Questions tagged [pam]

Pluggable authentication modules (PAM)

Filter by
Sorted by
Tagged with
10 votes
2 answers
2k views

Use one password for administration and another for system login

How can I give a user one password for normal usage when logging in, and another password for system administration and sudo access? I want one user to have two passwords.
Varun Sridharan's user avatar
16 votes
2 answers
43k views

How do I enforce a password complexity policy?

I need to configure an Ubuntu server to follow a strict company password policy that specifies the following: at least one upper case at least one lower case at least one digit at least one special ...
Stephen RC's user avatar
  • 4,802
20 votes
3 answers
47k views

How do you set requirements (such as minimum length) on passwords?

Is there any way to set up minimum passcode requirements, such as a minimum length, requirement of mixed case alphanumerics and at least 1 symbol in the passcode, and enforce that at passcode changes?
Thomas Ward's user avatar
  • 74.4k
12 votes
1 answer
24k views

Permanently raising nofile limits in Ubuntu 14.04 LTS

I cannot seem to figure out what exactly is needed to allow the maximum number of file descriptors to be raised permanently for all users. /etc/security/limits.conf: root hard nofile ...
w3rthl3ss's user avatar
  • 225
12 votes
9 answers
35k views

Desktop login fails, terminal works

I have a freshly setup 12.04 LTS pc system (120 GB SSD, 1 TB HDD, 16 GiB RAM); since a few days, I can't login to the graphical desktop anymore: there is very short flashing shell window which ...
Tobias's user avatar
  • 251
3 votes
2 answers
5k views

Pam_mount won't automount encrypted partiton

As usual, when I install a new version of Ubuntu I install pam_mount to automount my with LUKS encrypted partition on login. However, for Ubuntu 11.10, I followed the same procedure as usual, but I ...
n3rd's user avatar
  • 480
14 votes
3 answers
6k views

How can I lower the delay after incorrectly entered login and sudo passwords?

I am horribly impatient and can't stand the (for me subjectively long) delay of around 2 seconds after entering an incorrect password in the login screen or also as sudo password, before I can retry ...
Byte Commander's user avatar
  • 107k
11 votes
1 answer
16k views

how to setup two factor authentication in Ubuntu for Ubuntu users using Google authenticator?

How to setup two factor authentication in Ubuntu for Ubuntu users using Google authenticator (It can also be setup for non Google accounts)?
Hrish's user avatar
  • 2,343
5 votes
6 answers
40k views

Type password into login screen, hit enter - nothing happens

I first install Ubuntu 13.10 a few weeks ago and its been going great. I'm still pretty new to Linux, so I haven't been doing a whole lot. The past couple days I've tried installing LAMP, then ...
Arindrew's user avatar
  • 121
1 vote
1 answer
1k views

pam / ad issue with cron

Jobs in /etc/crontab which belong to non-local users now fail. That is a bit of a problem for us: May 26 13:05:01 machineXYZ CRON[26927]: pam_sss(cron:account): \ Access denied for ...
Dirk Eddelbuettel's user avatar
1 vote
1 answer
2k views

Umask for the SFTP users

My company has a syntax in /etc/pam.d/sshd file on our SFTP server: session optional pam_umask.so umask=444 I found this command changes the permission of the uploaded file from 644 to 222 for all ...
ITnewbie's user avatar
  • 137
0 votes
3 answers
24k views

How do I enable account lockout using pam_tally?

I am trying to implement account lockout in ubuntu using pam_tally. I have tried adding the follwing lines in /etc/pam.d/common-auth auth required pam_tally.so deny=3 account required ...
nitin's user avatar
  • 101
55 votes
3 answers
6k views

How can I use a passcode generator for authentication for remote logins?

I would like to strengthen the authentication of my SSH logins by adding another factor: a passcode generator device, or a passcode generation application on my mobile phone. The only obvious options ...
Jorge Castro's user avatar
  • 71.7k
11 votes
3 answers
9k views

Disable PAM module for group

I recently enabled two-factor-authentication using google-authenticator on my SSH server. However I am now facing a problem: I have a different group of users on my server which I am using for SFTP, ...
Z3r0byte's user avatar
  • 233
10 votes
2 answers
2k views

Change the delay that occurs after entering an incorrect password in the gdm3 login-screen?

I am very impatient, when I unfortunately mistype my login-password on my laptop (Ubuntu 20.04), I don't want to wait three seconds to retry. (A delay of 0.3 seconds would be enough to prevent ...
rubo77's user avatar
  • 32.4k
6 votes
3 answers
18k views

How do I change options in PAM configuration?

I have an issue that research indicates can be corrected by changing an option in a PAM configuration by running pam-auth-update. I've done that, but cannot for the life of me figure out how to change ...
EmmyS's user avatar
  • 15.9k
6 votes
2 answers
4k views

Difference between /etc/security/pam_env.conf and /etc/environment + making sudo read pam_env.conf

I struggle to see the difference between pam_env.conf and /etc/environment. To me they both do the same thing, with a difference syntax. The manpages were no help. So what is the difference? ...
Norswap's user avatar
  • 232
6 votes
1 answer
15k views

How to configure a U2F key(such as a YubiKey) for system wide 2-Factor Authentication?

