Pluggable authentication modules (PAM)

learn more… | top users | synonyms

7
votes
1answer
128 views

How to force user to run quiz after login and before displaying desktop

I have a kid and I want to allow him to use the computer only after he solves a certain quiz at logon. I can write a quiz application itself. What I don't know is how to set it up in the way, that ...
7
votes
1answer
4k views

How to Run Pam Face Authentication

I am using Ubuntu 11.10. I went to the following URL to download the software Pam Face Authentication and downloaded the version for natty narhwall. I installed the software using the following ...
4
votes
1answer
209 views

How to properly invoke motd for SSH connections with PAM disabled

I have configured a nice motd message that shows me lots of relevant infos when I login to my VPS via SSH. As password authentication is disabled in sshd_config I would also prefer to disable PAM as ...
3
votes
1answer
2k views

What causes “pam_unix … conversation failed” in auth.log

There are thousands of entries in my auth.log like this: sudo: pam_unix(sudo:auth): conversation failed What causes these to occur? I'd like to fix whatever it is but I'm a bit mystified as to ...
4
votes
0answers
700 views

How can I set up radius authentication properly?

On all of our linux workstations, we have configured the PAM modules to use radius authentication. This works well for all of the various things like login on the console, login using ssh, sudo, etc. ...
4
votes
0answers
2k views

Synchronize SSHFS mount with local filesystem

I've got a directory called "secure" that I mount on my laptop via sshfs whenever the server is in reach. While this server is in reach I want to keep it in two-way sync with a directory called ...
3
votes
0answers
104 views

I locked myself out from using su or sudo. I'd like to understand what I did there

In an attempt to increase the numer of files my domino server is allowed to handle, I changed /etc/security/limits.conf, adding following lines. notes soft nofile 60000 notes hard nofile 60000 ...
3
votes
0answers
70 views

Biometric Enrollment

I am interested in developing a Match-on-card Logon functionality (biometric enrollment) for users on Ubuntu. I've searched through PAM modules, in Ubuntu Software Center, and with Google, and found ...
3
votes
0answers
144 views

In /etc/pam.d/sshd, what does “# [1]” mean?

In the PAM configuration file /etc/pam.d/sshd, there are a few lines ending in # [1]; for example: session optional pam_motd.so # [1] This doesn't seem to appear in any of the other PAM ...
2
votes
0answers
188 views

SSH with PAM Google

I have a server with Google Authenticator enabled. It worked fine, and one day I tried to login, and suddenly I'm not able to. Fortunately, I do have Ajenti installed with a terminal, so it's not a ...
2
votes
0answers
103 views

How does LightDM treat PAM?

I use XFCE as my desktop, and I wanna know how LightDM works with PAM. when I use normal kernel arguments, LightDM starts and then XFCE is started by LightDM. When I add "text" to kernel parameter, ...
2
votes
0answers
386 views

How do we implement requirements of password policy?

This question might look similar but I could not find a solution to this which covers all the below requirements of the policy, Hence please help me: - Incorrect pass lockout (after 3 incorrect ...
2
votes
0answers
1k views

Can't authenticate against LDAP. /etc/nsswitch.conf seems to be ignored

Running ubuntu 14.0.4.1 on a BananaPi (ARM). I've had a lot of luck getting LDAP authentication to work under 14.0.4 on x86, but something about this just isn't working. If you run getent passwd | ...
2
votes
0answers
228 views

How to enforce LDAP group membership with libpam_ldap for SSHD

I am running 14.04 servers that I have install the ldap authentication package ldap-auth-client on and configured to connect to our LDAP servers. I have the authentication part working as well as the ...
2
votes
0answers
207 views

lubuntu completely ignoring ldap setup. Followed guide, no contact with ldap server

We have LDAP authentication working on every other server and lxc container in our enterprise, but when we try and have a brand spankin new Lubuntu 14.04 installation do the same, it's completely ...
2
votes
0answers
119 views

Accidentally removed /etc/pam.d/common-* files

I accidentally removed /etc/pam.d/common-* files on Ubuntu 12.04 through ssh. I have a backup of the files however, I am unable to use sudo nor log back in. Is there a way to fix this?
1
vote
0answers
22 views

shutdown or reboot after entering wrong password x times

My laptop is configured with a bios password to unlock the encrypted ssd. Most times I don't shut it down and use just suspend/resume - this of course leaves the ssd accessible. To increase security ...
1
vote
0answers
31 views

