Questions tagged [pam]
Pluggable authentication modules (PAM)
268
questions
0
votes
1answer
37 views
Non copy/paste public key based SSH authentication
I want to remove the process of manually copying the public keys to each one of the servers for granting access.
The main problem that I'm trying to solve here is:
There are multiple servers across ...
0
votes
1answer
28 views
History and autocompletion do not work in SSH PAM session (openssh-server, libpam-ldap and nscd)
I configured a Linux Ubuntu 20.04 LTS VM, to authenticate users in the LDAP base and it worked correctly, however, when trying to repeat commands already executed, as we normally do in Linux, pressing ...
0
votes
0answers
25 views
Handling AD password expiry with Freeradius (with PAM+SSSD+GoogleAuth)
I setup a Freeradius server (v3.0.21) for VPN connections to the office, using their AD credentials + Google AUTH token. I use SSSD for AD credential check and Google AUTH librairies for tokens. Linux ...
0
votes
0answers
25 views
How to set up pam_mount?
I am trying to automount SMB shares from a Synology NAS on a client running Ubuntu Studio 18.04 (yes I know it is out of date and plan to upgrade to 20.04.2 soon). I have tried using autofs, but have ...
1
vote
0answers
21 views
cracklib allows passwords even if substring of the password is within the dictionary
I am using PAM and cracklib for password validation, the words defined in the dictionary of known words if used as substring of password should be rejected by cracklib and pam module.
When the word ...
0
votes
0answers
101 views
PAM unable to dlopen(pam_systemd.so) after upgrade to 18.04
I had an old web server that needed an upgrade from 14.04 to 18.04. I upgraded from 14.04 to 16.04, then from 16.04 to 18.04 one after the other. It is behind a proxy, and on that proxy, I see connect(...
1
vote
1answer
191 views
Mount.cifs with krb5 fails on 20.04 LTS
I have a Synology NAS and multiple Ubuntu Clients in my network. I setup Active Directory integration on the clients following the instructions here https://ubuntu.com/server/docs/service-sssd.
...
1
vote
1answer
81 views
Umask for the SFTP users
My company has a syntax in /etc/pam.d/sshd file on our SFTP server:
session optional pam_umask.so umask=444
I found this command changes the permission of the uploaded file from 644 to 222 for all ...
0
votes
1answer
124 views
Can't restart Apache on Ubuntu 20.04 [duplicate]
I am setting up my VPS with Ubuntu 20.04 installed, that I am using to host my personal website.
I am editing /etc/apache2/apache2.conf to allow Apache to access my website directory (according to ...
1
vote
0answers
115 views
How to use fingerprint login in ubuntu 20.04?
I have tried it using this commands:
lsusb
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
**Bus 001 Device 005: ID 27c6:5301 Shenzhen Goodix Technology Co.,Ltd. Fingerprint Reader**
...
0
votes
2answers
54 views
What is the Minimum Setup Needed for Setting-up XDG Directories ($XDG_RUNTIME_DIR etc.)?
I'm in a setup (20.04) that is basically headless (a solaris zone, but we could probably consider it analogous to any server sort of setup), and as such, I don't have any graphical environment ...
0
votes
0answers
44 views
PAM-CGFS Error: cgroupfs v1: Failed to initialize cpuset
My auth.log file is full with
Feb 21 00:59:50 server PAM-CGFS[85778]: cgroupfs v1: Failed to initialize cpuset
Feb 21 00:59:50 server PAM-CGFS[85776]: cgroupfs v1: Failed to initialize cpuset
I have ...
0
votes
0answers
26 views
Prevent user login before mount is complete
All our workstations are Ubuntu 18. The /home/ is a network mount (nas). This is how it looks in /etc/fstab:
nas:/mnt/export/home /home nfs nfsvers=3,_netdev 0 0
The problem is: ...
0
votes
0answers
63 views
PAM pwhistory module is not prompting for choose another password if password has been already used
I want set history password reusability limit. I am trying to use pwhistory pam module.
Below is configuration in /etc/pam.d/common-password file in Ubuntu (VERSION 20.04.1 LTS)
password ...
0
votes
0answers
94 views
Motd is displayed twice or not at all
I've been getting this annoying issue where I cannot edit my /etc/update-motd.d/ files correctly without messing it up. Now for some reason no matter what I do, my motd is displayed twice or not at ...
0
votes
1answer
160 views
Is “obey pam restrictions” still supposed to work in Samba 4 (Ubuntu 20.04)?
This is a re-run of this question I asked two weeks ago, which was closed because it was related to an EOL Ubuntu version.
