
Password complexity policy
System: Ubuntu 18.04
I've set up ubuntu with freeradius and am using the built in user authentication to authenticate logins.
I'm now trying to set up a simple way for the users to change their ...
3
votes
0
answers
614
views
mount command hangs when share is unavailable
So we are using a combination of samba, winbind and pam_mount to authenticate users from AD and mount network share individually and everything works fine except for when a share is unavailable.
In ...
- 31
3
votes
1
answer
1k
views
How do I configure the lockscreen to use my PAM module in 16.04
In 14.04 I was able to do this by adding a line to /etc/pam.d/lightdm and my module is invoked for both login and the lock screen. In 16.04 it is only invoked at the login screen; the lock screen ...
- 131
3
votes
0
answers
2k
views
Ubuntu 16.04 Unable to locate package pamusb-tools
Im trying to install PAM so I can unlock my computer with my usb drive but when I try to install pamusb-tools and libpam-usb, it can't find those pakages. Is there a repository I need to add?
user545420
3
votes
0
answers
117
views
Biometric Enrollment
I am interested in developing a Match-on-card Logon functionality (biometric enrollment) for users on Ubuntu. I've searched through PAM modules, in Ubuntu Software Center, and with Google, and found ...
- 31
3
votes
0
answers
387
views
In /etc/pam.d/sshd, what does "# [1]" mean?
In the PAM configuration file /etc/pam.d/sshd, there are a few lines ending in # [1]; for example:
session optional pam_motd.so # [1]
This doesn't seem to appear in any of the other PAM ...
- 131
2
votes
2
answers
10k
views
how to increase maximum open files for memcached service
Using ulimit -n i am able to set per shell based maximum open files limit
To make this value persistent i am able to edit this is in /etc/security/limits.conf and restart the ubuntu 12.10 box, here ...
- 21
2
votes
1
answer
6k
views
How to suppress pam_unix(sshd:session): session closed for user
I have a Ubuntu (14.x) host serving as a Git repository box (via GitLab CE). Around 50 users are using shared user (in this case gitlab) to connect to the box to sync their repositories. This method ...
- 232
2
votes
1
answer
8k
views
can't login ubuntu but can ssh to it
The last few lines from /var/log/auth.log:
Jan 9 22:59:57 miranda-OptiPlex-790 lightdm: PAM adding faulty module: pam_kwallet5.so
Jan 9 22:59:57 miranda-OptiPlex-790 lightdm: pam_succeed_if(lightdm:...
- 165
2
votes
2
answers
998
views
sudo fails because of `pam_mount.c` assertion
I just upgraded to Kubuntu 12.04 from 11.10.
Now when I use sudo I almost always get:
sudo: pam_mount.c:417: modify_pm_count: Assertion `user != ((void *)0)' failed.
It makes the command fail.
...
- 8,348
2
votes
1
answer
816
views
Conditionally stop interactive and non-interactive ssh login and give error message
I want to prevent interactive and non-interactive ssh login based on a conditional logic. I need to test the username and give an error message.
People using sftp (non-interactive ssh) should also be ...
- 689
2
votes
2
answers
8k
views
How to setup virtual users for sftp (sshd) with access to a specific sub directory?
I try to setup virtual users for sftp with sshd and/or pam.
My folder structure looks like this:
/
|-- var
| +-- www
| +-- site1
| +-- folder_1
| +-- folder_2
| +-- ...
- 71
2
votes
1
answer
6k
views
Mount.cifs with krb5 fails on 20.04 LTS
I have a Synology NAS and multiple Ubuntu Clients in my network. I setup Active Directory integration on the clients following the instructions here https://ubuntu.com/server/docs/service-sssd.
...
- 321
2
votes
1
answer
21k
views
Why system keep ask to enter password for the first member of sudo group instead of deny command execution
We have OS ubuntu 18.04. There are 2 users presented :
user1, user2. user1 is administrative account and is member of sudo group:
uid=1010(user1) gid=1010(user1) groups=1010(user1),27(sudo),110(lxd). ...
- 358
2
votes
2
answers
4k
views
Why dpkg asks "Override local changes to /etc/pam.d/common-*?" when libpam-runtime/override is set to false?
In my system, libpam-runtime/override is set to false (which I can see using debconf-get-selections).
Why when upgrading the system, specifically libpam-systemd, dpkg still pops up the window "...
- 2,475
2
votes
1
answer
2k
views
How to disable pam_mount if no password is provided (i. e. authentication with an ssh-key)?
I'm using pam_mount to automatically mount SMB/CIFS shares on login of a user and this works so far, but when someone authenticates without a password (via ssh-key) the mount fails because there is no ...
