Questions tagged [pam]
Pluggable authentication modules (PAM)
282
questions
1
vote
0
answers
5
views
Pam module debug creates duplicate log messages
I have a test server that i recently implement debug module argument in pam.d/common-password config file.
And it does produce info log entries that i am looking for. But one weird issue is that ...
- 11
0
votes
0
answers
33
views
Get system to accept fingerprint OR password
I have a working fingerprint scanner, but this does not allow me to unlock the login key ring. Therefor, I am looking for solutions to allow me to type my password to login whenever the key ring would ...
0
votes
0
answers
62
views
22.04: settting up user accounts via Active Directory
After installing 22.04 (desktop) with a local user account, what are the specific steps to set up user accounts via Active Directory?
- 195
0
votes
0
answers
24
views
No Events of Interest Were Found in TTY Report
Ubuntu 20.04.4 LTS on the Linux 5.4.0-109-generic kernel
I cannot seem to get aureport --tty to work. Running the command yields "no events of interest were found" I have done the following ...
0
votes
0
answers
148
views
Configure Network User Authentication with SSSD in Ubuntu
I'm a newbie in Ubuntu and have zero experience in configuring SSSD. Recently I configured an Ubuntu machine to authenticate network user with SSSD-AD. I followed the guide in https://ubuntu.com/...
- 1
0
votes
0
answers
150
views
the login keyring did not get unlocked when you logged into your computer - Without Auto Login
i know this is a repeated question but in may case Auto Login is not turned on.
instead i have enabled Fingerprint Login and enabled Fingerprint Authentication module using pam-auth-update.
so i use ...
- 1
1
vote
0
answers
178
views
Ubuntu 20.04 LTS Fingerprint not recognizing
I have enrolled the fingerprint but it doesn't recognize my fingerprint on the login screen.
OS: Ubuntu 20.04 LTS
Laptop: Asus Zenbook 14 UX430UAR
I checked if my device is supported or not in ...
- 113
0
votes
0
answers
28
views
Is there any one-click authentication module for sudo for an already logged-in user?
I would like to find a (PAM?) module that allows me to confirm sudo in one click, instead of typing the password each time. Much like windows UAC, where the user is switched to a secure desktop where ...
- 103
0
votes
0
answers
175
views
Errors prevents launching of gdm in 21.10
Installing gdm3 on Ubuntu 21.10 leads to the following errors:
$ systemctl status gdm3.service
● gdm.service - GNOME Display Manager
Loaded: loaded (/lib/systemd/system/gdm.service; static)
...
- 355
0
votes
0
answers
160
views
Ubuntu 20.04: Gnome file manager freezes after cifs mount on home directory
as part of a project I need to mount individual cifs-directories from a Samba DC on the home directory of individual users.
The login-process authenticates against an OpenLDAP via SSSD and the mount ...
0
votes
0
answers
20
views
how to use pam_time to restrict acess to an app during night
say, I have an app called timekpra, I only want to allow to open it either through the launcher or the terminal by typing timekpra.
I did not find an example to deny access to a specific app here http:...
- 233
0
votes
0
answers
218
views
Mount LUKS encrypted partition at login
I would like to mount a LUKS partition on login. The solutions I have found involve using either:
a LUKS passphrase that is equal to the user's password, or
a keyfile that is stored in the HOME ...
- 309
0
votes
0
answers
139
views
How to create ZFS home dirs using pam_exec
How do I get pam_exec.so to create a new home dir ZFS dataset for each user who logs in via GDM/LDAP? I'm running Ubuntu 20.04, using GDM and nslcd for LDAP auth.
pam's mkhomedir library doesn't have ...
2
votes
2
answers
723
views
How do you disable su?
I'm confused about su a bit. I just want to prevent users from using su across the board. Authorized users will have sudo access so they can be root if desired. We just want to completely disable su ...
- 29
0
votes
0
answers
101
views
Using Smartcard Insert Event to Bypass Username Prompt in Greeter
I'm switching over from CentOS 7 to Ubuntu 18.04 and setting up smartcard login.
The smartcard login using pam_pkcs11 with opensc works just as well as it did in CentOS, but the greeter in CentOS (GDM)...
1
vote
0
answers
124
views
Keyring has stopped unlocking automatically on login. How can I make it start again?
I have a "Login" keyring in my Gnome on Ubuntu 18.04 LTS. The password on this Login keyring is the same as my login password.
It was always the case that it would only unlock intermittently....
- 31
0
votes
1
answer
376
views
pam_mkhomedir.so not working with nslcd + LDAP (Active Directory)
I'm trying to get pam_mkhomedir.so to create an LDAP user's local home directory upon initial login. I'm on Ubuntu 20.04 LTS.
Currently, users are added to my server via LDAP (Active Directory backend)...