I did another install, this time on Ubuntu Server 20.04LTS, with exactly the ...
1
vote
1answer
205 views
sudo constantly asking for password with LDAP SSH user
I'm using Ubuntu 16.04, just upgraded sudo from version 1.8.16 to 1.9.5p2. When I SSH to server by LDAP account, I try to run some sudo command, the server require to input password constantly, I'm ...
1
vote
3answers
111 views
Confirm system dialogs solely by U2F device
I have enabled U2F device authentication for PAM on my Ubuntu 20.04. I have used this approach https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F and put
...
1
vote
1answer
74 views
Pam: How do I restrict users from using old password using pam?
I am currently using Ubuntu server 20.04.1.
As stated in the title, I would like to configure pam so that users cannot use 5 old passwords. I have followed some guide on ways to do it but none of it ...
0
votes
0answers
38 views
Encountered an error 'Authentication token manipulation error' after configuring /etc/pam.d/common-password to restrict using old password
I am currently using Ubuntu Server 20.04.1 LTS.
After configuring the code
'password [success=1 default =ignore] pam_unix.so obscure sha512'
to
'password [success=1 default =ignore] pam_unix.so ...
2
votes
0answers
65 views
understanding why/how my accounts got locked out after libpam-systemd update
Some of my accounts are locked out after an updated of Ubuntu 20.04 with the latest libpam-systemd package. I'm trying to understand why some accounts are locked out and others not, since the common-...
0
votes
0answers
124 views
PAM debug logging to Journal
I need to debug how the PAM authentication process of an appliation with my custom PAM module is executed. I'm using this for the Exim mail server on an Ubuntu 20.04 server and have created my own PAM ...
0
votes
0answers
49 views
Pam_tally2 counts selecting a different user in lightdm-greeter as failed login attempt (Ubuntu 18.04)
Due to some other technical limitations, I have to use lightdm and lightdm-greeter on Ubuntu 18.04.5.
I have the new requirement to lock users after 4 unsuccessful login attemtps. So I've made the ...
0
votes
0answers
44 views
Active Directory sudoers Gnome Apps
I'm using ubuntu 20.04.1 in my Active Directory environment.
It's joined to the domain with "realm join example.com". Admins groups are added to sudoers. Home dirs are ok. I can login into ...
0
votes
0answers
55 views
How to disable duplicate password prompts after login?
I use a biometric PAM module to login. Therefore, I get prompted for my password after logging in for the first time after boot. I understand why and expect this behaviour.
What is unexpected is that ...
0
votes
0answers
34 views
2 different SSH connections on 2 different port
I need to configure 2 SSH connection on my server : one on port 22 and the other on port 422.
Each connection must be linked with a different LDAP server.
I think this can be done by creating a new ...
0
votes
0answers
625 views
Samba AD DC no longer accepts login using domain accounts
I've been trying to setup Samba AD DC on Ubuntu 20.04 for a good while now and with some success. I use the server which runs this Samba instance as my primary workstation, so I need to be able to log ...
1
vote
0answers
486 views
pam_open_session: Module is unknown
I am using Ubuntu 20.10 in WSL, and there are problems with changing the ulimit -n. I tried several methods and one of them needed to add session required pam_limits.so line to the /etc/pam.d/common-...
1
vote
2answers
488 views
Missing directory /lib/security causing boot errors [closed]
After upgrading from Ubuntu 18.04 to 20.04 I am getting boot errors as follows:
PAM unable to dlopen(pam_deepin_auth.so): /lib/security/pam_deepin_auth.so: cannot open shared object file: No such file ...
0
votes
0answers
83 views
Unable to Increase ulimit Settings on Ubuntu 16.04
In order to try to increase the ulimit -n values to larger ones on a Ubuntu 16.04 system, I have made the following changes:
Edited /etc/security/limits.conf to include
* hard nofile ...
0
votes
0answers
166 views
pam_usb alternative in Ubuntu 20.04?
I'd really like to have something similar to pam_usb (which has been unmaintained for over a year, https://github.com/aluzzardi/pam_usb), in that I'd like to be able to log in and authenticate apps ...
0
votes
1answer
307 views
Encrypt each user's home folder individually with ZFS
Scenario is that I have a pile of computers (with Ubuntu 20.04), each of which can have multiple users. Each user's account has to be encrypted individually.
As ecryptfs is no longer recommended, I ...
0
votes
0answers
1k views
Ubuntu Fingerprint option not showing up in User settings
Laptop: Asus ZenBook S UX391UA,
OS: Ubuntu 20.04.1 LTS
I have altered the pam-auth config using the 'sudo pam-auth-update' to include fingerprint authentication.
pam-auth-update screenshot
I have ...