- 541
2
votes
2
answers
2k
views
Ubuntu 16.04LTS - pwquality.conf & pam_pwquality registering incorrect passwords, but approves them anyway
I'm working on implementing password quality requirements in Ubuntu Server 16.04LTS. I have configured 'pwquality.conf' with the requirements and '/etc/pam.d/common-password' to add pam_pwquality.so ...
- 21
2
votes
1
answer
5k
views
PAM unable to dlopen pam_sss.so pam_cap.so pam_systemd.so pam_pwquality.so
Since yesterday i have a huge number of errors in journald log. New records appears at 3-5 in each second:
окт 24 09:08:37 ripcomp su[7405]: PAM unable to dlopen(pam_sss.so): /lib/security/pam_sss.so:...
- 21
2
votes
1
answer
2k
views
Why USERGROUPS_ENAB property in /etc/login.defs does not have any effect?
I just found the following comment in /etc/login.defs:
# Enable setting of the umask group bits to be the same as owner bits
# (examples: 022 -> 002, 077 -> 007) for non-root users, if the uid ...
- 857
2
votes
1
answer
8k
views
enable pam module as default
I want to enable some pam modules automatically in a script. mkhomedir is disabled as default. If you start pam-auth-update, there is no check mark in
Create home directory on login
How can I ...
- 73
2
votes
2
answers
5k
views
pam_tally2 not locking user out after failed attempts on Ubuntu 14 and 16
I'm not sure if this issue is with pam_tally2 itself or with Ubuntu which is what I'm trying to find out. pam_tally2 for some reason is having issues on 14 and 16. My /etc/pam.d/common-auth file ...
- 21
2
votes
1
answer
2k
views
How to validate passwords with pam
I have got a bash script which asks for your password, and then needs to validate the password using pam, I have installed libpam0g-dev as I understand I need it for this, but how exactly do I go ...
user364819
2
votes
1
answer
3k
views
PAM LDAP pam_ldap.so: failed to map segment from shared object: Cannot allocate memory
Im trying to get VSFTPD to work with LDAP using PAM. (since it does not sleep with SASL)
If I login into FTP with a Shell credentails it works fine, but when I try to use an LDAP creds to login via ...
- 51
2
votes
1
answer
2k
views
Show a notification at login using pam_exec
This simple script will show a Zenity notification when the user logs in:
case "$PAM_TYPE" in
'open_session' )
if [ "$PAM_SERVICE" = "lightdm" ] ; then
DISPLAY=:0 sudo -u $...
- 2,886
2
votes
1
answer
2k
views
After Upgrade to 12.04 the Login takes forever
I recently upgraded from Xubuntu 11.10 to 12.04. Since then it takes a very long time for me to Login.
The time it takes to get to the login screen is normal but after I type in my password it takes ...
- 21
2
votes
1
answer
303
views
"AND Operator" in PAM
I need to prevent users from authenticating through Kerberos when the encrypted /home/users has not yet been mounted. (This is to avoid corrupting the ecryptfs mountpoint)
Currently I have these ...
- 1,902
2
votes
1
answer
208
views
22.04 Fingerprint login keeps losing my fingerprints
I have set up fingerprint login for my 22.04 installation. It has been working well for a few weeks but now rejects all login attempts.
When I go to 'Users' in settings, the Fingerprint Login has ...
- 21
2
votes
0
answers
2k
views
How to setup up PAM to unlock gnome-keyring
I am trying to use Ubuntu with effectively using ly display manager, however it does not seem to setup the PAM settings with Debian, I so I need to do this manually. My research shows that this is ...
- 279
2
votes
1
answer
620
views
Get system to accept fingerprint OR password
I have a working fingerprint scanner, but this does not allow me to unlock the login key ring. Therefor, I am looking for solutions to allow me to type my password to login whenever the key ring would ...
- 21
2
votes
1
answer
2k
views
What happened to pamusb-tools and libpam-usb in Ubuntu 20.04?
I'm looking into how to make one of my usbs a security key and I found a guide to do so inside Linux here: https://bytevarsity.com/how-to-make-a-usb-security-key/
Two packages that the guide says to ...
- 45
2
votes
0
answers
860
views
Is it possible to automount SMB share on a common mount point in a multi user Ubuntu 20.04 Desktop environment using NTLMv2 / login credentials?
I wish to mount SMB share on a common mount point for all users and auto mount it when it's accessed, like when you map a network drive to a common drive letter in a Windows environment and it just ...
- 66
2
votes
0
answers
486
views
understanding why/how my accounts got locked out after libpam-systemd update
Some of my accounts are locked out after an updated of Ubuntu 20.04 with the latest libpam-systemd package. I'm trying to understand why some accounts are locked out and others not, since the common-...
- 21