Pluggable authentication modules (PAM)

learn more… | top users | synonyms

48
votes
2answers
5k views

How can I use a passcode generator for authentication for remote logins?

I would like to strengthen the authentication of my SSH logins by adding another factor: a passcode generator device, or a passcode generation application on my mobile phone. The only obvious options ...
17
votes
1answer
1k views

Setup for mounting kerberized nfs home directory - gssd not finding valid kerberos ticket

Our home directories are exported via kerberized nfs, so the user needs a valid kerberos ticket to be able to mount its home. This setup works fine with our existing clients & server. Now we want ...
10
votes
2answers
6k views

How do you set requirements (such as minimum length) on passwords?

Is there any way to set up minimum passcode requirements, such as a minimum length, requirement of mixed case alphanumerics and at least 1 symbol in the passcode, and enforce that at passcode changes? ...
9
votes
1answer
1k views

Custom mount points in gvfs

Is there a way to attach gvfs mount to a custom directory? So instead of ~/.gvfs/sftp for leon on filezzzz.tim-online.nl/ something like: ~/mounts/filezzzz.tim-online.nl/? I thought about using ...
7
votes
8answers
14k views

Desktop login fails, terminal works

I have a freshly setup 12.04 LTS pc system (120 GB SSD, 1 TB HDD, 16 GiB RAM); since a few days, I can't login to the graphical desktop anymore: there is very short flashing shell window which ...
7
votes
1answer
3k views

How to Run Pam Face Authentication

I am using Ubuntu 11.10. I went to the following URL to download the software Pam Face Authentication and downloaded the version for natty narhwall. I installed the software using the following ...
5
votes
1answer
1k views

“CRON: Module is unknown” after upgrading to 10.04

I just upgraded our server to Ubuntu 10.04 and cron just stopped working. I tried to restart the server, restart cron but nothing worked for me. It just reports in /var/log/syslog: May 12 16:32:01 ...
4
votes
3answers
9k views

Where are passwords stored?

How do you figure out where are user's passwords stored, for users that can login? I know the system is using LDAP for users (username, home path, etc.), but it doesn't contain any kind of passwords. ...
4
votes
1answer
2k views

I cannot login into any TTYs

My system is Ubuntu 11.10 (installed from 0, without upgrades/updates). When I enter into any tty (1, 2, 3..) it ask me my login name and password but I can not move forward. When I enter an user ...
4
votes
1answer
543 views

SSSD + Encrypted /home, no longer automounts at login

I've switched a few boxes over to SSSD, so they now authenticate against a central LDAP server, and cache the credentials when I'm offline. This works fine, and the Ubuntu packages installed fine. ...
4
votes
1answer
143 views

How do I enable a specific pam config in the lockscreen?

In Trusty, there is a new lockscreen that fits the look and feel of lightdm, and shares some config files, especially for pam. I am using libpam-fprintd to allow using my fingerprint reader when ...
4
votes
1answer
161 views

How to use PAM to restrict HTTP access for some users?

I've read that PAM can be used to restrict HTTP access for some users, but I can't figure out how to do it in Ubuntu 12.04. The /etc/security/time.conf man page contains this example: All users ...
4
votes
2answers
1k views

Can't log in to Samba PDC with domain account

I have a problem. I like to login on a Samba Server with my Ubuntu 10.04/11.04 PC. On my Samba Server there are some accounts with data, but I couldn't connect to it. I have done this: aptitude -y ...
3
votes
1answer
2k views

How to enforce company password complexity in 10.04?

I need to configure a Ubuntu 10.04 server to follow a strict company password policy that specifies the following: at least one upper case at least one lower case at least one digit at least one ...
3
votes
1answer
769 views

Login on local terminal without password

I have a virtual guest of Ubuntu on a KVM Machine, I've setup the machine so I can type virsh console and be dropped into a console. I realise the security considerations here, but is it possible to ...
3
votes
2answers
3k views

Type password into login screen, hit enter - nothing happens

I first install Ubuntu 13.10 a few weeks ago and its been going great. I'm still pretty new to Linux, so I haven't been doing a whole lot. The past couple days I've tried installing LAMP, then ...
3
votes
2answers
4k views

How to configure pam.d files for ldap over ssh on 12.04?

