Questions tagged [pam]
Pluggable authentication modules (PAM)
301
questions
1
vote
0
answers
22
views
sudo: unable to initialize PAM: Critical error - immediate abort" when running sudo apt-get update on Ubuntu
I am encountering an issue on my Ubuntu system when attempting to run the command sudo apt-get update. The terminal returns the following error message: sudo: unable to initialize PAM: Critical error -...
1
vote
0
answers
13
views
pam_tally2 locking everyone out after configuring common-auth file on Ubuntu 20.04
I am trying to configure user lockout after 3 unsuccessful attempt. I found instructions on the internet but I always end up with the same problem: after modifying /etc/pam.d/common-auth to include ...
- 123
0
votes
0
answers
13
views
What are all the certificates mandatory to be provide while setting TLSVerifyClient option to demand?
In my case, I had set TLSVerifyClient to demand. I couldn't be able to establish a connection While providing TLSCACertificateFile alone.
While setting the TLSVerifyClient option demand is it ...
- 1
0
votes
1
answer
82
views
Issue with AAD login and sudo
We are experiencing a following issue: when we are using AAD user with Azure Active Directory Authentication for Ubuntu module - it is not possible to use neither sudo in terminal nor unlock any ...
0
votes
0
answers
44
views
/etc/pam.d configuration Ubuntu - common-* versus system-auth
I'm trying to configure /etc/pam.d files on Ubuntu servers. I've already configured by RHEL servers by using the /etc/pam.d/system-auth.
Problem: Could not chdir to home directory
I believe this is ...
- 131
0
votes
0
answers
110
views
Error: "System error" when joining server to Active Directory with SSSD
I am trying to join an Ubuntu 20.04LTS server to an Active Directory using the instructions found here. Everything goes well until I get to test the login in this section:
Finally, how about we try a ...
- 1
0
votes
0
answers
217
views
On Ubuntu 20.04, unable to ssh to server, after upgrade from 18.04
After upgrading ubuntu from 18.04 to 20.04, unable to connect to host with my user
Below are the logs from auth.log
Mar 28 12:27:13 tpvm sshd[1590]: debug1: userauth-request for user XXXXX service ssh-...
0
votes
0
answers
62
views
After a long wait, the PAM window turns on asking for a password that never matches
After a long wait, the PAM window turns on asking for a password that never matches. It says:
xscreensaver: assuming NULL password means cancel
and
xscreensaver: authentification via PAM ...
- 1
0
votes
1
answer
22
views
I changed my /etc/pam.d/common-auth with failock and i can't login back into my vm, did I lose my VM?
I followed this one to implement faillock in the common-auth, I'm not able to log back in to my VM, did i just lose my VM?
How do I set up pam_faillock?
0
votes
0
answers
33
views
How to stop network shares from disconnecting
I am using pam-mount under Ubuntu Studio 22.0.4 to connect to several shared directories on my Synology NAS. It takes a long time, but these connections die after a while. This is not a network ...
- 336
0
votes
0
answers
97
views
22.04 Fingerprint login keeps losing my fingerprints
I have set up fingerprint login for my 22.04 installation. It has been working well for a few weeks but now rejects all login attempts.
When I go to 'Users' in settings, the Fingerprint Login has ...
- 1
1
vote
1
answer
289
views
How to configure pam_faillock in common-*?
I noticed that fedora/redhat has tool authselect/authconfig to configure pam_faillock in system-auth ,so it will work in system-wide auth phase.
Ubuntu use pam-auth-update to configure system-wide ...
- 11
0
votes
2
answers
126
views
pam_authenticate error, doas problem
I wanted to try doas (https://github.com/slicer69/doas) I have done everything thats on github page but when I try to use doas it gave me this error
doas: pam_authenticate: Permission denied
- 15
0
votes
0
answers
95
views
When upgrading from Ubuntu 20.04.5 to Ubuntu 22.04.1 pam_auth stops working (solved, but...)
I had Ubuntu 20.04.5 LTS and used pam_auth to authenticate users against an Active Directory.
After upgrading to Ubuntu 22.04.1 LTS it stopped working.
It seems that the libpam-radius-auth package is ...
- 1
0
votes
0
answers
659
views
Domains are not found after joining Ubuntu 22.04 to Active Directory using SSSD
Since Ubuntu 20.04 we are using SSSD and realmd to join these server to one of our Active Directory domains. This works (almost) out-of-the-box.
For Ubuntu 22.04, however, we run into issues. And I am ...
0
votes
1
answer
292
views
How to pam_mount server shares?
I have a Ubuntu Studio 22.04.1 desktop client joined to an AD domain controller, which also serves as a file rver. I would like to automount server shares on login of any domain user.
The manpage on ...
- 336
0
votes
0
answers
50
views
How to truncate domain part from username in pam_mount?
