Questions tagged [pam]

Pluggable authentication modules (PAM)

Filter by
Sorted by
Tagged with
1 vote
0 answers
5 views

Pam module debug creates duplicate log messages

I have a test server that i recently implement debug module argument in pam.d/common-password config file. And it does produce info log entries that i am looking for. But one weird issue is that ...
user avatar
0 votes
0 answers
33 views

Get system to accept fingerprint OR password

I have a working fingerprint scanner, but this does not allow me to unlock the login key ring. Therefor, I am looking for solutions to allow me to type my password to login whenever the key ring would ...
user avatar
0 votes
0 answers
62 views

22.04: settting up user accounts via Active Directory

After installing 22.04 (desktop) with a local user account, what are the specific steps to set up user accounts via Active Directory?
user avatar
0 votes
0 answers
24 views

No Events of Interest Were Found in TTY Report

Ubuntu 20.04.4 LTS on the Linux 5.4.0-109-generic kernel I cannot seem to get aureport --tty to work. Running the command yields "no events of interest were found" I have done the following ...
user avatar
0 votes
0 answers
148 views

Configure Network User Authentication with SSSD in Ubuntu

I'm a newbie in Ubuntu and have zero experience in configuring SSSD. Recently I configured an Ubuntu machine to authenticate network user with SSSD-AD. I followed the guide in https://ubuntu.com/...
user avatar
  • 1
0 votes
0 answers
150 views

the login keyring did not get unlocked when you logged into your computer - Without Auto Login

i know this is a repeated question but in may case Auto Login is not turned on. instead i have enabled Fingerprint Login and enabled Fingerprint Authentication module using pam-auth-update. so i use ...
user avatar
  • 1
1 vote
0 answers
178 views

Ubuntu 20.04 LTS Fingerprint not recognizing

I have enrolled the fingerprint but it doesn't recognize my fingerprint on the login screen. OS: Ubuntu 20.04 LTS Laptop: Asus Zenbook 14 UX430UAR I checked if my device is supported or not in ...
user avatar
0 votes
0 answers
28 views

Is there any one-click authentication module for sudo for an already logged-in user?

I would like to find a (PAM?) module that allows me to confirm sudo in one click, instead of typing the password each time. Much like windows UAC, where the user is switched to a secure desktop where ...
user avatar
  • 103
0 votes
0 answers
175 views

Errors prevents launching of gdm in 21.10

Installing gdm3 on Ubuntu 21.10 leads to the following errors: $ systemctl status gdm3.service ● gdm.service - GNOME Display Manager Loaded: loaded (/lib/systemd/system/gdm.service; static) ...
user avatar
  • 355
0 votes
0 answers
160 views

Ubuntu 20.04: Gnome file manager freezes after cifs mount on home directory

as part of a project I need to mount individual cifs-directories from a Samba DC on the home directory of individual users. The login-process authenticates against an OpenLDAP via SSSD and the mount ...
user avatar
0 votes
0 answers
20 views

how to use pam_time to restrict acess to an app during night

say, I have an app called timekpra, I only want to allow to open it either through the launcher or the terminal by typing timekpra. I did not find an example to deny access to a specific app here http:...
user avatar
  • 233
0 votes
0 answers
218 views

Mount LUKS encrypted partition at login

I would like to mount a LUKS partition on login. The solutions I have found involve using either: a LUKS passphrase that is equal to the user's password, or a keyfile that is stored in the HOME ...
user avatar
  • 309
0 votes
0 answers
139 views

How to create ZFS home dirs using pam_exec

How do I get pam_exec.so to create a new home dir ZFS dataset for each user who logs in via GDM/LDAP? I'm running Ubuntu 20.04, using GDM and nslcd for LDAP auth. pam's mkhomedir library doesn't have ...
user avatar
2 votes
2 answers
723 views

How do you disable su?

I'm confused about su a bit. I just want to prevent users from using su across the board. Authorized users will have sudo access so they can be root if desired. We just want to completely disable su ...
user avatar
0 votes
0 answers
101 views

Using Smartcard Insert Event to Bypass Username Prompt in Greeter

I'm switching over from CentOS 7 to Ubuntu 18.04 and setting up smartcard login. The smartcard login using pam_pkcs11 with opensc works just as well as it did in CentOS, but the greeter in CentOS (GDM)...
user avatar
1 vote
0 answers
124 views

Keyring has stopped unlocking automatically on login. How can I make it start again?

