Questions tagged [pam]
Pluggable authentication modules (PAM)
1
vote
0answers
55 views
SSH doesn't detect authenticationmethod
So basically I'm trying to create an SFTP account for a part of my server that doesn't need an SSH-Key nor googles-2fa-pam module. I've got the following setting in my /etc/ssh/sshd_config file:
...
1
vote
0answers
40 views
Login fails silently on system restart, after adding new module to /etc/pam.d/common-auth
I am attempting to add an auth-only PAM module (poldi, to support login via GPG SmartCards).
The way I have it configured works perfectly well for most authentication use-cases:
sudo
unlocking a ...
0
votes
1answer
289 views
Having “PAM adding faulty module: pam_winbind.so”, “… pam_kwallet5.so”, “… pam_kwallet.so” on start of smbd, ssh, cron daemons - why and how to fix?
I'm using Ubuntu 16.04.5 LTS.
I tried to read my log files for errors.
The most interesting are the following:
cat /var/log/auth.log | egrep "unable|faulty"
Nov 25 13:25:13 localhost su[4491]: PAM ...
0
votes
1answer
77 views
SDDM fails when PAM_MOUNT is used
I have a new install of Kubuntu 18.04.1, with user authentication via sssd to the company's Microsoft Active Directory.
Every user has a Samba share on //fileserver6/$USER and I want to mount it at ...
0
votes
0answers
75 views
Ubuntu 18.04 VM; unable to initialize PAM: No such file or directory
I'm trying to learn more about Unix systems, and am working on hardening an Ubuntu Server VM (using VMWare Workstation). In the process of which, I must have done something that messed with the pam ...
0
votes
0answers
31 views
SSH doesnt update btmp or auth.log when user exists on system
Im not sure if ive encountered a bug or not....
Ive gone ahead and enabled the pam_lastlog.so showfailed in PAM and I can see its running properly when I authenticate to the system. My Issue is its ...
1
vote
0answers
67 views
PAM unable to dlopen pam_sss.so pam_cap.so pam_systemd.so pam_pwquality.so
Since yesterday i have a huge number of errors in journald log. New records appears at 3-5 in each second:
окт 24 09:08:37 ripcomp su[7405]: PAM unable to dlopen(pam_sss.so): /lib/security/pam_sss.so:...
0
votes
0answers
22 views
How to pass the password to PAM like display managers do?
The question is how display managers like SDDM and GDM do expose the password typed by the user to PAM system? The reason why I want to understand that is that I want to unlock gnome keyring and ...
0
votes
0answers
82 views
change default username for SU command
I want to change the default for su command ... so when I use su (without username) it changes user to root but I want replace it with my desired username and not su default.
I already checked pam....
0
votes
1answer
486 views
How to configure a U2F key(such as a YubiKey) for system wide 2-Factor Authentication?
The official Yubico guide only covers enabling it for GDM login, how can I enable it for all logins including TTY, ssh, sudo, etc?
0
votes
0answers
209 views
pam config issue ( bad jump )
After some packages/data got corrupted, I ran fsck and repaired the packages from the recovery console. As far as I can tell all packages should be whole and apt does not complain. However - I cannot ...
0
votes
1answer
115 views
Why USERGROUPS_ENAB property in /etc/login.defs does not have any effect?
I just found the following comment in /etc/login.defs:
# Enable setting of the umask group bits to be the same as owner bits
# (examples: 022 -> 002, 077 -> 007) for non-root users, if the uid ...
4
votes
1answer
343 views
A lot of PAM authentication errors on my logs targeting my mailserver. How do I stop it?
I need help pinpointing some errors in my auth.log file on my Ubuntu server. A few weeks ago, I found a plethora of login attempts to my SSH port (22) on auth.log, so I changed my SSH port. It was ...
1
vote
0answers
97 views
In greeter, how avoid username login with smartcard
I using a pam smartcard module, the user is in the smartcard. In ubuntu 18.04 before start pam.d configs the system ask for a username. Its possible disable this username question and keep all login ...
0
votes
0answers
43 views
Is it possible to use pam_mount with gvfs and how?
Is it possible to use gvfs with pam_mount, using user's password for the mounting command ?
How would one achieve that ?
Reading the documentation, it seems this might be a good start, but no way to ...
0
votes
0answers
137 views
Where does pam get credential information?
I am learning how to write a application program which use pam to do authentication. I checked the Linux documents and some example codes, now I have a basic understanding about the pam APIs and pam ...