I am currently experimenting with the new Active Directory Features in Ubuntu 22.04. I joined the domain with my client and everything worked fine so far. However I want to mount the users home ...
0
votes
0
answers
180
views
Can pam_faillock be configured to work with a Yubikey on Ubuntu 22.04
Coming from Ubuntu 18.04, I was able to successfully set up my Yubikey U2F key to be required at login by following the Yubico instructions here:
https://support.yubico.com/hc/en-us/articles/...
- 1
0
votes
0
answers
49
views
installed anbox and PAM got problems
I am on kubuntu 22.04 and installed anbox
it said that now I am in charge of managing PAM myself
I dont know how to do that
how can I make it automatic again?
did anbox make me vulnerable?
- 175
0
votes
0
answers
278
views
I have an error while using my password to login an sudo
Some days ago I received some Ubuntu 22.04.1 LTS updates. After these updates I can not login anymore with my password. I am only able to login because I have set up my fingerprints before.
I know the ...
0
votes
0
answers
317
views
dovecot errors: pam_authenticate() failed / userdb returned 0 as uid
I am recieving errors while configuring postfix and dovecot for virtual users mailboxes. Initially I made a typo in the main.cf config file. I corrected that error and am now receiving errors. Virtual ...
1
vote
1
answer
337
views
SSH using Google auth TOTP and pubkey still Requiring password
I'm using Google Auth setup by following this guide on linode.com and a pubkey (generated with ssh-keygen -t rsa -b 4096) to ssh into a new Ubuntu server I have setup.
└─$ ssh -i .ssh/ubuntuServer ...
0
votes
1
answer
113
views
How to disable ldap failed authentication message from audit.logs
I have to disable LDAP user failed PAM authentication messages from audit.logs
/var/log/audit.log | grep failed
type=USER_AUTH msg=audit(1660931213.045:2190121): pid=289 uid=0 auid=4294965 ses=4297295 ...
1
vote
0
answers
707
views
How to setup up PAM to unlock gnome-keyring
I am trying to use Ubuntu with effectively using ly display manager, however it does not seem to setup the PAM settings with Debian, I so I need to do this manually. My research shows that this is ...
- 269
0
votes
0
answers
166
views
Problem adding pam_group.so to auth section in common-auth
I'm trying to match a FreeIPA user to a local group via FreeIPA group membership. When testing the manual edit of common-auth it works. But I'm trying to generate the file with pam-auth-update so that ...
- 41
0
votes
1
answer
432
views
Ubuntu Problems with Pam Google Auth
I had a working OpenVPN server that used Google Authenticator for TFA. It was working perfectly fine for well over a year. Just last night/today it stopped working. I managed to track down the auth....
- 101
0
votes
0
answers
20
views
Pam module debug creates duplicate log messages
I have a test server that i recently implement debug module argument in pam.d/common-password config file.
And it does produce info log entries that i am looking for. But one weird issue is that ...
- 9
2
votes
1
answer
249
views
Get system to accept fingerprint OR password
I have a working fingerprint scanner, but this does not allow me to unlock the login key ring. Therefor, I am looking for solutions to allow me to type my password to login whenever the key ring would ...
- 21
0
votes
0
answers
829
views
Configure Network User Authentication with SSSD in Ubuntu
I'm a newbie in Ubuntu and have zero experience in configuring SSSD. Recently I configured an Ubuntu machine to authenticate network user with SSSD-AD. I followed the guide in https://ubuntu.com/...
- 1
1
vote
0
answers
2k
views
the login keyring did not get unlocked when you logged into your computer - Without Auto Login
i know this is a repeated question but in may case Auto Login is not turned on.
instead i have enabled Fingerprint Login and enabled Fingerprint Authentication module using pam-auth-update.
so i use ...
- 21
1
vote
0
answers
795
views
Ubuntu 20.04 LTS Fingerprint not recognizing
I have enrolled the fingerprint but it doesn't recognize my fingerprint on the login screen.
OS: Ubuntu 20.04 LTS
Laptop: Asus Zenbook 14 UX430UAR
I checked if my device is supported or not in ...
- 113
0
votes
0
answers
50
views
Is there any one-click authentication module for sudo for an already logged-in user?
I would like to find a (PAM?) module that allows me to confirm sudo in one click, instead of typing the password each time. Much like windows UAC, where the user is switched to a secure desktop where ...
- 103
0
votes
0
answers
552
views
Ubuntu 20.04: Gnome file manager freezes after cifs mount on home directory
as part of a project I need to mount individual cifs-directories from a Samba DC on the home directory of individual users.
The login-process authenticates against an OpenLDAP via SSSD and the mount ...
0
votes
0
answers
586
views
Mount LUKS encrypted partition at login
I would like to mount a LUKS partition on login. The solutions I have found involve using either:
a LUKS passphrase that is equal to the user's password, or
a keyfile that is stored in the HOME ...
