Questions tagged [pam]
Pluggable authentication modules (PAM)
35
questions
10
votes
2
answers
2k
views
Use one password for administration and another for system login
How can I give a user one password for normal usage when logging in, and another password for system administration and sudo access? I want one user to have two passwords.
16
votes
2
answers
43k
views
How do I enforce a password complexity policy?
I need to configure an Ubuntu server to follow a strict company password policy that specifies the following:
at least one upper case
at least one lower case
at least one digit
at least one special ...
20
votes
3
answers
47k
views
How do you set requirements (such as minimum length) on passwords?
Is there any way to set up minimum passcode requirements, such as a minimum length, requirement of mixed case alphanumerics and at least 1 symbol in the passcode, and enforce that at passcode changes?
12
votes
1
answer
24k
views
Permanently raising nofile limits in Ubuntu 14.04 LTS
I cannot seem to figure out what exactly is needed to allow the maximum number of file descriptors to be raised permanently for all users.
/etc/security/limits.conf:
root hard nofile ...
12
votes
9
answers
35k
views
Desktop login fails, terminal works
I have a freshly setup 12.04 LTS pc system (120 GB SSD, 1 TB HDD, 16 GiB RAM); since a few days, I can't login to the graphical desktop anymore: there is very short flashing shell window which ...
3
votes
2
answers
5k
views
Pam_mount won't automount encrypted partiton
As usual, when I install a new version of Ubuntu I install pam_mount to automount my with LUKS encrypted partition on login. However, for Ubuntu 11.10, I followed the same procedure as usual, but I ...
14
votes
3
answers
6k
views
How can I lower the delay after incorrectly entered login and sudo passwords?
I am horribly impatient and can't stand the (for me subjectively long) delay of around 2 seconds after entering an incorrect password in the login screen or also as sudo password, before I can retry ...
11
votes
1
answer
16k
views
how to setup two factor authentication in Ubuntu for Ubuntu users using Google authenticator?
How to setup two factor authentication in Ubuntu for Ubuntu users using Google authenticator (It can also be setup for non Google accounts)?
5
votes
6
answers
40k
views
Type password into login screen, hit enter - nothing happens
I first install Ubuntu 13.10 a few weeks ago and its been going great. I'm still pretty new to Linux, so I haven't been doing a whole lot. The past couple days I've tried installing LAMP, then ...
1
vote
1
answer
1k
views
pam / ad issue with cron
Jobs in /etc/crontab which belong to non-local users now fail. That is a bit of a problem for us:
May 26 13:05:01 machineXYZ CRON[26927]: pam_sss(cron:account): \
Access denied for ...
1
vote
1
answer
2k
views
Umask for the SFTP users
My company has a syntax in /etc/pam.d/sshd file on our SFTP server:
session optional pam_umask.so umask=444
I found this command changes the permission of the uploaded file from 644 to 222 for all ...
0
votes
3
answers
24k
views
How do I enable account lockout using pam_tally?
I am trying to implement account lockout in ubuntu using pam_tally. I have tried adding the follwing lines in /etc/pam.d/common-auth
auth required pam_tally.so deny=3
account required ...
55
votes
3
answers
6k
views
How can I use a passcode generator for authentication for remote logins?
I would like to strengthen the authentication of my SSH logins by adding another factor: a passcode generator device, or a passcode generation application on my mobile phone. The only obvious options ...
11
votes
3
answers
9k
views
Disable PAM module for group
I recently enabled two-factor-authentication using google-authenticator on my SSH server. However I am now facing a problem:
I have a different group of users on my server which I am using for SFTP, ...
10
votes
2
answers
2k
views
Change the delay that occurs after entering an incorrect password in the gdm3 login-screen?
I am very impatient, when I unfortunately mistype my login-password on my laptop (Ubuntu 20.04), I don't want to wait three seconds to retry. (A delay of 0.3 seconds would be enough to prevent ...
6
votes
3
answers
18k
views
How do I change options in PAM configuration?
I have an issue that research indicates can be corrected by changing an option in a PAM configuration by running pam-auth-update. I've done that, but cannot for the life of me figure out how to change ...
6
votes
2
answers
4k
views
Difference between /etc/security/pam_env.conf and /etc/environment + making sudo read pam_env.conf
I struggle to see the difference between pam_env.conf and /etc/environment. To me they both do the same thing, with a difference syntax. The manpages were no help. So what is the difference?