PAM USB: require USB device only for some users

I have configured the pam_usb module on my Ubuntu 14.04.4 system. The current common-auth rules look like this: auth sufficient pam_usb.so auth [success=1 default=ignore] ...
1
vote
0answers
36 views

Connect with an AD user to a ubuntu Machine

I try to log on under a ubuntu machine with an AD user via the GUI lightdm , but access is denied with "invalid password , please try again " My machine has been added in the AD : net ads join -U ...
1
vote
0answers
75 views

winbind and passwd issues

I successfully configured a Ubuntu 15.10 Workstation to authenticate against Active Directory. The only thing left so far is the ability to change the Active Directory password. When I enter the ...
1
vote
0answers
306 views

Why do I have to set usePAM to 'no' to manage a ssh connection?

I have a system user named user1 (the main one). I've tried to set a ssh connection between a user named foreignuser and the main one (user1). For that, I've generated a couple of keys with ...
1
vote
0answers
108 views

Gnome-keyring is not being unlock when i log in in gdm

My ubuntu 14.04.2 is always asking the password for gnome-keyring after login. I want to automatically unlock that, but all that I've found is for too older versions of Ubuntu, and seems that answers ...
1
vote
0answers
1k views

What is the correct way to modify /etc/pam.d/common-auth?

By default /etc/pam.d/common-auth looks like this $ cat /etc/pam.d/common-auth # # /etc/pam.d/common-auth - authentication settings common to all services # # This file is included from other ...
1
vote
0answers
90 views

Can login via ssh, but not system tty

Here's something weird. I can: ssh xyz@localhost provide my password, and login as xyz. However, I if hit ctrl-alt-F3 to go to the system prompt, and try to login as the same user xyz I get a ...
1
vote
0answers
98 views

Custom MOTD does not update until scripts finish

I recently got a small server and gave some friends accounts on it. They all have their own web pages in ~/public_html using lighttpd so I wrote a script to backup every user's public_html directory. ...
1
vote
0answers
191 views

Ubuntu 12.04: pam_motd sometimes displays only partial MOTD

This isn't a very big deal but it really irritates me somehow. We have a large number of machines running Ubuntu 12.04 (server/amd64) which i frequently ssh into. We have the standard set-up for this ...
1
vote
0answers
274 views

Network Manager asks to unlock keyring after auto login

After updating from Precise to Trusty I get a popup requesting to unlock the keyring for Network Manager after each login (autologin is enabled). On the net people advise to make the connection ...
1
vote
0answers
253 views

PAM authentication using ssh key instead of password

When I try to use chsh to change my default shell, I get prompted for my user password. The problem is I log in using my SSH key and do not have a user password - by design. Yes, I can set a ...
0
votes
0answers
7 views

pam / ad issue with cron

Jobs in /etc/crontab which belong to non-local users now fail. That is a bit of a problem for us: May 26 13:05:01 machineXYZ CRON[26927]: pam_sss(cron:account): \ Access denied for ...
0
votes
0answers
31 views

Authenticate user agains Active Directory LDAP

I'm trying to let users login on a Ubuntu 16.04 Desktop with their active directory user/pass. I'm using pam/ldap to do so, but I'm running into a problem when the rebinding occurs. I have a ...
0
votes
0answers
65 views

Ubuntu 16.04 Unable to locate package pamusb-tools

Im trying to install PAM so I can unlock my computer with my usb drive but when I try to install pamusb-tools and libpam-usb, it can't find those pakages. Is there a repository I need to add?
0
votes
0answers
73 views

Installing and configuring LDAP & NSCD break 16.04 Xenial

I have done many installs and always end up breaking the system. The steps I take are: Fresh, clean install (have done both LVM and non-LVM, UEFI and EFI) on HDD with no other OSes in place Reboot ...
0
votes
0answers
19 views

How to overwrite PAM rule from `common-auth` ? (`nullok` to make sshd accept empty passwords)

I got advice to change pam configuration (as I look for a way to make ssh user with empty password): sudo sed -i 's/nullok_secure/nullok/' /etc/pam.d/common-auth However in /etc/pam.d/common-auth I ...
0
votes
0answers
36 views

How do I setup Homeshares that ask for the password that uses pam authentication?

