As of May 31, 2023, we have updated our Code of Conduct.

Questions tagged [pam]

Pluggable authentication modules (PAM)

Filter by
Sorted by
Tagged with
1 vote
0 answers
22 views

sudo: unable to initialize PAM: Critical error - immediate abort" when running sudo apt-get update on Ubuntu

I am encountering an issue on my Ubuntu system when attempting to run the command sudo apt-get update. The terminal returns the following error message: sudo: unable to initialize PAM: Critical error -...
Mehrab Hossain's user avatar
1 vote
0 answers
13 views

pam_tally2 locking everyone out after configuring common-auth file on Ubuntu 20.04

I am trying to configure user lockout after 3 unsuccessful attempt. I found instructions on the internet but I always end up with the same problem: after modifying /etc/pam.d/common-auth to include ...
A R's user avatar
  • 123
0 votes
0 answers
13 views

What are all the certificates mandatory to be provide while setting TLSVerifyClient option to demand?

In my case, I had set TLSVerifyClient to demand. I couldn't be able to establish a connection While providing TLSCACertificateFile alone. While setting the TLSVerifyClient option demand is it ...
ram ajay's user avatar
0 votes
1 answer
82 views

Issue with AAD login and sudo

We are experiencing a following issue: when we are using AAD user with Azure Active Directory Authentication for Ubuntu module - it is not possible to use neither sudo in terminal nor unlock any ...
Uladzimir Radziuk's user avatar
0 votes
0 answers
44 views

/etc/pam.d configuration Ubuntu - common-* versus system-auth

I'm trying to configure /etc/pam.d files on Ubuntu servers. I've already configured by RHEL servers by using the /etc/pam.d/system-auth. Problem: Could not chdir to home directory I believe this is ...
N. J's user avatar
  • 131
0 votes
0 answers
110 views

Error: "System error" when joining server to Active Directory with SSSD

I am trying to join an Ubuntu 20.04LTS server to an Active Directory using the instructions found here. Everything goes well until I get to test the login in this section: Finally, how about we try a ...
Moasson's user avatar
0 votes
0 answers
217 views

On Ubuntu 20.04, unable to ssh to server, after upgrade from 18.04

After upgrading ubuntu from 18.04 to 20.04, unable to connect to host with my user Below are the logs from auth.log Mar 28 12:27:13 tpvm sshd[1590]: debug1: userauth-request for user XXXXX service ssh-...
Shaik Musthafa's user avatar
0 votes
0 answers
62 views

After a long wait, the PAM window turns on asking for a password that never matches

After a long wait, the PAM window turns on asking for a password that never matches. It says: xscreensaver: assuming NULL password means cancel and xscreensaver: authentification via PAM ...
lan1967's user avatar
0 votes
1 answer
22 views

I changed my /etc/pam.d/common-auth with failock and i can't login back into my vm, did I lose my VM?

I followed this one to implement faillock in the common-auth, I'm not able to log back in to my VM, did i just lose my VM? How do I set up pam_faillock?
neal wang's user avatar
0 votes
0 answers
33 views

How to stop network shares from disconnecting

I am using pam-mount under Ubuntu Studio 22.0.4 to connect to several shared directories on my Synology NAS. It takes a long time, but these connections die after a while. This is not a network ...
R B's user avatar
  • 336
0 votes
0 answers
97 views

22.04 Fingerprint login keeps losing my fingerprints

I have set up fingerprint login for my 22.04 installation. It has been working well for a few weeks but now rejects all login attempts. When I go to 'Users' in settings, the Fingerprint Login has ...
jfowlie's user avatar
1 vote
1 answer
289 views

How to configure pam_faillock in common-*?

