Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [pam]

Pluggable authentication modules (PAM)

0
votes
0answers
16 views

Ubuntu 18.04 VM; unable to initialize PAM: No such file or directory

I'm trying to learn more about Unix systems, and am working on hardening an Ubuntu Server VM (using VMWare Workstation). In the process of which, I must have done something that messed with the pam ...
0
votes
0answers
55 views

Pam configuration window when running update on 18.10

When software updater ran, a window popped up labled PAM configuration appeared. There are six check-boxes available under PAM profiles to enable: Fingerprint authentication Unix authentication ...
0
votes
0answers
22 views

SSH doesnt update btmp or auth.log when user exists on system

Im not sure if ive encountered a bug or not.... Ive gone ahead and enabled the pam_lastlog.so showfailed in PAM and I can see its running properly when I authenticate to the system. My Issue is its ...
1
vote
0answers
28 views

PAM unable to dlopen pam_sss.so pam_cap.so pam_systemd.so pam_pwquality.so

Since yesterday i have a huge number of errors in journald log. New records appears at 3-5 in each second: окт 24 09:08:37 ripcomp su[7405]: PAM unable to dlopen(pam_sss.so): /lib/security/pam_sss.so:...
0
votes
0answers
19 views

How to pass the password to PAM like display managers do?

The question is how display managers like SDDM and GDM do expose the password typed by the user to PAM system? The reason why I want to understand that is that I want to unlock gnome keyring and ...
0
votes
0answers
53 views

change default username for SU command

I want to change the default for su command ... so when I use su (without username) it changes user to root but I want replace it with my desired username and not su default. I already checked pam....
0
votes
1answer
244 views

How to configure a U2F key(such as a YubiKey) for system wide 2-Factor Authentication?

The official Yubico guide only covers enabling it for GDM login, how can I enable it for all logins including TTY, ssh, sudo, etc?
0
votes
0answers
193 views

pam config issue ( bad jump )

After some packages/data got corrupted, I ran fsck and repaired the packages from the recovery console. As far as I can tell all packages should be whole and apt does not complain. However - I cannot ...
0
votes
1answer
63 views

Why USERGROUPS_ENAB property in /etc/login.defs does not have any effect?

I just found the following comment in /etc/login.defs: # Enable setting of the umask group bits to be the same as owner bits # (examples: 022 -> 002, 077 -> 007) for non-root users, if the uid ...
4
votes
1answer
286 views

A lot of PAM authentication errors on my logs targeting my mailserver. How do I stop it?

I need help pinpointing some errors in my auth.log file on my Ubuntu server. A few weeks ago, I found a plethora of login attempts to my SSH port (22) on auth.log, so I changed my SSH port. It was ...
1
vote
0answers
66 views

In greeter, how avoid username login with smartcard

I using a pam smartcard module, the user is in the smartcard. In ubuntu 18.04 before start pam.d configs the system ask for a username. Its possible disable this username question and keep all login ...
0
votes
0answers
32 views

setting up pam stack with pam_google_authenticator - the most secure way

I've just tried to setup multi factor authentication for sshd, login, su, sudo, policykit, screensaver and lightdm. It works as expected and 2 factors are required to authenticate. ( plus public key ...
0
votes
0answers
36 views

Is it possible to use pam_mount with gvfs and how?

Is it possible to use gvfs with pam_mount, using user's password for the mounting command ? How would one achieve that ? Reading the documentation, it seems this might be a good start, but no way to ...
0
votes
0answers
107 views

Where does pam get credential information?

I am learning how to write a application program which use pam to do authentication. I checked the Linux documents and some example codes, now I have a basic understanding about the pam APIs and pam ...
0
votes
0answers
724 views

Setting up SSH authentication on openLDAP server

I have setup an Ubuntu 16.04 openLDAP server and want to allow LDAP users to login locally with SSH (to commit to a repository etc.) with libnss and pam_ldap.so. Every time I login via ssh I get ...
0
votes
1answer
183 views

Unable to connect using ssh [closed]

I have a Raspberry Pi 3 model b, the OS is Ubuntu Mate 16, everything was working fine before. Today I have started the rpi, I figured out I am facing a problem which occurs during boot time due to ...
1
vote
1answer
554 views

How to set up centralized user authentication on Ubuntu?

