Pluggable authentication modules (PAM)

learn more… | top users | synonyms

0
votes
1answer
262 views

Pam face authentication terminal install went wrong

I was following the steps from this link http://lkubuntu.wordpress.com/2011/06/28/pam-face-authentication/ I was trying to set it so I could use my webcam and face recognition to unlock my computer. ...
1
vote
1answer
3k views

how to increase maximum open files for memcached service

Using ulimit -n i am able to set per shell based maximum open files limit To make this value persistent i am able to edit this is in /etc/security/limits.conf and restart the ubuntu 12.10 box, here ...
0
votes
1answer
552 views

How to recover faulty pam.d configuration?

I am struggle to login after configured kerberos in pam.d. Eventhough , I tried with root user , it also no use. I know, I did something wrong on that but how can I restore the pam.d configuration? ...
0
votes
1answer
241 views

Password not accepted at login

I had tried to setup kerberos authentication to log into some ADS thing at my new university, however that didn't work and resulted in me having to enter my password twice for everything. So I did: ...
5
votes
1answer
3k views

Login on local terminal without password

I have a virtual guest of Ubuntu on a KVM Machine, I've setup the machine so I can type virsh console and be dropped into a console. I realise the security considerations here, but is it possible to ...
3
votes
2answers
7k views

How to configure pam.d files for ldap over ssh on 12.04?

I'm trying to set up an Ubuntu 12.04 server so that users with a valid account in a remote ldap server can login to the ubuntu server. I've followed this guide closely: http://wiki.linuxquestions.org/...
4
votes
1answer
238 views

How to use PAM to restrict HTTP access for some users?

I've read that PAM can be used to restrict HTTP access for some users, but I can't figure out how to do it in Ubuntu 12.04. The /etc/security/time.conf man page contains this example: All users ...
8
votes
1answer
627 views

Use one password for administration and another for system login

How can I give a user one password for normal usage when logging in, and another password for system administration and sudo access? I want one user to have two passwords.
2
votes
0answers
121 views

Accidentally removed /etc/pam.d/common-* files

I accidentally removed /etc/pam.d/common-* files on Ubuntu 12.04 through ssh. I have a backup of the files however, I am unable to use sudo nor log back in. Is there a way to fix this?
5
votes
1answer
5k views

How do I enforce a password complexity policy?

I need to configure an Ubuntu server to follow a strict company password policy that specifies the following: at least one upper case at least one lower case at least one digit at least one special ...
2
votes
1answer
731 views

Show a notification at login using pam_exec

This simple script will show a Zenity notification when the user logs in: case "$PAM_TYPE" in 'open_session' ) if [ "$PAM_SERVICE" = "lightdm" ] ; then DISPLAY=:0 sudo -u $...
0
votes
1answer
515 views

Difference between /etc/security/pam_env.conf and /etc/environment + making sudo read pam_env.conf

I struggle to see the difference between pam_env.conf and /etc/environment. To me they both do the same thing, with a difference syntax. The manpages were no help. So what is the difference? ...
3
votes
1answer
2k views

What causes “pam_unix … conversation failed” in auth.log

There are thousands of entries in my auth.log like this: sudo: pam_unix(sudo:auth): conversation failed What causes these to occur? I'd like to fix whatever it is but I'm a bit mystified as to ...
4
votes
1answer
631 views

How to use pam_blue with lightdm, and unity-greeter?

I want lightdm to skip asking for my password if my phone is nearby. How is that possible with lightdm, and unity-greeter? Also I'm interested in knowing whether its secure, because it doesn't seem ...
8
votes
9answers
23k views

Desktop login fails, terminal works

I have a freshly setup 12.04 LTS pc system (120 GB SSD, 1 TB HDD, 16 GiB RAM); since a few days, I can't login to the graphical desktop anymore: there is very short flashing shell window which ...
1
vote
1answer
2k views

Mount the directory / HOME directory located on a remote Windows 2008 R2

I am currently working on the integration of Ubuntu 12.04 LTS Linux on an Active Directory domain in Windows 2008 R2. I have managed to integrate my Ubuntu 12.04 machine to AD 2008, my user ...
4
votes
0answers
708 views

How can I set up radius authentication properly?

On all of our linux workstations, we have configured the PAM modules to use radius authentication. This works well for all of the various things like login on the console, login using ssh, sudo, etc. ...
0
votes
2answers
863 views

NFS users getting a laggy GUI expierence

I am setting up a system (ubuntu 12.04) that uses ldap, pam, and autofs to load users and their home folders from a remote server. One of the options for login is sitting down at the machine and ...
4
votes
1answer
3k views

I cannot login into any TTYs

My system is Ubuntu 11.10 (installed from 0, without upgrades/updates). When I enter into any tty (1, 2, 3..) it ask me my login name and password but I can not move forward. When I enter an user ...
0
votes
1answer
43 views

Can I manually reload the missing files?

I have Ubuntu 10.04 installed on my system. Recently, I was swapping out hard drives and, when I rebooted my system, I could not log in. I would enter my username and password; then the system would ...
52
votes
3answers
5k views

How can I use a passcode generator for authentication for remote logins?

I would like to strengthen the authentication of my SSH logins by adding another factor: a passcode generator device, or a passcode generation application on my mobile phone. The only obvious options ...
1
vote
1answer
293 views

with wrong pam_environment unable to login

I made some mistakes in my ~/.pam_environment file; the changes caused a login failure. I cannot log in to my system. I only have one super account. I tried to press ctrl-alt-f1 to enter into full ...
14
votes
2answers
21k views

How do you set requirements (such as minimum length) on passwords?