0
votes
0answers
971 views
Setting up SSH authentication on openLDAP server
I have setup an Ubuntu 16.04 openLDAP server and want to allow LDAP users to login locally with SSH (to commit to a repository etc.) with libnss and pam_ldap.so.
Every time I login via ssh I get ...
0
votes
1answer
199 views
Unable to connect using ssh [closed]
I have a Raspberry Pi 3 model b, the OS is Ubuntu Mate 16, everything was working fine before.
Today I have started the rpi, I figured out I am facing a problem which occurs during boot time due to ...
1
vote
1answer
670 views
How to set up centralized user authentication on Ubuntu?
I have installed OpenLDAP, and configured some basic users. Next, I want to configure users in my directory to be able to authenticate through my server. I was reading a little about something called ...
0
votes
0answers
73 views
PAM-PGSQL authentication succeeds but user cannot access the file system
Synopsis:
I would like to use PostgreSQL as the authentication server for my Linux users via PAM. For this purpose, I use the libnss-pgsql2 library. The Linux distro is Ubuntu 14.04.
So far, I have ...
1
vote
0answers
586 views
How can I configure PAM to do a simple LDAP authentication against an Active Directory server, without having to join the Ubuntu 16.04 VM to a domain?
I'm using Vagrant and some ansible scripts to provision an Ubuntu 16.04 server image on my Windows 10 computer that is joined to a domain. I want to log into the VM using the same credentials as I log ...
1
vote
0answers
173 views
enable pam module as default
I want to enable some pam modules automatically in a script. mkhomedir is disabled as default. If you start pam-auth-update, there is no check mark in
Create home directory on login
How can I ...
0
votes
0answers
175 views
MySQL PAM Intergration Error “PAM adding faulty module: pam_mysql.so”
I am trying to get my vsftpd to use a MySQL database for storing usernames and passwords.
I have followed this tutorial but it doesn't seem to be working and I think maybe
Tutorial: https://www....
0
votes
0answers
16 views
Changed pam.d - cannot su and sudo [duplicate]
I changed files in /etc/pam.d (sudo and common-auth), now I can't use sudo.
$ sudo -i
sudo: policy plugin failed session initialization
*** Error in `sudo': double free or corruption (!prev): ...
1
vote
1answer
432 views
How do I use PAM with MySQL (on Xenial)?
I am running Ubuntu 16.04 and installed libpam-mysql and pamtester. To test out the module, I tried running the following command:
pamtester --item user=X --item passwd=X --item host=127.0.0.1 --item ...
1
vote
0answers
187 views
pam_oath + yubikey: can login with yubikey but not unlock lockscreen
I'm using pam_oath.so from the libpam_oath package to use my yubikey to login. Its configured as OATH-HOTP and it's working fine. I can login with my pin and a press on my yubikey. I dont need to ...
0
votes
1answer
840 views
Cannot login to SDDM but to tty
Summary
On my kubuntu 16.04 I cannot login any more on the graphical login screen (produced by standard display manager SDDM). But when I switch to a tty I can login and start the graphical desktop ...
0
votes
1answer
865 views
can't login ubuntu but can ssh to it
The last few lines from /var/log/auth.log:
Jan 9 22:59:57 miranda-OptiPlex-790 lightdm: PAM adding faulty module: pam_kwallet5.so
Jan 9 22:59:57 miranda-OptiPlex-790 lightdm: pam_succeed_if(lightdm:...
1
vote
0answers
142 views
How lock the unlock screen after wrong password attempts?
I enabled pam_tally2 to lock a user after several password attempts. It works well at the TTY, login screen and ssh.
However, I usually lock the screen when leaving the computer. You can type as many ...
1
vote
0answers
332 views
Add CAP_SYS_PTRACE for a user in LTS 16
I would like to be able to attach to a process with gdb. The process has my uid, but the executable file is set-gid. So, apparently, I'm learning about PAM. It's my understanding any process ...
0
votes
0answers
1k views
pam service restart
I added the option, umask=007, for pam_umask.so module. Then I logged out and logged in. It works perfectly.
However since I'm studying Ubuntu Linux I want to know how to restart only the specific ...
0
votes
1answer
383 views
sudo mkdir permissions
I added the option umask=007 at the end of session optional pam_umask.so in the /etc/pam.d/common-session file. It is working fine as intended for all users.
However, I can't figure out how to ...
2
votes
2answers
2k views
How to setup virtual users for sftp (sshd) with access to a specific sub directory?
I try to setup virtual users for sftp with sshd and/or pam.
My folder structure looks like this:
/
|-- var
| +-- www
| +-- site1
| +-- folder_1
| +-- folder_2
| +-- ...