I noticed that fedora/redhat has tool authselect/authconfig to configure pam_faillock in system-auth ,so it will work in system-wide auth phase. Ubuntu use pam-auth-update to configure system-wide ...
goodhunter's user avatar
0 votes
2 answers
126 views

pam_authenticate error, doas problem

I wanted to try doas (https://github.com/slicer69/doas) I have done everything thats on github page but when I try to use doas it gave me this error doas: pam_authenticate: Permission denied
jifitailu's user avatar
0 votes
0 answers
95 views

When upgrading from Ubuntu 20.04.5 to Ubuntu 22.04.1 pam_auth stops working (solved, but...)

I had Ubuntu 20.04.5 LTS and used pam_auth to authenticate users against an Active Directory. After upgrading to Ubuntu 22.04.1 LTS it stopped working. It seems that the libpam-radius-auth package is ...
Adeka's user avatar
  • 1
0 votes
0 answers
659 views

Domains are not found after joining Ubuntu 22.04 to Active Directory using SSSD

Since Ubuntu 20.04 we are using SSSD and realmd to join these server to one of our Active Directory domains. This works (almost) out-of-the-box. For Ubuntu 22.04, however, we run into issues. And I am ...
Smithers91's user avatar
0 votes
1 answer
292 views

How to pam_mount server shares?

I have a Ubuntu Studio 22.04.1 desktop client joined to an AD domain controller, which also serves as a file rver. I would like to automount server shares on login of any domain user. The manpage on ...
R B's user avatar
  • 336
0 votes
0 answers
50 views

How to truncate domain part from username in pam_mount?

I am currently experimenting with the new Active Directory Features in Ubuntu 22.04. I joined the domain with my client and everything worked fine so far. However I want to mount the users home ...
cybertschunk's user avatar
0 votes
0 answers
180 views

Can pam_faillock be configured to work with a Yubikey on Ubuntu 22.04

Coming from Ubuntu 18.04, I was able to successfully set up my Yubikey U2F key to be required at login by following the Yubico instructions here: https://support.yubico.com/hc/en-us/articles/...
Jeremy T's user avatar
0 votes
0 answers
49 views

installed anbox and PAM got problems

I am on kubuntu 22.04 and installed anbox it said that now I am in charge of managing PAM myself I dont know how to do that how can I make it automatic again? did anbox make me vulnerable?
Usermaxn's user avatar
  • 175
0 votes
0 answers
278 views

I have an error while using my password to login an sudo

Some days ago I received some Ubuntu 22.04.1 LTS updates. After these updates I can not login anymore with my password. I am only able to login because I have set up my fingerprints before. I know the ...
Pablo Aguirre's user avatar
0 votes
0 answers
317 views

dovecot errors: pam_authenticate() failed / userdb returned 0 as uid

I am recieving errors while configuring postfix and dovecot for virtual users mailboxes. Initially I made a typo in the main.cf config file. I corrected that error and am now receiving errors. Virtual ...
Mahmud100's user avatar
1 vote
1 answer
337 views

SSH using Google auth TOTP and pubkey still Requiring password

I'm using Google Auth setup by following this guide on linode.com and a pubkey (generated with ssh-keygen -t rsa -b 4096) to ssh into a new Ubuntu server I have setup. └─$ ssh -i .ssh/ubuntuServer ...
Medic Behind You's user avatar
0 votes
1 answer
113 views

How to disable ldap failed authentication message from audit.logs

I have to disable LDAP user failed PAM authentication messages from audit.logs /var/log/audit.log | grep failed type=USER_AUTH msg=audit(1660931213.045:2190121): pid=289 uid=0 auid=4294965 ses=4297295 ...
Asghar Asma's user avatar
1 vote
0 answers
707 views

How to setup up PAM to unlock gnome-keyring

I am trying to use Ubuntu with effectively using ly display manager, however it does not seem to setup the PAM settings with Debian, I so I need to do this manually. My research shows that this is ...
run_the_race's user avatar
0 votes
0 answers
166 views

Problem adding pam_group.so to auth section in common-auth

I'm trying to match a FreeIPA user to a local group via FreeIPA group membership. When testing the manual edit of common-auth it works. But I'm trying to generate the file with pam-auth-update so that ...
dmgeurts's user avatar
0 votes
1 answer
432 views

