Pluggable authentication modules (PAM)

learn more… | top users | synonyms

0
votes
2answers
91 views

Can't login after killing X Server with encrypted home directory

I have ctrl-alt-backspace enabled to terminate Xorg in an xorg.conf.d file: Section "InputClass" Identifier "Keyboard Defaults" MatchIsKeyboard "yes" Option ...
3
votes
1answer
39 views

How to properly invoke motd for SSH connections with PAM disabled

I have configured a nice motd message that shows me lots of relevant infos when I login to my VPS via SSH. As password authentication is disabled in sshd_config I would also prefer to disable PAM as ...
3
votes
1answer
1k views

What causes “pam_unix … conversation failed” in auth.log

There are thousands of entries in my auth.log like this: sudo: pam_unix(sudo:auth): conversation failed What causes these to occur? I'd like to fix whatever it is but I'm a bit mystified as to ...
2
votes
1answer
36 views

how to manage ubuntu users from php

I have an Ubuntu 12.04 server machine in a local net, and I would like to log in my user through php. I have tried with pam_auth() but it wasn't configured neither activated for php. I tried a ...
1
vote
1answer
1k views

Mount the directory / HOME directory located on a remote Windows 2008 R2

I am currently working on the integration of Ubuntu 12.04 LTS Linux on an Active Directory domain in Windows 2008 R2. I have managed to integrate my Ubuntu 12.04 machine to AD 2008, my user ...
0
votes
1answer
34 views

Most of my software just disappeared (Kubuntu)

Amarok, konsole, dolphin, volume control, and a lot of other software just disappeared after I restored pam.d to default last night. Is there some way for me to restore my software without restoring ...
0
votes
1answer
48 views

Non-root users to shutdown using PAM

I want to configure PAM to enable non-root normal users to be able to shutdown. how to do that? I'm using Ubuntu server 12.04 I know how to do that with many ways such as changing permissions of ...
0
votes
1answer
39 views

filter PAM_yubico.so debug stdout

I want to use the yubico-pam module (https://github.com/Yubico/yubico-pam) to enable challenge-response authentification using my yubikey when sudoing. I've managed to do that by adding the line ...
0
votes
1answer
171 views

Kerberos and google-authenticator (2-factor auth)

Does anyone know how can I use google-authenticator in combination with kerberos and thus provide to my users 2-factor authentication?
0
votes
1answer
318 views

vsftpd hanging when using pam_exec or pam_script

I have VSFTPD integrated with pam_mysql, allowing me to successfully login to an FTP server using accounts kept in a mysql database. I need to automatically create a directory for the user if it is ...
0
votes
1answer
119 views

MOTD is updated very rarely

I understand that pam_motd updates the MOTD upon login, but sometimes MOTD just doesn't get updated for days and I'm puzzled what might be the reason. I'd like to add uptime and who outputs to the ...
0
votes
1answer
1k views

Getting error sudo: pam_authenticate: Module is unknown

I am new to Ubuntu and have installed Ubuntu 12.04.3 on my laptop. I need to install VAS on it but when I do I get the error: sudo: pam_authenticate: Module is unknown. And I cannot make any other ...
0
votes
1answer
315 views

Login with facial recognition in Ubuntu 13.04?

I have tried to install „PAM face authentication“ with the following commands: sudo add-apt-repository ppa:antonio.chiurazzi sudo apt-get update sudo apt-get install pam-face-authentication But it ...
0
votes
1answer
91 views

Identification and Authentication methods in Ubuntu

Since I have a very long password, I would like to additionally use an alternative login method. Which other authentication methods are possible in Ubuntu to log in?
0
votes
1answer
58 views

Cascading Authentication PAM login

I'm trying to set up an authentication scheme for Ubuntu using the pam files. However, I cannot figure out how to have two separate methods of authentication. I've set up a Yubikey authentication, ...
0
votes
1answer
101 views

Pam face authentication terminal install went wrong

I was following the steps from this link http://lkubuntu.wordpress.com/2011/06/28/pam-face-authentication/ I was trying to set it so I could use my webcam and face recognition to unlock my computer. ...
0
votes
1answer
181 views

Password not accepted at login

I had tried to setup kerberos authentication to log into some ADS thing at my new university, however that didn't work and resulted in me having to enter my password twice for everything. So I did: ...
0
votes
1answer
43 views

Can I manually reload the missing files?

I have Ubuntu 10.04 installed on my system. Recently, I was swapping out hard drives and, when I rebooted my system, I could not log in. I would enter my username and password; then the system would ...
0
votes
1answer
914 views

How can I set up Active Directory user authentication?

I am an Active Directory engineer, so not really a Linux savvy person. I basically know enough to break a Linux workstation or server. We have a team that needs to use Ubuntu workstations with their ...
-1
votes
1answer
70 views

Gnome doesn't store password in keyring

I'm on 12.04, trying to extract my login credintials from ~/.gnome2/keyrings/login.keyring and not having much luck, looks like that keyring is empty. seahorse is showing it as an empty keystore. I ...
3
votes
0answers
432 views

How can I set up radius authentication properly?

On all of our linux workstations, we have configured the PAM modules to use radius authentication. This works well for all of the various things like login on the console, login using ssh, sudo, etc. ...
3
votes
0answers
866 views

Synchronize SSHFS mount with local filesystem

I've got a directory called "secure" that I mount on my laptop via sshfs whenever the server is in reach. While this server is in reach I want to keep it in two-way sync with a directory called ...
2
votes
0answers
88 views

Accidentally removed /etc/pam.d/common-* files

I accidentally removed /etc/pam.d/common-* files on Ubuntu 12.04 through ssh. I have a backup of the files however, I am unable to use sudo nor log back in. Is there a way to fix this?
1
vote
0answers
34 views

In /etc/pam.d/sshd, what does “# [1]” mean?

