Questions tagged [pam]

Pluggable authentication modules (PAM)

Filter by
Sorted by
Tagged with
0 votes
0 answers
25 views

How to Login to SSH with Dynamic username

I some external Gateway through which the ssh requests come and need to log the sessionID in the linux when the connection happens. I can send the sessionID (some string) along with the username while ...
CRYSTAL's user avatar
1 vote
1 answer
88 views

Using etc/security/time.conf for groups

how could I set for group "spedytorzy" logon hours 7-15 from Monday to Friday? Actually I have *;*;@spedytorzy;Wk0700-1500 and added to /etc/pam.d/sshd file ,,account required pam_exec.so&...
czehu102's user avatar
0 votes
2 answers
442 views

Why SSSD Service override_homedir triggers creation of home directory with wrong permissions?

I have a vendor application installed in an Ubuntu Jammy server that relies on SSSD v2.6.3 configured for LDAP integration for the authentication and creation of the home directory of the user in the ...
Alejandro Arévalo's user avatar
1 vote
0 answers
750 views

mount with cifs and sec=krb5 fails with "Required key not available"

The problem First time posting here, and also not the most super experienced ubuntu user, so I hope that I can describe my problem well enough. I am trying to mount a windows fileshare to our ubuntu ...
AlexH's user avatar
  • 21
1 vote
1 answer
219 views

How to trigger a notification for any console login?

I'm trying to find a way to trigger a notification script when anyone logs in via a console (so not ssh). There are many examples around that use PAM/pam_exec (for SSH) and these work fine, but after ...
Bin Chicken's user avatar
0 votes
0 answers
48 views

How to fix "credential reinitialization in a setuid context ignored"?

I'm using Ubuntu 22.04 with Kerberos authentication. Every time I use sudo, the following error is logged by the system: pam_krb5(sudo:setcred): (user ****) credential reinitialization in a setuid ...
OrangeDog's user avatar
  • 861
0 votes
1 answer
117 views

Prevent password change prompt when switching users with su as root

I am working with an Ubuntu system (22.04) and I have set a user's password to expire using the chage command by executing chage user1 -d 0. This prompts the user to change their password upon the ...
Utz's user avatar
  • 79
0 votes
0 answers
69 views

Ubuntu upgrade with sudo do-release-upgrade fails with missing pam.d

Upgrading ubuntu from 20.04.6 to 22.04.3 I get the output: Checking for a new Ubuntu release Get:1 Upgrade tool signature [819 B] Get:2 Upgrade tool [1,260 ...
Minato K's user avatar
1 vote
1 answer
269 views

Logins like [email protected] cause profile files to be owned by root

The users at my school are used to logging in to email, windows etc with a login [email protected] (authenticated with Active Directory via LDAP). Unfortunately this is causing havoc and corrupting ...
Bastion's user avatar
  • 201
2 votes
1 answer
778 views

Using SSH authentication configurations for xrdp

I have a server where its ssh is configured to allow some users and groups from AD, and the configuration is done in /etc/pam.d/sshd. However, this configuration is only applied to ssh, and if someone ...
YaserMow's user avatar
  • 194
1 vote
1 answer
147 views

Has the handling of the /etc/issue file changed from 18.04 to 20.04

I have bionic systems that display the lines in /etc/issue on login and re-display if I press ENTER. But, on my focal systems I only get the /etc/issue contents once, it does not display when I press ...
KevinDTimm's user avatar
0 votes
0 answers
60 views

Kubuntu stucks on login screen

Kubuntu stacks on login screen when password is expiried. it just doesn't show new password fields after password enter. I know how to change it in another way, but I need change expired password via ...
chart41's user avatar
0 votes
0 answers
55 views

Is Certificates are required for STARTTLS connection on LDAP

My LDAP server's ldap.conf file # # LDAP Defaults # # See ldap.conf(5) for details # This file should be world readable but not world writable. BASE dc=coretesting,dc=com URI ldap://ldap....
ram ajay's user avatar
4 votes
1 answer
551 views

I am trying to change my shell with chsh but I am getting an error

I can't change my bash shell to fish with chsh, because it asks for a password, which isn't my root password, and after I type something in I get this: chsh: PAM: Authentication failure This is my /...
gfejer's user avatar
  • 63
1 vote
1 answer
3k views

passwd command outputs 'password unchanged` when the password was changed

I'm running on Ubuntu 20.04 server and trying to change the password of the current user using passwd command. This is the output I get: Changing password for ubuntu. Current password: New password: ...
droritzz's user avatar
1 vote
0 answers
622 views

"sudo: unable to initialize PAM: Critical error - immediate abort" when try to run "sudo apt-get update" on Ubuntu 22.04

I am encountering an issue on my Ubuntu system when attempting to run the command sudo apt-get update. The terminal returns the following error message: sudo: unable to initialize PAM: Critical error -...
Mehrab Hossain's user avatar
1 vote
1 answer
688 views

pam_tally2 locking everyone out after configuring common-auth file on Ubuntu 20.04

I am trying to configure user lockout after 3 unsuccessful attempt. I found instructions on the internet but I always end up with the same problem: after modifying /etc/pam.d/common-auth to include ...
A R's user avatar
  • 135
0 votes
0 answers
18 views

What are all the certificates mandatory to be provide while setting TLSVerifyClient option to demand?