I have a "Login" keyring in my Gnome on Ubuntu 18.04 LTS. The password on this Login keyring is the same as my login password. It was always the case that it would only unlock intermittently....
user avatar
0 votes
1 answer
376 views

pam_mkhomedir.so not working with nslcd + LDAP (Active Directory)

I'm trying to get pam_mkhomedir.so to create an LDAP user's local home directory upon initial login. I'm on Ubuntu 20.04 LTS. Currently, users are added to my server via LDAP (Active Directory backend)...
user avatar
0 votes
0 answers
92 views

PAM configuration GUI is not saving changes upon hitting <OK>

In the GUI that appears when sudo pam-auth-update is run, I checked activate mkhomedir and then selected <OK>. This is the GUI: However, when I run the GUI again, I see that activate mkhomedir ...
user avatar
  • 3
4 votes
0 answers
126 views

Ubuntu 20.04 GDM increments pam_tally without password input

I have an Ubuntu 20.04 machine with slightly modified common-auth and common-password files to lock the user out for 10 minutes if an incorrect password is tried 10 times. This works fine in the ...
user avatar
0 votes
0 answers
103 views

Xubuntu 20.04 AD user cannot connect to TrueNAS CIFS share via PAM Mount - Error code 13

I want to use PAM to mount shares for domain users on my Xubuntu workstations because it doesn't store passwords, but I've been unsuccessful so far. Any help would be greatly appreciated. My test ...
user avatar
1 vote
1 answer
524 views

What happened to pamusb-tools and libpam-usb in Ubuntu 20.04?

I'm looking into how to make one of my usbs a security key and I found a guide to do so inside Linux here: https://bytevarsity.com/how-to-make-a-usb-security-key/ Two packages that the guide says to ...
user avatar
1 vote
0 answers
87 views

SSH Challenge response in Thunar or Nautilus? [closed]

So I have a project where I need to access a server with SSH that has both priv/pub key and 2FA challenge response verification enabled. The following works: Command Line SSH access Using WinSCP in ...
user avatar
  • 549
0 votes
0 answers
89 views

Best place for pam_exec.so executable?

I implemented a pluggable authentication module (PAM) called checkConnections. I initially put this executable in /usr/local/sbin/ because Filesystem Hierarchy Standard says locally installed system ...
user avatar
  • 629
0 votes
1 answer
2k views

Access denied by PAM account configuration despite configured access.conf and updated /etc/shadow

I've been setting up a PAM configuration for sshd, and as of now /etc/pam.d/sshd stands like this: # Custom PAM config for sshd # Disallow login if /etc/nologin exists, inherited from old sshd config ...
user avatar
1 vote
0 answers
967 views

Ubuntu 20.04 LTS sssd update from 2.2.3-3ubuntu0.4 to 2.2.3-3ubuntu0.6 broke AD logins

I have a number of servers running Ubuntu 20.04 LTS joined to Windows Active Directory via this procedure - https://www.server-world.info/en/note?os=Ubuntu_20.04&p=realmd Over this weekend, I ran ...
user avatar
0 votes
0 answers
62 views

Nslcd:cannot open nsswitch.conf

When I try to run systemctl status nslcd An error in between the lines appear and it looks like this: cannot open /etc/nsswitch.conf: Permission denied I haven't change the permissions for neither of ...
user avatar
  • 1
0 votes
0 answers
18 views

From Name Service Switch NSS how do I tell which command executed NSS module

Is there some robust way how to tell that ie, SSH, os login, login command, su user, sudo su user have triggered some NSS module? I would like to know in the same way as in PAM we have ie. PAM_TYPE=&...
user avatar
1 vote
1 answer
141 views

Conditionally stop interactive and non-interactive ssh login and give error message

I want to prevent interactive and non-interactive ssh login based on a conditional logic. I need to test the username and give an error message. People using sftp (non-interactive ssh) should also be ...
user avatar
  • 629
2 votes
0 answers
448 views

Is it possible to automount SMB share on a common mount point in a multi user Ubuntu 20.04 Desktop environment using NTLMv2 / login credentials?

I wish to mount SMB share on a common mount point for all users and auto mount it when it's accessed, like when you map a network drive to a common drive letter in a Windows environment and it just ...
user avatar
  • 66
0 votes
1 answer
123 views

Non copy/paste public key based SSH authentication

I want to remove the process of manually copying the public keys to each one of the servers for granting access. The main problem that I'm trying to solve here is: There are multiple servers across ...
user avatar
0 votes
1 answer
60 views

History and autocompletion do not work in SSH PAM session (openssh-server, libpam-ldap and nscd)

I configured a Linux Ubuntu 20.04 LTS VM, to authenticate users in the LDAP base and it worked correctly, however, when trying to repeat commands already executed, as we normally do in Linux, pressing ...
user avatar
0 votes
0 answers
305 views

How to set up pam_mount?

