Pluggable authentication modules (PAM)

learn more… | top users | synonyms

48
votes
2answers
5k views

How can I use a passcode generator for authentication for remote logins?

I would like to strengthen the authentication of my SSH logins by adding another factor: a passcode generator device, or a passcode generation application on my mobile phone. The only obvious options ...
17
votes
1answer
1k views

Setup for mounting kerberized nfs home directory - gssd not finding valid kerberos ticket

Our home directories are exported via kerberized nfs, so the user needs a valid kerberos ticket to be able to mount its home. This setup works fine with our existing clients & server. Now we want ...
12
votes
2answers
11k views

How do you set requirements (such as minimum length) on passwords?

Is there any way to set up minimum passcode requirements, such as a minimum length, requirement of mixed case alphanumerics and at least 1 symbol in the passcode, and enforce that at passcode changes? ...
9
votes
1answer
1k views

Custom mount points in gvfs

Is there a way to attach gvfs mount to a custom directory? So instead of ~/.gvfs/sftp for leon on filezzzz.tim-online.nl/ something like: ~/mounts/filezzzz.tim-online.nl/? I thought about using ...
8
votes
9answers
18k views

Desktop login fails, terminal works

I have a freshly setup 12.04 LTS pc system (120 GB SSD, 1 TB HDD, 16 GiB RAM); since a few days, I can't login to the graphical desktop anymore: there is very short flashing shell window which ...
7
votes
1answer
3k views

How to Run Pam Face Authentication

I am using Ubuntu 11.10. I went to the following URL to download the software Pam Face Authentication and downloaded the version for natty narhwall. I installed the software using the following ...
6
votes
2answers
604 views

MOTD is updated very rarely

I understand that pam_motd updates the MOTD upon login, but sometimes MOTD just doesn't get updated for days and I'm puzzled what might be the reason. I'd like to add uptime and who outputs to the ...
5
votes
1answer
1k views

Login on local terminal without password

I have a virtual guest of Ubuntu on a KVM Machine, I've setup the machine so I can type virsh console and be dropped into a console. I realise the security considerations here, but is it possible to ...
5
votes
1answer
2k views

“CRON: Module is unknown” after upgrading to 10.04

I just upgraded our server to Ubuntu 10.04 and cron just stopped working. I tried to restart the server, restart cron but nothing worked for me. It just reports in /var/log/syslog: May 12 16:32:01 ...
4
votes
3answers
11k views

Where are passwords stored?

How do you figure out where are user's passwords stored, for users that can login? I know the system is using LDAP for users (username, home path, etc.), but it doesn't contain any kind of passwords. ...
4
votes
1answer
2k views

I cannot login into any TTYs

My system is Ubuntu 11.10 (installed from 0, without upgrades/updates). When I enter into any tty (1, 2, 3..) it ask me my login name and password but I can not move forward. When I enter an user ...
4
votes
1answer
72 views

Permanently raising nofile limits in Ubuntu 14.04 LTS

I cannot seem to figure out what exactly is needed to allow the maximum number of file descriptors to be raised permanently for all users. /etc/security/limits.conf: root hard nofile ...
4
votes
1answer
602 views

SSSD + Encrypted /home, no longer automounts at login

I've switched a few boxes over to SSSD, so they now authenticate against a central LDAP server, and cache the credentials when I'm offline. This works fine, and the Ubuntu packages installed fine. ...
4
votes
1answer
363 views

How do I enable a specific pam config in the lockscreen?

In Trusty, there is a new lockscreen that fits the look and feel of lightdm, and shares some config files, especially for pam. I am using libpam-fprintd to allow using my fingerprint reader when ...
4
votes
1answer
194 views

How to use PAM to restrict HTTP access for some users?

I've read that PAM can be used to restrict HTTP access for some users, but I can't figure out how to do it in Ubuntu 12.04. The /etc/security/time.conf man page contains this example: All users ...
4
votes
2answers
1k views

Can't log in to Samba PDC with domain account

I have a problem. I like to login on a Samba Server with my Ubuntu 10.04/11.04 PC. On my Samba Server there are some accounts with data, but I couldn't connect to it. I have done this: aptitude -y ...
4
votes
0answers
617 views

How can I set up radius authentication properly?

