Pluggable authentication modules (PAM)

learn more… | top users | synonyms

4
votes
1answer
199 views

How to properly invoke motd for SSH connections with PAM disabled

I have configured a nice motd message that shows me lots of relevant infos when I login to my VPS via SSH. As password authentication is disabled in sshd_config I would also prefer to disable PAM as ...
3
votes
1answer
2k views

What causes “pam_unix … conversation failed” in auth.log

There are thousands of entries in my auth.log like this: sudo: pam_unix(sudo:auth): conversation failed What causes these to occur? I'd like to fix whatever it is but I'm a bit mystified as to ...
2
votes
1answer
79 views

how to manage ubuntu users from php

I have an Ubuntu 12.04 server machine in a local net, and I would like to log in my user through php. I have tried with pam_auth() but it wasn't configured neither activated for php. I tried a ...
1
vote
1answer
43 views

Problem with PAM authorization in Dovecot

I've been using postfix with sasl and dovecot for many years. Three days ago, authorization for dovecot via PAM stopped working which means no IMAP or POP3. SASL was working as I could tunnel in with ...
1
vote
1answer
141 views

how to roll back broken privileges in 14.04?

I am running Ubuntu 14.04.3 32bit OS. A few months ago I wanted to install QTCAM from source which it requires systemd library files. As you know 14.04 Ubuntu doesn't use systemd yet, so, as the ...
6
votes
0answers
89 views

How to force user to run quiz after login and before displaying desktop

I have a kid and I want to allow him to use the computer only after he solves a certain quiz at logon. I can write a quiz application itself. What I don't know is how to set it up in the way, that ...
4
votes
0answers
694 views

How can I set up radius authentication properly?

On all of our linux workstations, we have configured the PAM modules to use radius authentication. This works well for all of the various things like login on the console, login using ssh, sudo, etc. ...
4
votes
0answers
2k views

Synchronize SSHFS mount with local filesystem

I've got a directory called "secure" that I mount on my laptop via sshfs whenever the server is in reach. While this server is in reach I want to keep it in two-way sync with a directory called ...
3
votes
0answers
88 views

I locked myself out from using su or sudo. I'd like to understand what I did there

In an attempt to increase the numer of files my domino server is allowed to handle, I changed /etc/security/limits.conf, adding following lines. notes soft nofile 60000 notes hard nofile 60000 ...
3
votes
0answers
69 views

Biometric Enrollment

I am interested in developing a Match-on-card Logon functionality (biometric enrollment) for users on Ubuntu. I've searched through PAM modules, in Ubuntu Software Center, and with Google, and found ...
3
votes
0answers
141 views

In /etc/pam.d/sshd, what does “# [1]” mean?

In the PAM configuration file /etc/pam.d/sshd, there are a few lines ending in # [1]; for example: session optional pam_motd.so # [1] This doesn't seem to appear in any of the other PAM ...
2
votes
0answers
182 views

SSH with PAM Google

I have a server with Google Authenticator enabled. It worked fine, and one day I tried to login, and suddenly I'm not able to. Fortunately, I do have Ajenti installed with a terminal, so it's not a ...
2
votes
0answers
101 views

How does LightDM treat PAM?

I use XFCE as my desktop, and I wanna know how LightDM works with PAM. when I use normal kernel arguments, LightDM starts and then XFCE is started by LightDM. When I add "text" to kernel parameter, ...
2
votes
0answers
383 views

How do we implement requirements of password policy?

This question might look similar but I could not find a solution to this which covers all the below requirements of the policy, Hence please help me: - Incorrect pass lockout (after 3 incorrect ...
2
votes
0answers
1k views

Can't authenticate against LDAP. /etc/nsswitch.conf seems to be ignored

Running ubuntu 14.0.4.1 on a BananaPi (ARM). I've had a lot of luck getting LDAP authentication to work under 14.0.4 on x86, but something about this just isn't working. If you run getent passwd | ...
2
votes
0answers
217 views

How to enforce LDAP group membership with libpam_ldap for SSHD

I am running 14.04 servers that I have install the ldap authentication package ldap-auth-client on and configured to connect to our LDAP servers. I have the authentication part working as well as the ...
2
votes
0answers
198 views

lubuntu completely ignoring ldap setup. Followed guide, no contact with ldap server