Ubuntu Problems with Pam Google Auth

I had a working OpenVPN server that used Google Authenticator for TFA. It was working perfectly fine for well over a year. Just last night/today it stopped working. I managed to track down the auth....
drg's user avatar
  • 101
0 votes
0 answers
20 views

Pam module debug creates duplicate log messages

I have a test server that i recently implement debug module argument in pam.d/common-password config file. And it does produce info log entries that i am looking for. But one weird issue is that ...
yoloyolo's user avatar
2 votes
1 answer
249 views

Get system to accept fingerprint OR password

I have a working fingerprint scanner, but this does not allow me to unlock the login key ring. Therefor, I am looking for solutions to allow me to type my password to login whenever the key ring would ...
Win Lawson's user avatar
0 votes
0 answers
829 views

Configure Network User Authentication with SSSD in Ubuntu

I'm a newbie in Ubuntu and have zero experience in configuring SSSD. Recently I configured an Ubuntu machine to authenticate network user with SSSD-AD. I followed the guide in https://ubuntu.com/...
bongsf's user avatar
  • 1
1 vote
0 answers
2k views

the login keyring did not get unlocked when you logged into your computer - Without Auto Login

i know this is a repeated question but in may case Auto Login is not turned on. instead i have enabled Fingerprint Login and enabled Fingerprint Authentication module using pam-auth-update. so i use ...
mjx's user avatar
  • 21
1 vote
0 answers
795 views

Ubuntu 20.04 LTS Fingerprint not recognizing

I have enrolled the fingerprint but it doesn't recognize my fingerprint on the login screen. OS: Ubuntu 20.04 LTS Laptop: Asus Zenbook 14 UX430UAR I checked if my device is supported or not in ...
Aagam Sheth's user avatar
0 votes
0 answers
50 views

Is there any one-click authentication module for sudo for an already logged-in user?

I would like to find a (PAM?) module that allows me to confirm sudo in one click, instead of typing the password each time. Much like windows UAC, where the user is switched to a secure desktop where ...
AndresR's user avatar
  • 103
0 votes
0 answers
552 views

Ubuntu 20.04: Gnome file manager freezes after cifs mount on home directory

as part of a project I need to mount individual cifs-directories from a Samba DC on the home directory of individual users. The login-process authenticates against an OpenLDAP via SSSD and the mount ...
user1571129's user avatar
0 votes
0 answers
586 views

Mount LUKS encrypted partition at login

I would like to mount a LUKS partition on login. The solutions I have found involve using either: a LUKS passphrase that is equal to the user's password, or a keyfile that is stored in the HOME ...
toliveira's user avatar
  • 329
0 votes
0 answers
356 views

How to create ZFS home dirs using pam_exec

How do I get pam_exec.so to create a new home dir ZFS dataset for each user who logs in via GDM/LDAP? I'm running Ubuntu 20.04, using GDM and nslcd for LDAP auth. pam's mkhomedir library doesn't have ...
Dan MacDonald's user avatar
3 votes
2 answers
3k views

How do you disable su?

I'm confused about su a bit. I just want to prevent users from using su across the board. Authorized users will have sudo access so they can be root if desired. We just want to completely disable su ...
bluesquare's user avatar
1 vote
0 answers
329 views

Keyring has stopped unlocking automatically on login. How can I make it start again?

I have a "Login" keyring in my Gnome on Ubuntu 18.04 LTS. The password on this Login keyring is the same as my login password. It was always the case that it would only unlock intermittently....
Valtandor's user avatar
0 votes
1 answer
842 views

pam_mkhomedir.so not working with nslcd + LDAP (Active Directory)

I'm trying to get pam_mkhomedir.so to create an LDAP user's local home directory upon initial login. I'm on Ubuntu 20.04 LTS. Currently, users are added to my server via LDAP (Active Directory backend)...
Justin417's user avatar
  • 111
4 votes
0 answers
138 views

Ubuntu 20.04 GDM increments pam_tally without password input

I have an Ubuntu 20.04 machine with slightly modified common-auth and common-password files to lock the user out for 10 minutes if an incorrect password is tried 10 times. This works fine in the ...
drcomputer's user avatar
2 votes
1 answer
1k views

What happened to pamusb-tools and libpam-usb in Ubuntu 20.04?