The official Yubico guide only covers enabling it for GDM login, how can I enable it for all logins including TTY, ssh, sudo, etc?
Hamish W's user avatar
  • 303
6 votes
1 answer
4k views

Enable ecryptfs for all new users, even those authenticating through kerberos and ldap

How do I make sure that all users have their home directory encrypted when the login for the first time? I have setup pam to use Kerberos authentication and LDAP authorization (which I think should ...
d_inevitable's user avatar
  • 1,902
5 votes
3 answers
13k views

google authenticator for certain users

After enabling Google authenticator (2 step authentication) on one of my testing servers running ubuntu 16.04 (LTS), I noticed I couldn't login anymore with a user who doesn't have a google ...
user1116942's user avatar
5 votes
1 answer
7k views

Slow boot on Ubuntu 16.04 ... issue with pam_kwallet5.so

I'm trying to find the cause of my slow boot time and so I checked the log file and found this from the time of restart: Feb 4 00:54:17 blackbird3460 lightdm: PAM unable to dlopen(pam_kwallet.so): /...
Stonecipher's user avatar
5 votes
3 answers
33k views

Where are passwords stored?

How do you figure out where are user's passwords stored, for users that can login? I know the system is using LDAP for users (username, home path, etc.), but it doesn't contain any kind of passwords. ...
redman's user avatar
  • 223
5 votes
4 answers
15k views

14.04 Not authenticating on chsh command

I am trying to change my default shell to zsh. I have the entry placed correctly in /etc/shells file. Each attempt I have made with this command has ended with the same error message: chsh -s $(...
RCF's user avatar
  • 2,097
4 votes
1 answer
5k views

I cannot login into any TTYs

My system is Ubuntu 11.10 (installed from 0, without upgrades/updates). When I enter into any tty (1, 2, 3..) it ask me my login name and password but I can not move forward. When I enter an user ...
Lucio's user avatar
  • 18.8k
3 votes
0 answers
4k views

pam_open_session: Module is unknown

I am using Ubuntu 20.10 in WSL, and there are problems with changing the ulimit -n. I tried several methods and one of them needed to add session required pam_limits.so line to the /etc/pam.d/common-...
nosheyakku's user avatar
3 votes
0 answers
2k views

Ubuntu 16.04 Unable to locate package pamusb-tools

Im trying to install PAM so I can unlock my computer with my usb drive but when I try to install pamusb-tools and libpam-usb, it can't find those pakages. Is there a repository I need to add?
user avatar
2 votes
1 answer
8k views

enable pam module as default

I want to enable some pam modules automatically in a script. mkhomedir is disabled as default. If you start pam-auth-update, there is no check mark in Create home directory on login How can I ...
Alexander's user avatar
2 votes
1 answer
2k views

Slow login when CIFS mounts are unavailable

I installed a PC with Ubuntu 14.04, Sssd and accounts in our OpenLDAP directory. Network shares residing on our Samba server are mounted automatically when a user logs in, through pam_mount ...
it_man's user avatar
  • 41
1 vote
2 answers
557 views

Confirm system dialogs solely by U2F device

I have enabled U2F device authentication for PAM on my Ubuntu 20.04. I have used this approach https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F and put ...
Jaroslav Kuboš's user avatar
1 vote
0 answers
1k views

winbind and passwd issues

I successfully configured a Ubuntu 15.10 Workstation to authenticate against Active Directory. The only thing left so far is the ability to change the Active Directory password. When I enter the ...
MSJ's user avatar
  • 11
1 vote
2 answers
4k views

pam / ad issues with server-based application

Following the 16.04 upgrade we had some pam / ad issues which were solved based on community answers (ie lockscreen, authentication). We now have a new and critical one. We run a lot of RStudio ...
Dirk Eddelbuettel's user avatar
0 votes
2 answers
15k views

Having "PAM adding faulty module: pam_winbind.so", "… pam_kwallet5.so", "… pam_kwallet.so" on start of smbd, ssh, cron daemons - why and how to fix?

I'm using Ubuntu 16.04.5 LTS. I tried to read my log files for errors. The most interesting are the following: cat /var/log/auth.log | egrep "unable|faulty" Nov 25 13:25:13 localhost su[4491]: PAM ...
N0rbert's user avatar
  • 99.8k
0 votes
1 answer
5k views

Cannot login to SDDM but to tty

Summary On my kubuntu 16.04 I cannot login any more on the graphical login screen (produced by standard display manager SDDM). But when I switch to a tty I can login and start the graphical desktop ...
bjhend's user avatar
  • 101
0 votes
1 answer
2k views

pam / ad issue with lightdm

im having issues logging in the desktop via AD with my current setup with sssd, kerberos, samba, and AD. heres the output of the auth.log file. it seems that pam and lightdm aren't working well with ...
Matthew Morcaldi's user avatar
0 votes
0 answers
2k views

Samba AD DC no longer accepts login using domain accounts

I've been trying to setup Samba AD DC on Ubuntu 20.04 for a good while now and with some success. I use the server which runs this Samba instance as my primary workstation, so I need to be able to log ...
Chris's user avatar
  • 49