We have LDAP authentication working on every other server and lxc container in our enterprise, but when we try and have a brand spankin new Lubuntu 14.04 installation do the same, it's completely ...
2
votes
0answers
116 views

Accidentally removed /etc/pam.d/common-* files

I accidentally removed /etc/pam.d/common-* files on Ubuntu 12.04 through ssh. I have a backup of the files however, I am unable to use sudo nor log back in. Is there a way to fix this?
1
vote
0answers
15 views

shutdown or reboot after entering wrong password x times

My laptop is configured with a bios password to unlock the encrypted ssd. Most times I don't shut it down and use just suspend/resume - this of course leaves the ssd accessible. To increase security ...
1
vote
0answers
26 views

PAM USB: require USB device only for some users

I have configured the pam_usb module on my Ubuntu 14.04.4 system. The current common-auth rules look like this: auth sufficient pam_usb.so auth [success=1 default=ignore] ...
1
vote
0answers
26 views

Connect with an AD user to a ubuntu Machine

I try to log on under a ubuntu machine with an AD user via the GUI lightdm , but access is denied with "invalid password , please try again " My machine has been added in the AD : net ads join -U ...
1
vote
0answers
62 views

winbind and passwd issues

I successfully configured a Ubuntu 15.10 Workstation to authenticate against Active Directory. The only thing left so far is the ability to change the Active Directory password. When I enter the ...
1
vote
0answers
293 views

Why do I have to set usePAM to 'no' to manage a ssh connection?

I have a system user named user1 (the main one). I've tried to set a ssh connection between a user named foreignuser and the main one (user1). For that, I've generated a couple of keys with ...
1
vote
0answers
104 views

Gnome-keyring is not being unlock when i log in in gdm

My ubuntu 14.04.2 is always asking the password for gnome-keyring after login. I want to automatically unlock that, but all that I've found is for too older versions of Ubuntu, and seems that answers ...
1
vote
0answers
1k views

What is the correct way to modify /etc/pam.d/common-auth?

By default /etc/pam.d/common-auth looks like this $ cat /etc/pam.d/common-auth # # /etc/pam.d/common-auth - authentication settings common to all services # # This file is included from other ...
1
vote
0answers
85 views

Can login via ssh, but not system tty

Here's something weird. I can: ssh xyz@localhost provide my password, and login as xyz. However, I if hit ctrl-alt-F3 to go to the system prompt, and try to login as the same user xyz I get a ...
1
vote
0answers
97 views

Custom MOTD does not update until scripts finish

I recently got a small server and gave some friends accounts on it. They all have their own web pages in ~/public_html using lighttpd so I wrote a script to backup every user's public_html directory. ...
1
vote
0answers
187 views

Ubuntu 12.04: pam_motd sometimes displays only partial MOTD

This isn't a very big deal but it really irritates me somehow. We have a large number of machines running Ubuntu 12.04 (server/amd64) which i frequently ssh into. We have the standard set-up for this ...
1
vote
0answers
270 views

Network Manager asks to unlock keyring after auto login

After updating from Precise to Trusty I get a popup requesting to unlock the keyring for Network Manager after each login (autologin is enabled). On the net people advise to make the connection ...
1
vote
0answers
246 views

PAM authentication using ssh key instead of password

When I try to use chsh to change my default shell, I get prompted for my user password. The problem is I log in using my SSH key and do not have a user password - by design. Yes, I can set a ...
0
votes
0answers
9 views

How do I setup Homeshares that ask for the password that uses pam authentication?

How do I setup shares that lists the users under homes for the home directory share and when clicking on the username it requests the password from the pam authentication module? This will happen when ...
0
votes
0answers
26 views

Password not working on “Switch User” only

I have Ubuntu 15.10 x64, which was upgraded in a long series of upgrades going back to 9.04. Over time, many things (including most of the hardware by now) have changed. What has not changed, however ...
0
votes
0answers
10 views

Lightdm - Login using two passwords?