I have installed OpenLDAP, and configured some basic users. Next, I want to configure users in my directory to be able to authenticate through my server. I was reading a little about something called ...
0
votes
0answers
53 views

PAM-PGSQL authentication succeeds but user cannot access the file system

Synopsis: I would like to use PostgreSQL as the authentication server for my Linux users via PAM. For this purpose, I use the libnss-pgsql2 library. The Linux distro is Ubuntu 14.04. So far, I have ...
1
vote
0answers
532 views

How can I configure PAM to do a simple LDAP authentication against an Active Directory server, without having to join the Ubuntu 16.04 VM to a domain?

I'm using Vagrant and some ansible scripts to provision an Ubuntu 16.04 server image on my Windows 10 computer that is joined to a domain. I want to log into the VM using the same credentials as I log ...
1
vote
0answers
150 views

enable pam module as default

I want to enable some pam modules automatically in a script. mkhomedir is disabled as default. If you start pam-auth-update, there is no check mark in Create home directory on login How can I ...
0
votes
0answers
144 views

MySQL PAM Intergration Error “PAM adding faulty module: pam_mysql.so”

I am trying to get my vsftpd to use a MySQL database for storing usernames and passwords. I have followed this tutorial but it doesn't seem to be working and I think maybe Tutorial: https://www....
0
votes
0answers
16 views

Changed pam.d - cannot su and sudo [duplicate]

I changed files in /etc/pam.d (sudo and common-auth), now I can't use sudo. $ sudo -i sudo: policy plugin failed session initialization *** Error in `sudo': double free or corruption (!prev): ...
1
vote
1answer
356 views

How do I use PAM with MySQL (on Xenial)?

I am running Ubuntu 16.04 and installed libpam-mysql and pamtester. To test out the module, I tried running the following command: pamtester --item user=X --item passwd=X --item host=127.0.0.1 --item ...
1
vote
0answers
156 views

pam_oath + yubikey: can login with yubikey but not unlock lockscreen

I'm using pam_oath.so from the libpam_oath package to use my yubikey to login. Its configured as OATH-HOTP and it's working fine. I can login with my pin and a press on my yubikey. I dont need to ...
0
votes
1answer
667 views

Cannot login to SDDM but to tty

Summary On my kubuntu 16.04 I cannot login any more on the graphical login screen (produced by standard display manager SDDM). But when I switch to a tty I can login and start the graphical desktop ...
0
votes
1answer
685 views

can't login ubuntu but can ssh to it

The last few lines from /var/log/auth.log: Jan 9 22:59:57 miranda-OptiPlex-790 lightdm: PAM adding faulty module: pam_kwallet5.so Jan 9 22:59:57 miranda-OptiPlex-790 lightdm: pam_succeed_if(lightdm:...
1
vote
0answers
132 views

How lock the unlock screen after wrong password attempts?

I enabled pam_tally2 to lock a user after several password attempts. It works well at the TTY, login screen and ssh. However, I usually lock the screen when leaving the computer. You can type as many ...
0
votes
0answers
340 views

PAM fingerprint fprint login configuration

On my Thinkpad X1 I installed fprint and it works, only that Kubuntu login wants both the fingerprint and the password. I added this line auth sufficient pam_fprintd.so in the file common-auth above ...
0
votes
0answers
73 views

Source of good online documentation on PAM

I recently had an issue where I could not change the password for a local account because the UID was within the Kerberos minimum_uid setting in PAM and using usermod to move the UID below 1000 ...
1
vote
0answers
289 views

Add CAP_SYS_PTRACE for a user in LTS 16

I would like to be able to attach to a process with gdb. The process has my uid, but the executable file is set-gid. So, apparently, I'm learning about PAM. It's my understanding any process ...
0
votes
0answers
874 views

pam service restart

I added the option, umask=007, for pam_umask.so module. Then I logged out and logged in. It works perfectly. However since I'm studying Ubuntu Linux I want to know how to restart only the specific ...
0
votes
1answer
331 views

sudo mkdir permissions

I added the option umask=007 at the end of session optional pam_umask.so in the /etc/pam.d/common-session file. It is working fine as intended for all users. However, I can't figure out how to ...
2
votes
2answers
1k views

How to setup virtual users for sftp (sshd) with access to a specific sub directory?

I try to setup virtual users for sftp with sshd and/or pam. My folder structure looks like this: / |-- var | +-- www | +-- site1 | +-- folder_1 | +-- folder_2 | +-- ...
1
vote
1answer
552 views

What is PAM and why does AWS enable it by default?