1
vote
1answer
696 views
What is PAM and why does AWS enable it by default?
I only want to connect to my EC2 instance using SSH, but my sshd_config has UsePAM yes. What is this and will I get locked out of my instance if I set it to no?
Also I set a cronjob to check if my ...
0
votes
2answers
280 views
PAM nologin not working?
Trying to learn basics of PAM and one thing I tried was to utilize the nologin feature.
So I simply made a file /etc/nologin with the text "Sorry, users locked out for now!"
I rebooted but for some ...
0
votes
0answers
279 views
Allow SSH access to a specific user if the IP matches one in a file
I need to allow SSH access to my server to user_a, from any IP address, and to user_b, only if the IP address is in a file - /etc/remote-hosts.
Currently, in /etc/ssh/sshd_config, I have added:
...
0
votes
0answers
595 views
System freezes up when copying files from/to USB drive which uses any format
I'll ask this question here since I seemed to have stumped the Linux Mint people. I have been using Linux Mint for one and a half years. I have 3 computers and 2 run on Linux. My main computer is a ...
0
votes
0answers
566 views
Is it safe to comment out kwallet in lightdm and lightdm-greeter?
I have a problem. I am getting some annoying logs of pam_kwallet not found. This is because of kwallet is not installed in my system.
If I run the command more /etc/pam.d/* I am getting the below ...
1
vote
1answer
2k views
XDG_RUNTIME_DIR not set in the environment
I am running Ubuntu 14.04 LTS. I wanted to run a GUI application during log-in in the LightDM, I did this by adding this line on /etc/pam.d/lightdm
auth required pam_exec.so debug log=/path/to/file....
0
votes
0answers
31 views
Avoid providing verification code request for specific time using Google authenticator
I've just activated the two factor authentication using Google authenticator and I'm now required to provide the verification code any time that I'm logging to the system. How to avoid the ...
0
votes
3answers
1k views
How to configure pam_mkhomedir to create home directories with 0750 instead of 0777 permissions?
We would like to change the default permissions of the home directories created by pam_mkhomedir. The permissions default to 0755, we would prefer 0750. Changing the permissions of /etc/skel did not ...
5
votes
0answers
828 views
Ubuntu 14.04 | Reset password asking me to Retype new password twice. Ideally it should be once
I recently tried to implement password policy (at least one digit, upper case, lowercase, a special character) using pam_cracklib module. After that, the system asks me to retype password twice ...
1
vote
1answer
257 views
how to reinstall pam and configure pam
I manually installed linux-pam-1.30, configure with prefix=/usr, and removed file in /etc/pam.d/, now start ubuntu will stop at login process, because gdm will auto login, but pam will failed to auth ...
0
votes
1answer
530 views
pam / ad issue with lightdm
im having issues logging in the desktop via AD with my current setup with sssd, kerberos, samba, and AD. heres the output of the auth.log file. it seems that pam and lightdm aren't working well with ...
0
votes
0answers
189 views
pam_authenticate return's PAM_MODULE_UNKNOWN ( returns 28 ), how to resolve?
Downloaded the source Linux-PAM-1.3.0.tar.gz version then, configured and compiled using command
./configure --prefix=/u02/tasks/linux-pam/Linux-PAM-1.3.0/output/pre --exec-prefix=/u02/tasks/linux-...
1
vote
1answer
725 views
Avoid verification code request when using sudo using Google authenticator
I've just activated the two factor authentication using Google authenticator and I'm now required to provide the verification code any time that I use sudo. How to avoid the authentication step when ...
1
vote
1answer
615 views
How to increase the number of hashing rounds for /etc/shadow?
I usually use long passwords for my machines, but I heard that it's possible to increase the number of hashing rounds and get the same security with a shorter one. How would I make my system use more ...
3
votes
0answers
253 views
mount command hangs when share is unavailable
So we are using a combination of samba, winbind and pam_mount to authenticate users from AD and mount network share individually and everything works fine except for when a share is unavailable.
In ...
0
votes
1answer
281 views
How do I deny a particular user from getting root ( through su ) in a terminal by changing the /etc/pam.d/su ? Pam based controlling is required [duplicate]
There are two users in ubuntu (let's call them user1 and user2). Currently, user1 can get access root access using the below commands:
user1@sai:~$ su
Password:
root@sai:/home/user1#
However, I ...
1
vote
0answers
66 views
Can't login in GUI after re-installing pam
I downloaded pam library and make-install it on Ubuntu.
When I login:
Input the correct password shows "wrong password".
I can still log in through changing to "change user" mode
That also in GUI, ...