I was thinking of an extra security layer by using two passwords for login. Is it possible to configure lightdm in such a way that it will ask you for two correct passphrases? I thought of including ...
0
votes
0answers
45 views

PAM Not Working

I am trying to enable PAM in Ubuntu 14.04, but the rules I am trying are not working, Where as these rules are working with CentOS and RedHat. Can anyone tell me how can I use PAM. I am trying to ...
0
votes
0answers
26 views

Fingerprint reader authenticates but does not close dialog box

I have a T550 which sports the following reader: Bus 002 Device 016: ID 138a:0017 Validity Sensors, Inc. After plenty of tweaking around I managed to get it to work. I managed to register my ...
0
votes
0answers
78 views

force pam to return success

I want to be able to login (without systemd-user-sessions.service running, is it possible?). I masked the systemd-user-sessions.service, rebooted, but PAM wont let me in (I can login in tty1 though): ...
0
votes
0answers
39 views

How to get rid of “You must choose a longer password” fast and without thinking?

I'm a Slackware user and now I'm here in a Ubuntu 14.04. I tried to change my password (to a simpler one) with passwd and got: You must choose a longer password I did a quick search and found the ...
0
votes
0answers
58 views

How to enable password authentication limit on lock-screen in ubuntu 12.04 ?

I need to limit the user to 3 failed login attempts. If the user doesn't enter correct password after 3 attempts, I need to lock his account for certain configurable period of time. I have read about ...
0
votes
0answers
45 views

iniparser: cannot open /etc/security/pam_winbind.conf

Each time I type a sudo command I get this: iniparser: cannot open /etc/security/pam_winbind.conf What's this error and how can I get ride of it?
0
votes
0answers
46 views

pam_mount, pam_ldap and screen unlocking

I am having trouble getting these three components to work in an ldap environment: authenticate the ldap user mount a folder (type cifs) on login using pam_mount be able to unlock the screen once it ...
0
votes
0answers
107 views

How to Fuse Mount into Home Folders - After EcryptFS is mounted?

Question: In Linux, how do you automate a folder to be mounted into a User's Home Folder? -- But with these constraints: Only After their Encrypted Home Folder has been mounted -- so the mount ...
0
votes
0answers
33 views

password changed by poppassd doesn't reflect smbpasswd

I have installed poppassd and coded a php script for users to change their passwords via web. However I noticed that what being changed via poppassd did not reflect users' samba password. Any pointers ...
0
votes
0answers
29 views

What pam packages to install so that PAM running on OSx will compile and run on Ubuntu 15.04

In the Ubuntu Linux-pam 1.1.8 package the pam_prompt function is a void while in Linux-Pam and BSD packages it is a int function. Why the difference? We have PAM running on OSX and want to now use ...
0
votes
0answers
61 views

How do I enter password via keyboard without using pamUSB?

I installed pamUSB and I have used my USB flash drive to store and enter my password automatically in ubuntu 14.04. But my USB memory is formatted. Therefore, the system shows the following message ...
0
votes
0answers
421 views

NGINX Auth support and MYSQL

I have installed NGINX server. The requirement is to allow only certain IP addresses to access this service. The list of allowed IP are stored in a MYSQL database. I was able to install and configure ...
0
votes
0answers
50 views

Ubuntu 12.04 pam_tally2 counter increments by 2 instead of 1

I am a high school CS coach and am preparing a lesson on Ubuntu 12.04 failed login attempts (pam_tally2) with the objective of demonstrating how to lock out a user after x failed login attempts. I ...
0
votes
0answers
209 views

Mail server PAM authentication error

Few days ago, the mail server wasn't able to send any mail (only receiving), i checked the logs and found many errors "wrong authentication and buffer error" auth_pam: pam_authenticate failed: Memory ...
0
votes
0answers
316 views

How to authenticate users via PAM using freeradius?

I have like 20 users in server2, and I need to configure PAM on server1 to authenticate users against /etc/passwd file using freeradius which is configured on server2 with a shared secret ...
0
votes
0answers
32 views

Conditional authentication

I want to use the following authentication in Linux: If during the boot flash drive is connected, the logon to the operating system is performed by the user "user1", in this case should be carried out ...
0
votes
0answers
15 views

Defining what happens after trying 3 times to add a user with a pass that doesn't match the pass-policy set in pam.d

I've set a password policy, when creating a user for example, so that just passwords with at least 1upper- 1lower-case, 1symbol, 1digit and minimum 10character length are accepted. Now the problem ...