- 329
0
votes
0
answers
356
views
How to create ZFS home dirs using pam_exec
How do I get pam_exec.so to create a new home dir ZFS dataset for each user who logs in via GDM/LDAP? I'm running Ubuntu 20.04, using GDM and nslcd for LDAP auth.
pam's mkhomedir library doesn't have ...
3
votes
2
answers
3k
views
How do you disable su?
I'm confused about su a bit. I just want to prevent users from using su across the board. Authorized users will have sudo access so they can be root if desired. We just want to completely disable su ...
- 149
1
vote
0
answers
329
views
Keyring has stopped unlocking automatically on login. How can I make it start again?
I have a "Login" keyring in my Gnome on Ubuntu 18.04 LTS. The password on this Login keyring is the same as my login password.
It was always the case that it would only unlock intermittently....
- 31
0
votes
1
answer
842
views
pam_mkhomedir.so not working with nslcd + LDAP (Active Directory)
I'm trying to get pam_mkhomedir.so to create an LDAP user's local home directory upon initial login. I'm on Ubuntu 20.04 LTS.
Currently, users are added to my server via LDAP (Active Directory backend)...
- 111
4
votes
0
answers
138
views
Ubuntu 20.04 GDM increments pam_tally without password input
I have an Ubuntu 20.04 machine with slightly modified common-auth and common-password files to lock the user out for 10 minutes if an incorrect password is tried 10 times. This works fine in the ...
- 41
2
votes
1
answer
1k
views
What happened to pamusb-tools and libpam-usb in Ubuntu 20.04?
I'm looking into how to make one of my usbs a security key and I found a guide to do so inside Linux here: https://bytevarsity.com/how-to-make-a-usb-security-key/
Two packages that the guide says to ...
- 45
1
vote
0
answers
170
views
SSH Challenge response in Thunar or Nautilus? [closed]
So I have a project where I need to access a server with SSH that has both priv/pub key and 2FA challenge response verification enabled.
The following works:
Command Line SSH access
Using WinSCP in ...
- 559
0
votes
0
answers
235
views
Best place for pam_exec.so executable?
I implemented a pluggable authentication module (PAM) called checkConnections.
I initially put this executable in /usr/local/sbin/ because Filesystem Hierarchy Standard says locally installed system ...
- 689
0
votes
1
answer
6k
views
Access denied by PAM account configuration despite configured access.conf and updated /etc/shadow
I've been setting up a PAM configuration for sshd, and as of now /etc/pam.d/sshd stands like this:
# Custom PAM config for sshd
# Disallow login if /etc/nologin exists, inherited from old sshd config
...
- 41
1
vote
0
answers
1k
views
Ubuntu 20.04 LTS sssd update from 2.2.3-3ubuntu0.4 to 2.2.3-3ubuntu0.6 broke AD logins
I have a number of servers running Ubuntu 20.04 LTS joined to Windows Active Directory via this procedure - https://www.server-world.info/en/note?os=Ubuntu_20.04&p=realmd
Over this weekend, I ran ...
- 11
0
votes
0
answers
202
views
Nslcd:cannot open nsswitch.conf
When I try to run
systemctl status nslcd
An error in between the lines appear and it looks like this:
cannot open /etc/nsswitch.conf: Permission denied
I haven't change the permissions for neither of ...
- 1
2
votes
1
answer
500
views
Conditionally stop interactive and non-interactive ssh login and give error message
I want to prevent interactive and non-interactive ssh login based on a conditional logic. I need to test the username and give an error message.
People using sftp (non-interactive ssh) should also be ...
- 689
2
votes
0
answers
680
views
Is it possible to automount SMB share on a common mount point in a multi user Ubuntu 20.04 Desktop environment using NTLMv2 / login credentials?
I wish to mount SMB share on a common mount point for all users and auto mount it when it's accessed, like when you map a network drive to a common drive letter in a Windows environment and it just ...
- 66
0
votes
1
answer
221
views
Non copy/paste public key based SSH authentication
I want to remove the process of manually copying the public keys to each one of the servers for granting access.
The main problem that I'm trying to solve here is:
There are multiple servers across ...
- 193
0
votes
1
answer
151
views
History and autocompletion do not work in SSH PAM session (openssh-server, libpam-ldap and nscd)
I configured a Linux Ubuntu 20.04 LTS VM, to authenticate users in the LDAP base and it worked correctly, however, when trying to repeat commands already executed, as we normally do in Linux, pressing ...
0
votes
0
answers
642
views
How to set up pam_mount?
I am trying to automount SMB shares from a Synology NAS on a client running Ubuntu Studio 18.04 (yes I know it is out of date and plan to upgrade to 20.04.2 soon). I have tried using autofs, but have ...
- 336