In the PAM configuration file /etc/pam.d/sshd, there are a few lines ending in # [1]; for example: session optional pam_motd.so # [1] This doesn't seem to appear in any of the other PAM ...
1
vote
0answers
111 views

Network Manager asks to unlock keyring after auto login

After updating from Precise to Trusty I get a popup requesting to unlock the keyring for Network Manager after each login (autologin is enabled). On the net people advise to make the connection ...
1
vote
0answers
59 views

PAM authentication using ssh key instead of password

When I try to use chsh to change my default shell, I get prompted for my user password. The problem is I log in using my SSH key and do not have a user password - by design. Yes, I can set a ...
1
vote
0answers
101 views

pam radius module access-reject

I am trying to set up an Ubuntu server that my users will connect to. I already have a Radius server running on a Windows box, and I would like for connections to this Ubuntu box to authenticate to ...
1
vote
0answers
21 views

Portable users on network

I am moving all my windows desktops to Ubuntu in my office. I have a phone system which allows my users to login on any phone thus any desk they sit at is 'their desk' I would like to do something ...
1
vote
0answers
148 views

ppolicy with pam_ldap - pwdReset has no effect when logging in from Ubuntu

We installed ppolicy overlay on our ldap server. Password policies work correctly for locking out user after X incorrect password attempts, but we can't enforce user to change his password. When we ...
1
vote
0answers
144 views

GNOME Does Not Enforce Password Complexity in 12.04

I'm lost on this: I have password complexity configured in /etc/pam.d/common-password and /etc/pam.d/common-auth. While logged in as a regular user I can reset a password from a terminal window and ...
1
vote
0answers
470 views

How to make simple system user authentication work with postfix/dovecot on 12.10?

I have been wrestling on this a LOT. I never properly understood but I presume that authentication by the system users is done with PAM and the default authentication method for both Dovecot and ...
0
votes
0answers
7 views

Allow alternate login method to decrypt home folder

I updated and rebuilt the guide for unlocking *buntu and derivatives via Common Access card here, and I've run into a sort of snag with logging into the DM (likely due to an encrypted home folder.) It ...
0
votes
0answers
29 views

After ldap and pam installation I cannot log in my computer

after ldap (Server) and pam (client) installation I cannot log with my user or my root in my computer. Maybe I configured wrong in pam. But I know password for root and ldap admin. After reboot I ...
0
votes
0answers
16 views

what is PAM.d directory usage

I saw pam.d directory on the etc directory. What is PAM and its usage . I saw that for the first time in here. Is that for authentication users ?
0
votes
0answers
76 views

pam_systemd delays SSH login - required?

On our Saucy servers (13.10) we are seeing long delays when logging into the systems via SSH. I figured out it is related to the line session optional pam_systemd.so in ...
0
votes
0answers
249 views

PAM USB on 14.04 su “username” = “no passwd entry for user 'Thornton'”

I followed the directions located here http://linuxconfig.org/linux-authentication-login-with-usb-device Once I reached step 4 I found that the changed authorizations did nothing, so I reverted back, ...
0
votes
0answers
239 views

Add all new users and guest user to a group dynamically on ubuntu 14.04

I would like to add all the users (current, new, guest) to a particular group, lets say "audio" dynamically. Can you tell me how I can accomplish this ?
0
votes
0answers
21 views

How to change location of .config directory

My home directory is located on a network filer with fixed quota. I'm running out of my quota as different applications saving their data in home directory. For example google-chrome, storing data ...
0
votes
0answers
115 views

PAM authentication failure

I got a dedicated server from a reputable hosting company. Unfortunately, they're one of those companies that thinks enabling root access is a good idea. I've successfully disabled root access and ...
0
votes
0answers
66 views

libnss-extrausers change password

I have Ubuntu 12.04. Installed libnss-extrausers and configured nsswitch.conf. Now, users registered in /var/lib/extrausers/{passwd,group,shadow} are recognized by the system and can login. However, ...
0
votes
0answers
73 views

Running xrandr With pam_exec

Can anyone tell me why xrandr doesn't work when I run it using pam_exec? I'm having the same issue as 12.04 Resolution Changes on Lock + KVM only in 13.10, but I think I'm close to a solution. It's ...
0
votes
0answers
389 views

How to mount a Truecrypt volume with cryptsetup 1.6 and above via pam_mount?

I installed cryptsetup 1.6.2 in 13.10 from this PPA. Versions above 1.6 feature Truecrypt volume support and I can successfully mount my volume from the terminal but haven't been able to automatically ...
0
votes
0answers
42 views

How to get users accounts info on Ubuntu Desktop using Mono C#?

Is there an Mono C# class or lib their can retrieve info abort all local users accounts on a Ubuntu/ linux system? For Ubuntu systems their is NOT on an domain-controller.
0
votes
0answers
246 views

passwd history through PAM not working (and weird 'Authentication token manipulation error' when using passwd)

I'm trying to set my password policy to remember the last two passwords a user chose, and to prevent him or her from re-using those particular passwords. I'm currently running Ubuntu 12.10 through ...
0
votes
0answers
128 views

Squid proxy pam_auth password expired in 60 days not taking ldap password policy

My openldap server Ubuntu 10.04.4 LTS with kernel verion 2.6.32-46-server my New proxy server 12.04.2 Lts with kernel 3.2.0-51-generic Ldap server having a policy for password expired in 90 days I ...