In my case, I had set TLSVerifyClient to demand. I couldn't be able to establish a connection While providing TLSCACertificateFile alone. While setting the TLSVerifyClient option demand is it ...
ram ajay's user avatar
0 votes
1 answer
948 views

Issue with AAD login and sudo

We are experiencing a following issue: when we are using AAD user with Azure Active Directory Authentication for Ubuntu module - it is not possible to use neither sudo in terminal nor unlock any ...
Uladzimir Radziuk's user avatar
0 votes
0 answers
821 views

On Ubuntu 20.04, unable to ssh to server, after upgrade from 18.04

After upgrading ubuntu from 18.04 to 20.04, unable to connect to host with my user Below are the logs from auth.log Mar 28 12:27:13 tpvm sshd[1590]: debug1: userauth-request for user XXXXX service ssh-...
Shaik Musthafa's user avatar
0 votes
0 answers
160 views

After a long wait, the PAM window turns on asking for a password that never matches

After a long wait, the PAM window turns on asking for a password that never matches. It says: xscreensaver: assuming NULL password means cancel and xscreensaver: authentification via PAM ...
lan1967's user avatar
0 votes
1 answer
63 views

I changed my /etc/pam.d/common-auth with failock and i can't login back into my vm, did I lose my VM?

I followed this one to implement faillock in the common-auth, I'm not able to log back in to my VM, did i just lose my VM? How do I set up pam_faillock?
neal wang's user avatar
0 votes
0 answers
115 views

How to stop network shares from disconnecting

I am using pam-mount under Ubuntu Studio 22.0.4 to connect to several shared directories on my Synology NAS. It takes a long time, but these connections die after a while. This is not a network ...
R B's user avatar
  • 316
2 votes
1 answer
208 views

22.04 Fingerprint login keeps losing my fingerprints

I have set up fingerprint login for my 22.04 installation. It has been working well for a few weeks but now rejects all login attempts. When I go to 'Users' in settings, the Fingerprint Login has ...
jfowlie's user avatar
  • 21
1 vote
1 answer
978 views

How to configure pam_faillock in common-*?

I noticed that fedora/redhat has tool authselect/authconfig to configure pam_faillock in system-auth ,so it will work in system-wide auth phase. Ubuntu use pam-auth-update to configure system-wide ...
goodhunter's user avatar
0 votes
2 answers
198 views

pam_authenticate error, doas problem

I wanted to try doas (https://github.com/slicer69/doas) I have done everything thats on github page but when I try to use doas it gave me this error doas: pam_authenticate: Permission denied
jifitailu's user avatar
0 votes
0 answers
1k views

Domains are not found after joining Ubuntu 22.04 to Active Directory using SSSD

Since Ubuntu 20.04 we are using SSSD and realmd to join these server to one of our Active Directory domains. This works (almost) out-of-the-box. For Ubuntu 22.04, however, we run into issues. And I am ...
Smithers91's user avatar
0 votes
1 answer
762 views

How to pam_mount server shares?

I have a Ubuntu Studio 22.04.1 desktop client joined to an AD domain controller, which also serves as a file rver. I would like to automount server shares on login of any domain user. The manpage on ...
R B's user avatar
  • 316
0 votes
1 answer
146 views

How to truncate domain part from username in pam_mount?

I am currently experimenting with the new Active Directory Features in Ubuntu 22.04. I joined the domain with my client and everything worked fine so far. However I want to mount the users home ...
cybertschunk's user avatar
0 votes
0 answers
495 views

I have an error while using my password to login an sudo

Some days ago I received some Ubuntu 22.04.1 LTS updates. After these updates I can not login anymore with my password. I am only able to login because I have set up my fingerprints before. I know the ...
Pablo Aguirre's user avatar
1 vote
1 answer
949 views

SSH using Google auth TOTP and pubkey still Requiring password

I'm using Google Auth setup by following this guide on linode.com and a pubkey (generated with ssh-keygen -t rsa -b 4096) to ssh into a new Ubuntu server I have setup. └─$ ssh -i .ssh/ubuntuServer ...
Medic Behind You's user avatar
0 votes
1 answer
171 views

How to disable ldap failed authentication message from audit.logs

I have to disable LDAP user failed PAM authentication messages from audit.logs /var/log/audit.log | grep failed type=USER_AUTH msg=audit(1660931213.045:2190121): pid=289 uid=0 auid=4294965 ses=4297295 ...
Asghar's user avatar
  • 1
2 votes
0 answers
2k views

How to setup up PAM to unlock gnome-keyring

I am trying to use Ubuntu with effectively using ly display manager, however it does not seem to setup the PAM settings with Debian, I so I need to do this manually. My research shows that this is ...
run_the_race's user avatar
0 votes
2 answers
904 views