- 91
0
votes
0
answers
92
views
PAM configuration GUI is not saving changes upon hitting <OK>
In the GUI that appears when sudo pam-auth-update is run, I checked activate mkhomedir and then selected <OK>. This is the GUI:
However, when I run the GUI again, I see that activate mkhomedir ...
- 3
4
votes
0
answers
126
views
Ubuntu 20.04 GDM increments pam_tally without password input
I have an Ubuntu 20.04 machine with slightly modified common-auth and common-password files to lock the user out for 10 minutes if an incorrect password is tried 10 times. This works fine in the ...
- 41
0
votes
0
answers
103
views
Xubuntu 20.04 AD user cannot connect to TrueNAS CIFS share via PAM Mount - Error code 13
I want to use PAM to mount shares for domain users on my Xubuntu workstations because it doesn't store passwords, but I've been unsuccessful so far. Any help would be greatly appreciated.
My test ...
1
vote
1
answer
524
views
What happened to pamusb-tools and libpam-usb in Ubuntu 20.04?
I'm looking into how to make one of my usbs a security key and I found a guide to do so inside Linux here: https://bytevarsity.com/how-to-make-a-usb-security-key/
Two packages that the guide says to ...
- 25
1
vote
0
answers
87
views
SSH Challenge response in Thunar or Nautilus? [closed]
So I have a project where I need to access a server with SSH that has both priv/pub key and 2FA challenge response verification enabled.
The following works:
Command Line SSH access
Using WinSCP in ...
- 549
0
votes
0
answers
89
views
Best place for pam_exec.so executable?
I implemented a pluggable authentication module (PAM) called checkConnections.
I initially put this executable in /usr/local/sbin/ because Filesystem Hierarchy Standard says locally installed system ...
- 629
0
votes
1
answer
2k
views
Access denied by PAM account configuration despite configured access.conf and updated /etc/shadow
I've been setting up a PAM configuration for sshd, and as of now /etc/pam.d/sshd stands like this:
# Custom PAM config for sshd
# Disallow login if /etc/nologin exists, inherited from old sshd config
...
- 31
1
vote
0
answers
967
views
Ubuntu 20.04 LTS sssd update from 2.2.3-3ubuntu0.4 to 2.2.3-3ubuntu0.6 broke AD logins
I have a number of servers running Ubuntu 20.04 LTS joined to Windows Active Directory via this procedure - https://www.server-world.info/en/note?os=Ubuntu_20.04&p=realmd
Over this weekend, I ran ...
- 11
0
votes
0
answers
62
views
Nslcd:cannot open nsswitch.conf
When I try to run
systemctl status nslcd
An error in between the lines appear and it looks like this:
cannot open /etc/nsswitch.conf: Permission denied
I haven't change the permissions for neither of ...
- 1
0
votes
0
answers
18
views
From Name Service Switch NSS how do I tell which command executed NSS module
Is there some robust way how to tell that ie, SSH, os login, login command, su user, sudo su user have triggered some NSS module?
I would like to know in the same way as in PAM we have ie. PAM_TYPE=&...
- 1
1
vote
1
answer
141
views
Conditionally stop interactive and non-interactive ssh login and give error message
I want to prevent interactive and non-interactive ssh login based on a conditional logic. I need to test the username and give an error message.
People using sftp (non-interactive ssh) should also be ...
- 629
2
votes
0
answers
448
views
Is it possible to automount SMB share on a common mount point in a multi user Ubuntu 20.04 Desktop environment using NTLMv2 / login credentials?
I wish to mount SMB share on a common mount point for all users and auto mount it when it's accessed, like when you map a network drive to a common drive letter in a Windows environment and it just ...
- 66
0
votes
1
answer
123
views
Non copy/paste public key based SSH authentication
I want to remove the process of manually copying the public keys to each one of the servers for granting access.
The main problem that I'm trying to solve here is:
There are multiple servers across ...
- 181
0
votes
1
answer
60
views
History and autocompletion do not work in SSH PAM session (openssh-server, libpam-ldap and nscd)
I configured a Linux Ubuntu 20.04 LTS VM, to authenticate users in the LDAP base and it worked correctly, however, when trying to repeat commands already executed, as we normally do in Linux, pressing ...
0
votes
0
answers
305
views
How to set up pam_mount?
I am trying to automount SMB shares from a Synology NAS on a client running Ubuntu Studio 18.04 (yes I know it is out of date and plan to upgrade to 20.04.2 soon). I have tried using autofs, but have ...
- 186
1
vote
0
answers
123
views
cracklib allows passwords even if substring of the password is within the dictionary
I am using PAM and cracklib for password validation, the words defined in the dictionary of known words if used as substring of password should be rejected by cracklib and pam module.
When the word ...