I'm trying to set up an Ubuntu 12.04 server so that users with a valid account in a remote ldap server can login to the ubuntu server. I've followed this guide closely: ...
3
votes
1answer
54 views

How to properly invoke motd for SSH connections with PAM disabled

I have configured a nice motd message that shows me lots of relevant infos when I login to my VPS via SSH. As password authentication is disabled in sshd_config I would also prefer to disable PAM as ...
3
votes
1answer
2k views

What causes “pam_unix … conversation failed” in auth.log

There are thousands of entries in my auth.log like this: sudo: pam_unix(sudo:auth): conversation failed What causes these to occur? I'd like to fix whatever it is but I'm a bit mystified as to ...
3
votes
0answers
443 views

How can I set up radius authentication properly?

On all of our linux workstations, we have configured the PAM modules to use radius authentication. This works well for all of the various things like login on the console, login using ssh, sudo, etc. ...
3
votes
0answers
891 views

Synchronize SSHFS mount with local filesystem

I've got a directory called "secure" that I mount on my laptop via sshfs whenever the server is in reach. While this server is in reach I want to keep it in two-way sync with a directory called ...
2
votes
1answer
1k views

Enable ecryptfs for all new users, even those authenticating through kerberos and ldap

How do I make sure that all users have their home directory encrypted when the login for the first time? I have setup pam to use Kerberos authentication and LDAP authorization (which I think should ...
2
votes
2answers
853 views

sudo fails because of `pam_mount.c` assertion

I just upgraded to Kubuntu 12.04 from 11.10. Now when I use sudo I almost always get: sudo: pam_mount.c:417: modify_pm_count: Assertion `user != ((void *)0)' failed. It makes the command fail. ...
2
votes
2answers
2k views

Pam_mount won't automount encrypted partiton

As usual, when I install a new version of Ubuntu I install pam_mount to automount my with LUKS encrypted partition on login. However, for Ubuntu 11.10, I followed the same procedure as usual, but I ...
2
votes
1answer
422 views

Show a notification at login using pam_exec

This simple script will show a Zenity notification when the user logs in: case "$PAM_TYPE" in 'open_session' ) if [ "$PAM_SERVICE" = "lightdm" ] ; then DISPLAY=:0 sudo -u ...
2
votes
1answer
1k views

After Upgrade to 12.04 the Login takes forever

I recently upgraded from Xubuntu 11.10 to 12.04. Since then it takes a very long time for me to Login. The time it takes to get to the login screen is normal but after I type in my password it takes ...
2
votes
1answer
168 views

“AND Operator” in PAM

I need to prevent users from authenticating through Kerberos when the encrypted /home/users has not yet been mounted. (This is to avoid corrupting the ecryptfs mountpoint) Currently I have these ...
2
votes
0answers
25 views

Biometric Enrollment

I am interested in developing a Match-on-card Logon functionality (biometric enrollment) for users on Ubuntu. I've searched through PAM modules, in Ubuntu Software Center, and with Google, and found ...
2
votes
1answer
40 views

how to manage ubuntu users from php

I have an Ubuntu 12.04 server machine in a local net, and I would like to log in my user through php. I have tried with pam_auth() but it wasn't configured neither activated for php. I tried a ...
2
votes
0answers
90 views

Accidentally removed /etc/pam.d/common-* files

I accidentally removed /etc/pam.d/common-* files on Ubuntu 12.04 through ssh. I have a backup of the files however, I am unable to use sudo nor log back in. Is there a way to fix this?
1
vote
3answers
210 views

Restore accidentally with rm'ed pam.conf?

I have accidently removed the files /etc/pam.conf and /etc/security/pam_env.confusing rm. Now I get this error message when I try to use sudo: sudo: unable to initialize PAM: No such file or ...
1
vote
1answer
238 views

What are the common pitfalls that would stop Authorised Key SSH access, and how do I find and correct for them?