Ubuntu Problems with Pam Google Auth

I had a working OpenVPN server that used Google Authenticator for TFA. It was working perfectly fine for well over a year. Just last night/today it stopped working. I managed to track down the auth....
drg's user avatar
  • 101
0 votes
0 answers
56 views

Pam module debug creates duplicate log messages

I have a test server that i recently implement debug module argument in pam.d/common-password config file. And it does produce info log entries that i am looking for. But one weird issue is that ...
yoloyolo's user avatar
2 votes
1 answer
622 views

Get system to accept fingerprint OR password

I have a working fingerprint scanner, but this does not allow me to unlock the login key ring. Therefor, I am looking for solutions to allow me to type my password to login whenever the key ring would ...
Win Lawson's user avatar
0 votes
0 answers
1k views

Configure Network User Authentication with SSSD in Ubuntu

I'm a newbie in Ubuntu and have zero experience in configuring SSSD. Recently I configured an Ubuntu machine to authenticate network user with SSSD-AD. I followed the guide in https://ubuntu.com/...
bongsf's user avatar
  • 1
0 votes
0 answers
3k views

the login keyring did not get unlocked when you logged into your computer - Without Auto Login

i know this is a repeated question but in may case Auto Login is not turned on. instead i have enabled Fingerprint Login and enabled Fingerprint Authentication module using pam-auth-update. so i use ...
mjx's user avatar
  • 9
1 vote
0 answers
1k views

Ubuntu 20.04 LTS Fingerprint not recognizing

I have enrolled the fingerprint but it doesn't recognize my fingerprint on the login screen. OS: Ubuntu 20.04 LTS Laptop: Asus Zenbook 14 UX430UAR I checked if my device is supported or not in ...
Aagam Sheth's user avatar
0 votes
0 answers
86 views

Is there any one-click authentication module for sudo for an already logged-in user?

I would like to find a (PAM?) module that allows me to confirm sudo in one click, instead of typing the password each time. Much like windows UAC, where the user is switched to a secure desktop where ...
AndresR's user avatar
  • 103
0 votes
0 answers
803 views

Ubuntu 20.04: Gnome file manager freezes after cifs mount on home directory

as part of a project I need to mount individual cifs-directories from a Samba DC on the home directory of individual users. The login-process authenticates against an OpenLDAP via SSSD and the mount ...
user1571129's user avatar
0 votes
0 answers
967 views

Mount LUKS encrypted partition at login

I would like to mount a LUKS partition on login. The solutions I have found involve using either: a LUKS passphrase that is equal to the user's password, or a keyfile that is stored in the HOME ...
toliveira's user avatar
  • 349
0 votes
0 answers
510 views

How to create ZFS home dirs using pam_exec

How do I get pam_exec.so to create a new home dir ZFS dataset for each user who logs in via GDM/LDAP? I'm running Ubuntu 20.04, using GDM and nslcd for LDAP auth. pam's mkhomedir library doesn't have ...
Dan MacDonald's user avatar
4 votes
2 answers
7k views

How do you disable su?

I'm confused about su a bit. I just want to prevent users from using su across the board. Authorized users will have sudo access so they can be root if desired. We just want to completely disable su ...
bluesquare's user avatar
0 votes
1 answer
1k views

pam_mkhomedir.so not working with nslcd + LDAP (Active Directory)

I'm trying to get pam_mkhomedir.so to create an LDAP user's local home directory upon initial login. I'm on Ubuntu 20.04 LTS. Currently, users are added to my server via LDAP (Active Directory backend)...
Justin417's user avatar
  • 141
4 votes
0 answers
152 views

Ubuntu 20.04 GDM increments pam_tally without password input

I have an Ubuntu 20.04 machine with slightly modified common-auth and common-password files to lock the user out for 10 minutes if an incorrect password is tried 10 times. This works fine in the ...
drcomputer's user avatar
2 votes
1 answer
2k views

What happened to pamusb-tools and libpam-usb in Ubuntu 20.04?

I'm looking into how to make one of my usbs a security key and I found a guide to do so inside Linux here: https://bytevarsity.com/how-to-make-a-usb-security-key/ Two packages that the guide says to ...
FirDouglas's user avatar
1 vote
0 answers
217 views

SSH Challenge response in Thunar or Nautilus? [closed]

So I have a project where I need to access a server with SSH that has both priv/pub key and 2FA challenge response verification enabled. The following works: Command Line SSH access Using WinSCP in ...
m_krsic's user avatar
  • 549
0 votes
0 answers
387 views

Best place for pam_exec.so executable?

I implemented a pluggable authentication module (PAM) called checkConnections. I initially put this executable in /usr/local/sbin/ because Filesystem Hierarchy Standard says locally installed system ...
Gqqnbig's user avatar
  • 689
0 votes
1 answer
10k views

Access denied by PAM account configuration despite configured access.conf and updated /etc/shadow

I've been setting up a PAM configuration for sshd, and as of now /etc/pam.d/sshd stands like this: # Custom PAM config for sshd # Disallow login if /etc/nologin exists, inherited from old sshd config ...
JSONMagic's user avatar

1
2 3 4 5
7