I only want to connect to my EC2 instance using SSH, but my sshd_config has UsePAM yes. What is this and will I get locked out of my instance if I set it to no? Also I set a cronjob to check if my ...
0
votes
2answers
243 views

PAM nologin not working?

Trying to learn basics of PAM and one thing I tried was to utilize the nologin feature. So I simply made a file /etc/nologin with the text "Sorry, users locked out for now!" I rebooted but for some ...
0
votes
0answers
236 views

Allow SSH access to a specific user if the IP matches one in a file

I need to allow SSH access to my server to user_a, from any IP address, and to user_b, only if the IP address is in a file - /etc/remote-hosts. Currently, in /etc/ssh/sshd_config, I have added: ...
0
votes
0answers
540 views

System freezes up when copying files from/to USB drive which uses any format

I'll ask this question here since I seemed to have stumped the Linux Mint people. I have been using Linux Mint for one and a half years. I have 3 computers and 2 run on Linux. My main computer is a ...
0
votes
0answers
486 views

Is it safe to comment out kwallet in lightdm and lightdm-greeter?

I have a problem. I am getting some annoying logs of pam_kwallet not found. This is because of kwallet is not installed in my system. If I run the command more /etc/pam.d/* I am getting the below ...
1
vote
1answer
2k views

XDG_RUNTIME_DIR not set in the environment

I am running Ubuntu 14.04 LTS. I wanted to run a GUI application during log-in in the LightDM, I did this by adding this line on /etc/pam.d/lightdm auth required pam_exec.so debug log=/path/to/file....
0
votes
0answers
29 views

Avoid providing verification code request for specific time using Google authenticator

I've just activated the two factor authentication using Google authenticator and I'm now required to provide the verification code any time that I'm logging to the system. How to avoid the ...
0
votes
3answers
902 views

How to configure pam_mkhomedir to create home directories with 0750 instead of 0777 permissions?

We would like to change the default permissions of the home directories created by pam_mkhomedir. The permissions default to 0755, we would prefer 0750. Changing the permissions of /etc/skel did not ...
5
votes
0answers
703 views

Ubuntu 14.04 | Reset password asking me to Retype new password twice. Ideally it should be once

I recently tried to implement password policy (at least one digit, upper case, lowercase, a special character) using pam_cracklib module. After that, the system asks me to retype password twice ...
1
vote
1answer
225 views

how to reinstall pam and configure pam

I manually installed linux-pam-1.30, configure with prefix=/usr, and removed file in /etc/pam.d/, now start ubuntu will stop at login process, because gdm will auto login, but pam will failed to auth ...
0
votes
1answer
445 views

pam / ad issue with lightdm

im having issues logging in the desktop via AD with my current setup with sssd, kerberos, samba, and AD. heres the output of the auth.log file. it seems that pam and lightdm aren't working well with ...
0
votes
0answers
176 views

pam_authenticate return's PAM_MODULE_UNKNOWN ( returns 28 ), how to resolve?

Downloaded the source Linux-PAM-1.3.0.tar.gz version then, configured and compiled using command ./configure --prefix=/u02/tasks/linux-pam/Linux-PAM-1.3.0/output/pre --exec-prefix=/u02/tasks/linux-...
1
vote
1answer
630 views

Avoid verification code request when using sudo using Google authenticator

I've just activated the two factor authentication using Google authenticator and I'm now required to provide the verification code any time that I use sudo. How to avoid the authentication step when ...
1
vote
1answer
526 views

How to increase the number of hashing rounds for /etc/shadow?

I usually use long passwords for my machines, but I heard that it's possible to increase the number of hashing rounds and get the same security with a shorter one. How would I make my system use more ...
3
votes
0answers
227 views

mount command hangs when share is unavailable

So we are using a combination of samba, winbind and pam_mount to authenticate users from AD and mount network share individually and everything works fine except for when a share is unavailable. In ...
0
votes
1answer
253 views

How do I deny a particular user from getting root ( through su ) in a terminal by changing the /etc/pam.d/su ? Pam based controlling is required [duplicate]

There are two users in ubuntu (let's call them user1 and user2). Currently, user1 can get access root access using the below commands: user1@sai:~$ su Password: root@sai:/home/user1# However, I ...
1
vote
0answers
65 views

Can't login in GUI after re-installing pam

I downloaded pam library and make-install it on Ubuntu. When I login: Input the correct password shows "wrong password". I can still log in through changing to "change user" mode That also in GUI, ...