On all of our linux workstations, we have configured the PAM modules to use radius authentication. This works well for all of the various things like login on the console, login using ssh, sudo, etc. ...
3
votes
1answer
410 views

Use one password for administration and another for system login

How can I give a user one password for normal usage when logging in, and another password for system administration and sudo access? I want one user to have two passwords.
3
votes
1answer
1k views

Enable ecryptfs for all new users, even those authenticating through kerberos and ldap

How do I make sure that all users have their home directory encrypted when the login for the first time? I have setup pam to use Kerberos authentication and LDAP authorization (which I think should ...
3
votes
1answer
2k views

How to enforce company password complexity in 10.04?

I need to configure a Ubuntu 10.04 server to follow a strict company password policy that specifies the following: at least one upper case at least one lower case at least one digit at least one ...
3
votes
2answers
5k views

Type password into login screen, hit enter - nothing happens

I first install Ubuntu 13.10 a few weeks ago and its been going great. I'm still pretty new to Linux, so I haven't been doing a whole lot. The past couple days I've tried installing LAMP, then ...
3
votes
1answer
310 views

How to use pam_blue with lightdm, and unity-greeter?

I want lightdm to skip asking for my password if my phone is nearby. How is that possible with lightdm, and unity-greeter? Also I'm interested in knowing whether its secure, because it doesn't seem ...
3
votes
2answers
6k views

How to configure pam.d files for ldap over ssh on 12.04?

I'm trying to set up an Ubuntu 12.04 server so that users with a valid account in a remote ldap server can login to the ubuntu server. I've followed this guide closely: ...
3
votes
0answers
56 views

Biometric Enrollment

I am interested in developing a Match-on-card Logon functionality (biometric enrollment) for users on Ubuntu. I've searched through PAM modules, in Ubuntu Software Center, and with Google, and found ...
3
votes
1answer
130 views

How to properly invoke motd for SSH connections with PAM disabled

I have configured a nice motd message that shows me lots of relevant infos when I login to my VPS via SSH. As password authentication is disabled in sshd_config I would also prefer to disable PAM as ...
3
votes
1answer
2k views

What causes “pam_unix … conversation failed” in auth.log

There are thousands of entries in my auth.log like this: sudo: pam_unix(sudo:auth): conversation failed What causes these to occur? I'd like to fix whatever it is but I'm a bit mystified as to ...
3
votes
0answers
1k views

Synchronize SSHFS mount with local filesystem

I've got a directory called "secure" that I mount on my laptop via sshfs whenever the server is in reach. While this server is in reach I want to keep it in two-way sync with a directory called ...
2
votes
2answers
897 views

sudo fails because of `pam_mount.c` assertion

I just upgraded to Kubuntu 12.04 from 11.10. Now when I use sudo I almost always get: sudo: pam_mount.c:417: modify_pm_count: Assertion `user != ((void *)0)' failed. It makes the command fail. ...
2
votes
2answers
3k views

14.04 Not authenticating on chsh command

I am trying to change my default shell to zsh. I have the entry placed correctly in /etc/shells file. Each attempt I have made with this command has ended with the same error message: chsh -s ...
2
votes
1answer
345 views

Why is sssd an unrecognized service, even though it is installed and can be restarted?

Why is sssd an unrecognized service, even though it is installed and can be restarted? BTW: This concerns Ubuntu 14.04.1 LTS, it was not like that in 12.04 I will show what I mean below, I think it is ...
2
votes
2answers
2k views

Pam_mount won't automount encrypted partiton

As usual, when I install a new version of Ubuntu I install pam_mount to automount my with LUKS encrypted partition on login. However, for Ubuntu 11.10, I followed the same procedure as usual, but I ...
2
votes
1answer
540 views

Show a notification at login using pam_exec

This simple script will show a Zenity notification when the user logs in: case "$PAM_TYPE" in 'open_session' ) if [ "$PAM_SERVICE" = "lightdm" ] ; then DISPLAY=:0 sudo -u ...
2
votes
1answer
1k views

After Upgrade to 12.04 the Login takes forever

I recently upgraded from Xubuntu 11.10 to 12.04. Since then it takes a very long time for me to Login. The time it takes to get to the login screen is normal but after I type in my password it takes ...
2
votes
1answer
184 views

“AND Operator” in PAM

I need to prevent users from authenticating through Kerberos when the encrypted /home/users has not yet been mounted. (This is to avoid corrupting the ecryptfs mountpoint) Currently I have these ...
2
votes
0answers
48 views

How does LightDM treat PAM?