I'm looking into how to make one of my usbs a security key and I found a guide to do so inside Linux here: https://bytevarsity.com/how-to-make-a-usb-security-key/ Two packages that the guide says to ...
FirDouglas's user avatar
1 vote
0 answers
170 views

SSH Challenge response in Thunar or Nautilus? [closed]

So I have a project where I need to access a server with SSH that has both priv/pub key and 2FA challenge response verification enabled. The following works: Command Line SSH access Using WinSCP in ...
m_krsic's user avatar
  • 559
0 votes
0 answers
235 views

Best place for pam_exec.so executable?

I implemented a pluggable authentication module (PAM) called checkConnections. I initially put this executable in /usr/local/sbin/ because Filesystem Hierarchy Standard says locally installed system ...
Gqqnbig's user avatar
  • 689
0 votes
1 answer
6k views

Access denied by PAM account configuration despite configured access.conf and updated /etc/shadow

I've been setting up a PAM configuration for sshd, and as of now /etc/pam.d/sshd stands like this: # Custom PAM config for sshd # Disallow login if /etc/nologin exists, inherited from old sshd config ...
JSONMagic's user avatar
1 vote
0 answers
1k views

Ubuntu 20.04 LTS sssd update from 2.2.3-3ubuntu0.4 to 2.2.3-3ubuntu0.6 broke AD logins

I have a number of servers running Ubuntu 20.04 LTS joined to Windows Active Directory via this procedure - https://www.server-world.info/en/note?os=Ubuntu_20.04&p=realmd Over this weekend, I ran ...
Barmaglot's user avatar
0 votes
0 answers
202 views

Nslcd:cannot open nsswitch.conf

When I try to run systemctl status nslcd An error in between the lines appear and it looks like this: cannot open /etc/nsswitch.conf: Permission denied I haven't change the permissions for neither of ...
kcpf's user avatar
  • 1
2 votes
1 answer
500 views

Conditionally stop interactive and non-interactive ssh login and give error message

I want to prevent interactive and non-interactive ssh login based on a conditional logic. I need to test the username and give an error message. People using sftp (non-interactive ssh) should also be ...
Gqqnbig's user avatar
  • 689
2 votes
0 answers
680 views

Is it possible to automount SMB share on a common mount point in a multi user Ubuntu 20.04 Desktop environment using NTLMv2 / login credentials?

I wish to mount SMB share on a common mount point for all users and auto mount it when it's accessed, like when you map a network drive to a common drive letter in a Windows environment and it just ...
inckie's user avatar
  • 66
0 votes
1 answer
221 views

Non copy/paste public key based SSH authentication

I want to remove the process of manually copying the public keys to each one of the servers for granting access. The main problem that I'm trying to solve here is: There are multiple servers across ...
Pallav Jha's user avatar
0 votes
1 answer
151 views

History and autocompletion do not work in SSH PAM session (openssh-server, libpam-ldap and nscd)

I configured a Linux Ubuntu 20.04 LTS VM, to authenticate users in the LDAP base and it worked correctly, however, when trying to repeat commands already executed, as we normally do in Linux, pressing ...
Marcos Santos's user avatar
0 votes
0 answers
642 views

How to set up pam_mount?

I am trying to automount SMB shares from a Synology NAS on a client running Ubuntu Studio 18.04 (yes I know it is out of date and plan to upgrade to 20.04.2 soon). I have tried using autofs, but have ...
R B's user avatar
  • 336

1
2 3 4 5
7