How do I setup shares that lists the users under homes for the home directory share and when clicking on the username it requests the password from the pam authentication module? This will happen when ...
0
votes
0answers
34 views

Password not working on “Switch User” only

I have Ubuntu 15.10 x64, which was upgraded in a long series of upgrades going back to 9.04. Over time, many things (including most of the hardware by now) have changed. What has not changed, however ...
0
votes
0answers
12 views

Lightdm - Login using two passwords?

I was thinking of an extra security layer by using two passwords for login. Is it possible to configure lightdm in such a way that it will ask you for two correct passphrases? I thought of including ...
0
votes
0answers
51 views

PAM Not Working

I am trying to enable PAM in Ubuntu 14.04, but the rules I am trying are not working, Where as these rules are working with CentOS and RedHat. Can anyone tell me how can I use PAM. I am trying to ...
0
votes
0answers
31 views

Fingerprint reader authenticates but does not close dialog box

I have a T550 which sports the following reader: Bus 002 Device 016: ID 138a:0017 Validity Sensors, Inc. After plenty of tweaking around I managed to get it to work. I managed to register my ...
0
votes
0answers
126 views

force pam to return success

I want to be able to login (without systemd-user-sessions.service running, is it possible?). I masked the systemd-user-sessions.service, rebooted, but PAM wont let me in (I can login in tty1 though): ...
0
votes
0answers
47 views

How to get rid of “You must choose a longer password” fast and without thinking?

I'm a Slackware user and now I'm here in a Ubuntu 14.04. I tried to change my password (to a simpler one) with passwd and got: You must choose a longer password I did a quick search and found the ...
0
votes
0answers
68 views

How to enable password authentication limit on lock-screen in ubuntu 12.04 ?

I need to limit the user to 3 failed login attempts. If the user doesn't enter correct password after 3 attempts, I need to lock his account for certain configurable period of time. I have read about ...
0
votes
0answers
49 views

iniparser: cannot open /etc/security/pam_winbind.conf

Each time I type a sudo command I get this: iniparser: cannot open /etc/security/pam_winbind.conf What's this error and how can I get ride of it?
0
votes
0answers
54 views

pam_mount, pam_ldap and screen unlocking

I am having trouble getting these three components to work in an ldap environment: authenticate the ldap user mount a folder (type cifs) on login using pam_mount be able to unlock the screen once it ...
0
votes
0answers
116 views

How to Fuse Mount into Home Folders - After EcryptFS is mounted?

Question: In Linux, how do you automate a folder to be mounted into a User's Home Folder? -- But with these constraints: Only After their Encrypted Home Folder has been mounted -- so the mount ...
0
votes
0answers
34 views

password changed by poppassd doesn't reflect smbpasswd

I have installed poppassd and coded a php script for users to change their passwords via web. However I noticed that what being changed via poppassd did not reflect users' samba password. Any pointers ...
0
votes
0answers
31 views

What pam packages to install so that PAM running on OSx will compile and run on Ubuntu 15.04

In the Ubuntu Linux-pam 1.1.8 package the pam_prompt function is a void while in Linux-Pam and BSD packages it is a int function. Why the difference? We have PAM running on OSX and want to now use ...
0
votes
0answers
67 views

How do I enter password via keyboard without using pamUSB?

I installed pamUSB and I have used my USB flash drive to store and enter my password automatically in ubuntu 14.04. But my USB memory is formatted. Therefore, the system shows the following message ...
0
votes
0answers
460 views

NGINX Auth support and MYSQL

I have installed NGINX server. The requirement is to allow only certain IP addresses to access this service. The list of allowed IP are stored in a MYSQL database. I was able to install and configure ...
0
votes
0answers
53 views

Ubuntu 12.04 pam_tally2 counter increments by 2 instead of 1

I am a high school CS coach and am preparing a lesson on Ubuntu 12.04 failed login attempts (pam_tally2) with the objective of demonstrating how to lock out a user after x failed login attempts. I ...
0
votes
0answers
215 views

Mail server PAM authentication error

Few days ago, the mail server wasn't able to send any mail (only receiving), i checked the logs and found many errors "wrong authentication and buffer error" auth_pam: pam_authenticate failed: Memory ...