I use XFCE as my desktop, and I wanna know how LightDM works with PAM. when I use normal kernel arguments, LightDM starts and then XFCE is started by LightDM. When I add "text" to kernel parameter, ...
2
votes
0answers
140 views

How do we implement requirements of password policy?

This question might look similar but I could not find a solution to this which covers all the below requirements of the policy, Hence please help me: - Incorrect pass lockout (after 3 incorrect ...
2
votes
0answers
289 views

Can't authenticate against LDAP. /etc/nsswitch.conf seems to be ignored

Running ubuntu 14.0.4.1 on a BananaPi (ARM). I've had a lot of luck getting LDAP authentication to work under 14.0.4 on x86, but something about this just isn't working. If you run getent passwd | ...
2
votes
0answers
101 views

lubuntu completely ignoring ldap setup. Followed guide, no contact with ldap server

We have LDAP authentication working on every other server and lxc container in our enterprise, but when we try and have a brand spankin new Lubuntu 14.04 installation do the same, it's completely ...
2
votes
0answers
73 views

In /etc/pam.d/sshd, what does “# [1]” mean?

In the PAM configuration file /etc/pam.d/sshd, there are a few lines ending in # [1]; for example: session optional pam_motd.so # [1] This doesn't seem to appear in any of the other PAM ...
2
votes
1answer
47 views

how to manage ubuntu users from php

I have an Ubuntu 12.04 server machine in a local net, and I would like to log in my user through php. I have tried with pam_auth() but it wasn't configured neither activated for php. I tried a ...
2
votes
0answers
98 views

Accidentally removed /etc/pam.d/common-* files

I accidentally removed /etc/pam.d/common-* files on Ubuntu 12.04 through ssh. I have a backup of the files however, I am unable to use sudo nor log back in. Is there a way to fix this?
1
vote
3answers
556 views

Restore accidentally with rm'ed pam.conf?

I have accidently removed the files /etc/pam.conf and /etc/security/pam_env.confusing rm. Now I get this error message when I try to use sudo: sudo: unable to initialize PAM: No such file or ...
1
vote
1answer
261 views

What are the common pitfalls that would stop Authorised Key SSH access, and how do I find and correct for them?

EDIT: This question was reworked to make it more useful to the community and less specific to me. Questions seem to come up reasonably often regarding ssh and problems with authorised keys access, ...
1
vote
1answer
33 views

Can't log in from terminal

I have a server with a hosting provider (OVH). I've never had any trouble logging in via SSH, but I use RSA authentication, so I'm not sure if I could actually get in with a password. However, when ...
1
vote
2answers
698 views

Sudo does not recognize my password anymore

The problem is happening on a remote server, so everything is done through ssh. I can login with my key, no problem here. I can change my password at will with passwd (which I believe shows that it's ...
1
vote
1answer
2k views

Getting error sudo: pam_authenticate: Module is unknown

I am new to Ubuntu and have installed Ubuntu 12.04.3 on my laptop. I need to install VAS on it but when I do I get the error: sudo: pam_authenticate: Module is unknown. And I cannot make any other ...
1
vote
1answer
272 views

USB PAM login with SD Card

I am trying to set up a PAM login token. I want to use an SD card instead of a normal USB flash disk. When I run the pamusb-conf to set up a new device, with the SD card inserted, it says that there ...
1
vote
1answer
2k views

how to increase maximum open files for memcached service

Using ulimit -n i am able to set per shell based maximum open files limit To make this value persistent i am able to edit this is in /etc/security/limits.conf and restart the ubuntu 12.10 box, here ...
1
vote
1answer
275 views

with wrong pam_environment unable to login

I made some mistakes in my ~/.pam_environment file; the changes caused a login failure. I cannot log in to my system. I only have one super account. I tried to press ctrl-alt-f1 to enter into full ...
1
vote
3answers
473 views

Ubuntu, Gnome, PAM and ecryptfs

I would like to have a directory accessible to a couple of users, and not readable by maintenance types ... I can do what I want using ecryptfs and a password known only to the "couple of users" in ...