0
votes
0answers
25 views
pam_pwquality doesn't check for dictionaty combination
I am messing around with some PAM modules on my test server. I finally got pam_pwquality working and wonder why it doesn't check for dictionary combinations. Unfortunately I also couldn't find much on ...
0
votes
1answer
100 views
Why does this users does not need PAM two factor Authentication for logging in?
I inherited a system from a departed colleague. He setup two factor authentication on the system, except for user root and ftpupload.
However, there is this particular user who has SSH access but does ...
0
votes
0answers
272 views
Allow Switching User Without Password & Without sudo If User Belongs To A Group
On an Ubunutu system with users foo, tom, jack and peter, where
foo, tom and jack belong to the group foo
peter does not belong to the group foo
How can we configure the system such that both tom ...
-4
votes
1answer
902 views
IP gets blocked for a few minutes after some failed SSH login attempts
After a few incorrect login attempts (using password), my IP gets blocked and I am unable to SSH into the Ubuntu server for a few minutes.
I don't want that to happen (at least for my IP). In fact, I ...
0
votes
0answers
37 views
Multi-factor Voice Authentication
Was wondering if one could set up Multi-factor Voice Authentication along with traditional OTP based 2FA for logging in to their GNU/Linux, and superuser escalations. There are some posts from about a ...
0
votes
0answers
144 views
Lubuntu 20.04 2FA: can't login through GUI
I set up 2FA on my local desktop running Lubuntu 20.04 using google-authenticator as per this tutorial, set it up properly and also added auth required pam_google_authenticator.so at the end of my /...
2
votes
0answers
391 views
Password complexity policy
System: Ubuntu 18.04
I've set up ubuntu with freeradius and am using the built in user authentication to authenticate logins.
I'm now trying to set up a simple way for the users to change their ...
1
vote
1answer
401 views
Sudo Broken - critical error PAM
I just got a Yubikey and tried to set it up to use it to login to my computer.
I followed the instructions by hackerb9 in this post.
Passwordless login with Yubikey 5 NFC
It worked perfectly, but I ...
0
votes
0answers
514 views
Restricting login with pam_access.so
I've recently moved from RHEL to Ubuntu and am having an issue getting access.conf to work. On RHEL I would add "account required pam_access.so" to the system_auth and password_auth pam.d ...
1
vote
0answers
31 views
Ask for google authenticator before password
I recently configured my server to use the google authenticator pam alongside user passwords.
In order to protect users that reuse passwords is it possible to ask for the users TOTP before asking the ...
1
vote
0answers
200 views
Understanding /var/log/auth.log - Confusion about “pam_unix” and “polkit”
I am having an hard time understanding some lines inside my auth.log file from Ubuntu. Can you help me breaking down the pieces of this one?
pkexec: pam_unix(polkit-1:session): session opened for ...
9
votes
2answers
844 views
Change the delay that occurs after entering an incorrect password in the gdm3 login-screen?
I am very impatient, when I unfortunately mistype my login-password on my laptop (Ubuntu 20.04), I don't want to wait three seconds to retry. (A delay of 0.3 seconds would be enough to prevent ...
1
vote
0answers
257 views
Strange behavior with pam_mount
i have a strange behavior with pam_mount on an Ubuntu 20.04 (firsch installed). The client authenticates to an ADS (UCS server 4.4) with Kerberos. The client has joined the domain and I can login with ...
0
votes
1answer
48 views
Can pam_tally2 log into auditd?
By default, pam logs into auditd failed login attempts. My issue is that when someone tries to log in with a non-existent user, the audit message contains acct="UNKNOWN".
I would like, instead, the ...
2
votes
0answers
144 views
How to make a script execute on failed physical login?
So I have setup the PAM for my laptop in such way that if there is a failed login attempt, a bash script is executed by which webcam takes a shot and on three consecutive failed login attempts a siren ...
0
votes
1answer
78 views
Password cannot be accepted or input in non-graphical mode
I use Ctrl + Alt + F1 to switch to non-graphical mode. I only input my username called bryan and click Enter. The screen automatically shows that:
Ubuntu 16.04.6 LTS bryan-5810 tty1
bryan-5810 login:...
0
votes
1answer
37 views
Not able to Login after editing login.defs, common-auth and common-password
After editing login.defs, common-auth, and common-password I am unable to login.
The goal was to set password restrictions ...
I then used recovery mode and I restored the login.defs and common-auth ...