Is there any way to set up minimum passcode requirements, such as a minimum length, requirement of mixed case alphanumerics and at least 1 symbol in the passcode, and enforce that at passcode changes?
2
votes
2answers
941 views

sudo fails because of `pam_mount.c` assertion

I just upgraded to Kubuntu 12.04 from 11.10. Now when I use sudo I almost always get: sudo: pam_mount.c:417: modify_pm_count: Assertion `user != ((void *)0)' failed. It makes the command fail. ...
2
votes
1answer
1k views

After Upgrade to 12.04 the Login takes forever

I recently upgraded from Xubuntu 11.10 to 12.04. Since then it takes a very long time for me to Login. The time it takes to get to the login screen is normal but after I type in my password it takes ...
2
votes
1answer
212 views

“AND Operator” in PAM

I need to prevent users from authenticating through Kerberos when the encrypted /home/users has not yet been mounted. (This is to avoid corrupting the ecryptfs mountpoint) Currently I have these ...
7
votes
1answer
4k views

How to Run Pam Face Authentication

I am using Ubuntu 11.10. I went to the following URL to download the software Pam Face Authentication and downloaded the version for natty narhwall. I installed the software using the following ...
1
vote
1answer
297 views

What are the common pitfalls that would stop Authorised Key SSH access, and how do I find and correct for them?

EDIT: This question was reworked to make it more useful to the community and less specific to me. Questions seem to come up reasonably often regarding ssh and problems with authorised keys access, ...
0
votes
2answers
5k views

su: Authentication failure (Ignored)

Keeping in mind this was working before: When I try to login as : su jira1 I get error: su: Authentication failure (Ignored) more /etc/passwd returns: jira1:x:1003:1003:,,,:/home/jira1:/bin/...
0
votes
1answer
1k views

How can I set up Active Directory user authentication?

I am an Active Directory engineer, so not really a Linux savvy person. I basically know enough to break a Linux workstation or server. We have a team that needs to use Ubuntu workstations with their ...
4
votes
1answer
2k views

Enable ecryptfs for all new users, even those authenticating through kerberos and ldap

How do I make sure that all users have their home directory encrypted when the login for the first time? I have setup pam to use Kerberos authentication and LDAP authorization (which I think should ...
4
votes
0answers
2k views

Synchronize SSHFS mount with local filesystem

I've got a directory called "secure" that I mount on my laptop via sshfs whenever the server is in reach. While this server is in reach I want to keep it in two-way sync with a directory called "sync"...
17
votes
1answer
2k views

Setup for mounting kerberized nfs home directory - gssd not finding valid kerberos ticket

Our home directories are exported via kerberized nfs, so the user needs a valid kerberos ticket to be able to mount its home. This setup works fine with our existing clients & server. Now we want ...
1
vote
3answers
528 views

Ubuntu, Gnome, PAM and ecryptfs

I would like to have a directory accessible to a couple of users, and not readable by maintenance types ... I can do what I want using ecryptfs and a password known only to the "couple of users" in ...
2
votes
2answers
3k views

Pam_mount won't automount encrypted partiton

As usual, when I install a new version of Ubuntu I install pam_mount to automount my with LUKS encrypted partition on login. However, for Ubuntu 11.10, I followed the same procedure as usual, but I ...
0
votes
1answer
6k views

How do I enable account lockout using pam_tally?

I am trying to implement account lockout in ubuntu using pam_tally. I have tried adding the follwing lines in /etc/pam.d/common-auth auth required pam_tally.so deny=3 account required ...
4
votes
1answer
720 views

SSSD + Encrypted /home, no longer automounts at login

I've switched a few boxes over to SSSD, so they now authenticate against a central LDAP server, and cache the credentials when I'm offline. This works fine, and the Ubuntu packages installed fine. ...
4
votes
3answers
15k views

Where are passwords stored?

How do you figure out where are user's passwords stored, for users that can login? I know the system is using LDAP for users (username, home path, etc.), but it doesn't contain any kind of passwords. ...
4
votes
2answers
2k views

Can't log in to Samba PDC with domain account

I have a problem. I like to login on a Samba Server with my Ubuntu 10.04/11.04 PC. On my Samba Server there are some accounts with data, but I couldn't connect to it. I have done this: aptitude -y ...
5
votes
1answer
2k views

“CRON: Module is unknown” after upgrading to 10.04

I just upgraded our server to Ubuntu 10.04 and cron just stopped working. I tried to restart the server, restart cron but nothing worked for me. It just reports in /var/log/syslog: May 12 16:32:01 ...
10
votes
1answer
1k views

Custom mount points in gvfs

Is there a way to attach gvfs mount to a custom directory? So instead of ~/.gvfs/sftp for leon on filezzzz.tim-online.nl/ something like: ~/mounts/filezzzz.tim-online.nl/? I thought about using ...
0
votes
1answer
2k views

I can't login in vsftpd with virtual users

Ubuntu 10.04 32 bits vsftpd 2.3.4 installed from sources # cat vsftpd.conf listen=YES anonymous_enable=NO local_enable=YES write_enable=YES anon_upload_enable=NO anon_mkdir_write_enable=NO ...