EDIT: This question was reworked to make it more useful to the community and less specific to me. Questions seem to come up reasonably often regarding ssh and problems with authorised keys access, ...
1
vote
1answer
356 views

Sudo does not recognize my password anymore

The problem is happening on a remote server, so everything is done through ssh. I can login with my key, no problem here. I can change my password at will with passwd (which I believe shows that it's ...
1
vote
1answer
280 views

14.04 Not authenticating on chsh command

I am trying to change my default shell to zsh. I have the entry placed correctly in /etc/shells file. Each attempt I have made with this command has ended with the same error message: chsh -s ...
1
vote
1answer
169 views

USB PAM login with SD Card

I am trying to set up a PAM login token. I want to use an SD card instead of a normal USB flash disk. When I run the pamusb-conf to set up a new device, with the SD card inserted, it says that there ...
1
vote
1answer
2k views

how to increase maximum open files for memcached service

Using ulimit -n i am able to set per shell based maximum open files limit To make this value persistent i am able to edit this is in /etc/security/limits.conf and restart the ubuntu 12.10 box, here ...
1
vote
1answer
146 views

How to use pam_blue with lightdm, and unity-greeter?

I want lightdm to skip asking for my password if my phone is nearby. How is that possible with lightdm, and unity-greeter? Also I'm interested in knowing whether its secure, because it doesn't seem ...
1
vote
1answer
258 views

with wrong pam_environment unable to login

I made some mistakes in my ~/.pam_environment file; the changes caused a login failure. I cannot log in to my system. I only have one super account. I tried to press ctrl-alt-f1 to enter into full ...
1
vote
3answers
427 views

Ubuntu, Gnome, PAM and ecryptfs

I would like to have a directory accessible to a couple of users, and not readable by maintenance types ... I can do what I want using ecryptfs and a password known only to the "couple of users" in ...
1
vote
0answers
17 views

TRIM on encrypted device with Precise

I have migrated the main data to a new SSD. (That is Samsung 840 EVO, 120GB.) My ~ is an encrypted partition automounted by pam_mount. That is, there is a record in /etc/security/pam_mount.conf.xml ...
1
vote
0answers
39 views

In /etc/pam.d/sshd, what does “# [1]” mean?

In the PAM configuration file /etc/pam.d/sshd, there are a few lines ending in # [1]; for example: session optional pam_motd.so # [1] This doesn't seem to appear in any of the other PAM ...
1
vote
0answers
159 views

Network Manager asks to unlock keyring after auto login

After updating from Precise to Trusty I get a popup requesting to unlock the keyring for Network Manager after each login (autologin is enabled). On the net people advise to make the connection ...
1
vote
0answers
74 views

PAM authentication using ssh key instead of password

When I try to use chsh to change my default shell, I get prompted for my user password. The problem is I log in using my SSH key and do not have a user password - by design. Yes, I can set a ...
1
vote
0answers
107 views

pam radius module access-reject

I am trying to set up an Ubuntu server that my users will connect to. I already have a Radius server running on a Windows box, and I would like for connections to this Ubuntu box to authenticate to ...
1
vote
0answers
21 views

Portable users on network

I am moving all my windows desktops to Ubuntu in my office. I have a phone system which allows my users to login on any phone thus any desk they sit at is 'their desk' I would like to do something ...
1
vote
0answers
153 views

ppolicy with pam_ldap - pwdReset has no effect when logging in from Ubuntu

We installed ppolicy overlay on our ldap server. Password policies work correctly for locking out user after X incorrect password attempts, but we can't enforce user to change his password. When we ...
1
vote
0answers
151 views

GNOME Does Not Enforce Password Complexity in 12.04

I'm lost on this: I have password complexity configured in /etc/pam.d/common-password and /etc/pam.d/common-auth. While logged in as a regular user I can reset a password from a terminal window and ...
1
vote
0answers
478 views

How to make simple system user authentication work with postfix/dovecot on 12.10?

I have been wrestling on this a LOT. I never properly understood but I presume that authentication by the system users is done with PAM and the default authentication method for both Dovecot and ...
1
vote
1answer
1k views

Mount the directory / HOME directory located on a remote Windows 2008 R2

I am currently working on the integration of Ubuntu 12.04 LTS Linux on an Active Directory domain in Windows 2008 R2. I have managed to integrate my Ubuntu 12.04 machine to AD 2008, my user ...
0
votes
2answers
583 views

NFS users getting a laggy GUI expierence

I am setting up a system (ubuntu 12.04) that uses ldap, pam, and autofs to load users and their home folders from a remote server. One of the options for login is sitting down at the machine and ...