I am trying to automount SMB shares from a Synology NAS on a client running Ubuntu Studio 18.04 (yes I know it is out of date and plan to upgrade to 20.04.2 soon). I have tried using autofs, but have ...
user avatar
  • 186
1 vote
0 answers
123 views

cracklib allows passwords even if substring of the password is within the dictionary

I am using PAM and cracklib for password validation, the words defined in the dictionary of known words if used as substring of password should be rejected by cracklib and pam module. When the word ...
user avatar
0 votes
0 answers
719 views

PAM unable to dlopen(pam_systemd.so) after upgrade to 18.04

I had an old web server that needed an upgrade from 14.04 to 18.04. I upgraded from 14.04 to 16.04, then from 16.04 to 18.04 one after the other. It is behind a proxy, and on that proxy, I see connect(...
user avatar
1 vote
1 answer
2k views

Mount.cifs with krb5 fails on 20.04 LTS

I have a Synology NAS and multiple Ubuntu Clients in my network. I setup Active Directory integration on the clients following the instructions here https://ubuntu.com/server/docs/service-sssd. ...
user avatar
  • 31
1 vote
1 answer
748 views

Umask for the SFTP users

My company has a syntax in /etc/pam.d/sshd file on our SFTP server: session optional pam_umask.so umask=444 I found this command changes the permission of the uploaded file from 644 to 222 for all ...
user avatar
  • 137
0 votes
1 answer
419 views

Can't restart Apache on Ubuntu 20.04 [duplicate]

I am setting up my VPS with Ubuntu 20.04 installed, that I am using to host my personal website. I am editing /etc/apache2/apache2.conf to allow Apache to access my website directory (according to ...
user avatar
  • 125
1 vote
0 answers
261 views

How to use fingerprint login in ubuntu 20.04?

I have tried it using this commands: lsusb Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub **Bus 001 Device 005: ID 27c6:5301 Shenzhen Goodix Technology Co.,Ltd. Fingerprint Reader** ...
user avatar
0 votes
2 answers
198 views

What is the Minimum Setup Needed for Setting-up XDG Directories ($XDG_RUNTIME_DIR etc.)?

I'm in a setup (20.04) that is basically headless (a solaris zone, but we could probably consider it analogous to any server sort of setup), and as such, I don't have any graphical environment ...
user avatar
0 votes
0 answers
26 views

Prevent user login before mount is complete

All our workstations are Ubuntu 18. The /home/ is a network mount (nas). This is how it looks in /etc/fstab: nas:/mnt/export/home /home nfs nfsvers=3,_netdev 0 0 The problem is: ...
user avatar
1 vote
1 answer
165 views

PAM pwhistory module is not prompting for choose another password if password has been already used

I want set history password reusability limit. I am trying to use pwhistory pam module. Below is configuration in /etc/pam.d/common-password file in Ubuntu (VERSION 20.04.1 LTS) password ...
user avatar
0 votes
0 answers
396 views

Motd is displayed twice or not at all

I've been getting this annoying issue where I cannot edit my /etc/update-motd.d/ files correctly without messing it up. Now for some reason no matter what I do, my motd is displayed twice or not at ...
user avatar
0 votes
1 answer
586 views

Is “obey pam restrictions” still supposed to work in Samba 4 (Ubuntu 20.04)?

This is a re-run of this question I asked two weeks ago, which was closed because it was related to an EOL Ubuntu version. I did another install, this time on Ubuntu Server 20.04LTS, with exactly the ...
user avatar
1 vote
1 answer
505 views

sudo constantly asking for password with LDAP SSH user

I'm using Ubuntu 16.04, just upgraded sudo from version 1.8.16 to 1.9.5p2. When I SSH to server by LDAP account, I try to run some sudo command, the server require to input password constantly, I'm ...
user avatar
1 vote
2 answers
302 views

Confirm system dialogs solely by U2F device

I have enabled U2F device authentication for PAM on my Ubuntu 20.04. I have used this approach https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F and put ...
user avatar
1 vote
1 answer
703 views

Pam: How do I restrict users from using old password using pam?

I am currently using Ubuntu server 20.04.1. As stated in the title, I would like to configure pam so that users cannot use 5 old passwords. I have followed some guide on ways to do it but none of it ...
user avatar
2 votes
0 answers
321 views

understanding why/how my accounts got locked out after libpam-systemd update

Some of my accounts are locked out after an updated of Ubuntu 20.04 with the latest libpam-systemd package. I'm trying to understand why some accounts are locked out and others not, since the common-...
user avatar
0 votes
0 answers
1k views

Samba AD DC no longer accepts login using domain accounts

I've been trying to setup Samba AD DC on Ubuntu 20.04 for a good while now and with some success. I use the server which runs this Samba instance as my primary workstation, so I need to be able to log ...
user avatar
  • 49
2 votes
0 answers
2k views

pam_open_session: Module is unknown

I am using Ubuntu 20.10 in WSL, and there are problems with changing the ulimit -n. I tried several methods and one of them needed to add session required pam_limits.so line to the /etc/pam.d/common-...
user avatar
1 vote
2 answers
1k views

Missing directory /lib/security causing boot errors [closed]

After upgrading from Ubuntu 18.04 to 20.04 I am getting boot errors as follows: PAM unable to dlopen(pam_deepin_auth.so): /lib/security/pam_deepin_auth.so: cannot open shared object file: No such file ...
user avatar

1
2 3 4 5 6