0
votes
0
answers
719
views
PAM unable to dlopen(pam_systemd.so) after upgrade to 18.04
I had an old web server that needed an upgrade from 14.04 to 18.04. I upgraded from 14.04 to 16.04, then from 16.04 to 18.04 one after the other. It is behind a proxy, and on that proxy, I see connect(...
- 204
1
vote
1
answer
2k
views
Mount.cifs with krb5 fails on 20.04 LTS
I have a Synology NAS and multiple Ubuntu Clients in my network. I setup Active Directory integration on the clients following the instructions here https://ubuntu.com/server/docs/service-sssd.
...
- 31
1
vote
1
answer
748
views
Umask for the SFTP users
My company has a syntax in /etc/pam.d/sshd file on our SFTP server:
session optional pam_umask.so umask=444
I found this command changes the permission of the uploaded file from 644 to 222 for all ...
- 137
0
votes
1
answer
419
views
Can't restart Apache on Ubuntu 20.04 [duplicate]
I am setting up my VPS with Ubuntu 20.04 installed, that I am using to host my personal website.
I am editing /etc/apache2/apache2.conf to allow Apache to access my website directory (according to ...
- 125
1
vote
0
answers
261
views
How to use fingerprint login in ubuntu 20.04?
I have tried it using this commands:
lsusb
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
**Bus 001 Device 005: ID 27c6:5301 Shenzhen Goodix Technology Co.,Ltd. Fingerprint Reader**
...
- 69
0
votes
2
answers
198
views
What is the Minimum Setup Needed for Setting-up XDG Directories ($XDG_RUNTIME_DIR etc.)?
I'm in a setup (20.04) that is basically headless (a solaris zone, but we could probably consider it analogous to any server sort of setup), and as such, I don't have any graphical environment ...
- 161
0
votes
0
answers
26
views
Prevent user login before mount is complete
All our workstations are Ubuntu 18. The /home/ is a network mount (nas). This is how it looks in /etc/fstab:
nas:/mnt/export/home /home nfs nfsvers=3,_netdev 0 0
The problem is: ...
1
vote
1
answer
165
views
PAM pwhistory module is not prompting for choose another password if password has been already used
I want set history password reusability limit. I am trying to use pwhistory pam module.
Below is configuration in /etc/pam.d/common-password file in Ubuntu (VERSION 20.04.1 LTS)
password ...
- 111
0
votes
0
answers
396
views
Motd is displayed twice or not at all
I've been getting this annoying issue where I cannot edit my /etc/update-motd.d/ files correctly without messing it up. Now for some reason no matter what I do, my motd is displayed twice or not at ...
0
votes
1
answer
586
views
Is “obey pam restrictions” still supposed to work in Samba 4 (Ubuntu 20.04)?
This is a re-run of this question I asked two weeks ago, which was closed because it was related to an EOL Ubuntu version.
I did another install, this time on Ubuntu Server 20.04LTS, with exactly the ...
- 111
1
vote
1
answer
505
views
sudo constantly asking for password with LDAP SSH user
I'm using Ubuntu 16.04, just upgraded sudo from version 1.8.16 to 1.9.5p2. When I SSH to server by LDAP account, I try to run some sudo command, the server require to input password constantly, I'm ...
- 121
1
vote
2
answers
302
views
Confirm system dialogs solely by U2F device
I have enabled U2F device authentication for PAM on my Ubuntu 20.04. I have used this approach https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F and put
...
1
vote
1
answer
703
views
Pam: How do I restrict users from using old password using pam?
I am currently using Ubuntu server 20.04.1.
As stated in the title, I would like to configure pam so that users cannot use 5 old passwords. I have followed some guide on ways to do it but none of it ...
- 9
2
votes
0
answers
321
views
understanding why/how my accounts got locked out after libpam-systemd update
Some of my accounts are locked out after an updated of Ubuntu 20.04 with the latest libpam-systemd package. I'm trying to understand why some accounts are locked out and others not, since the common-...
- 21
0
votes
0
answers
1k
views
Samba AD DC no longer accepts login using domain accounts
I've been trying to setup Samba AD DC on Ubuntu 20.04 for a good while now and with some success. I use the server which runs this Samba instance as my primary workstation, so I need to be able to log ...
- 49
2
votes
0
answers
2k
views
pam_open_session: Module is unknown
I am using Ubuntu 20.10 in WSL, and there are problems with changing the ulimit -n. I tried several methods and one of them needed to add session required pam_limits.so line to the /etc/pam.d/common-...
- 41
1
vote
2
answers
1k
views
Missing directory /lib/security causing boot errors [closed]
After upgrading from Ubuntu 18.04 to 20.04 I am getting boot errors as follows:
PAM unable to dlopen(pam_deepin_auth.so): /lib/security/pam_deepin_auth.so: cannot open shared object file: No such file ...
- 77