...
6
votes
1
answer
15k
views
How to configure a U2F key(such as a YubiKey) for system wide 2-Factor Authentication?
The official Yubico guide only covers enabling it for GDM login, how can I enable it for all logins including TTY, ssh, sudo, etc?
6
votes
1
answer
4k
views
Enable ecryptfs for all new users, even those authenticating through kerberos and ldap
How do I make sure that all users have their home directory encrypted when the login for the first time?
I have setup pam to use Kerberos authentication and LDAP authorization (which I think should ...
5
votes
3
answers
13k
views
google authenticator for certain users
After enabling Google authenticator (2 step authentication) on one of my testing servers running ubuntu 16.04 (LTS), I noticed I couldn't login anymore with a user who doesn't have a google ...
5
votes
1
answer
7k
views
Slow boot on Ubuntu 16.04 ... issue with pam_kwallet5.so
I'm trying to find the cause of my slow boot time and so I checked the log file and found this from the time of restart:
Feb 4 00:54:17 blackbird3460 lightdm: PAM unable to dlopen(pam_kwallet.so): /...
5
votes
3
answers
33k
views
Where are passwords stored?
How do you figure out where are user's passwords stored, for users that can login? I know the system is using LDAP for users (username, home path, etc.), but it doesn't contain any kind of passwords. ...
5
votes
4
answers
15k
views
14.04 Not authenticating on chsh command
I am trying to change my default shell to zsh. I have the entry placed correctly in /etc/shells file.
Each attempt I have made with this command has ended with the same error message:
chsh -s $(...
4
votes
1
answer
5k
views
I cannot login into any TTYs
My system is Ubuntu 11.10 (installed from 0, without upgrades/updates). When I enter into any tty (1, 2, 3..) it ask me my login name and password but I can not move forward.
When I enter an user ...
3
votes
0
answers
4k
views
pam_open_session: Module is unknown
I am using Ubuntu 20.10 in WSL, and there are problems with changing the ulimit -n. I tried several methods and one of them needed to add session required pam_limits.so line to the /etc/pam.d/common-...
3
votes
0
answers
2k
views
Ubuntu 16.04 Unable to locate package pamusb-tools
Im trying to install PAM so I can unlock my computer with my usb drive but when I try to install pamusb-tools and libpam-usb, it can't find those pakages. Is there a repository I need to add?
2
votes
1
answer
8k
views
enable pam module as default
I want to enable some pam modules automatically in a script. mkhomedir is disabled as default. If you start pam-auth-update, there is no check mark in
Create home directory on login
How can I ...
2
votes
1
answer
2k
views
Slow login when CIFS mounts are unavailable
I installed a PC with Ubuntu 14.04, Sssd and accounts in our OpenLDAP directory.
Network shares residing on our Samba server are mounted automatically when a user logs in, through pam_mount ...
1
vote
2
answers
557
views
Confirm system dialogs solely by U2F device
I have enabled U2F device authentication for PAM on my Ubuntu 20.04. I have used this approach https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F and put
...
1
vote
0
answers
1k
views
winbind and passwd issues
I successfully configured a Ubuntu 15.10 Workstation to authenticate against Active Directory. The only thing left so far is the ability to change the Active Directory password. When I enter the ...
1
vote
2
answers
4k
views
pam / ad issues with server-based application
Following the 16.04 upgrade we had some pam / ad issues which were solved based on community answers (ie lockscreen, authentication).
We now have a new and critical one. We run a lot of RStudio ...
0
votes
2
answers
15k
views
Having "PAM adding faulty module: pam_winbind.so", "… pam_kwallet5.so", "… pam_kwallet.so" on start of smbd, ssh, cron daemons - why and how to fix?
I'm using Ubuntu 16.04.5 LTS.
I tried to read my log files for errors.
The most interesting are the following:
cat /var/log/auth.log | egrep "unable|faulty"
Nov 25 13:25:13 localhost su[4491]: PAM ...
0
votes
1
answer
5k
views
Cannot login to SDDM but to tty
Summary
On my kubuntu 16.04 I cannot login any more on the graphical login screen (produced by standard display manager SDDM). But when I switch to a tty I can login and start the graphical desktop ...
0
votes
1
answer
2k
views
pam / ad issue with lightdm
im having issues logging in the desktop via AD with my current setup with sssd, kerberos, samba, and AD. heres the output of the auth.log file. it seems that pam and lightdm aren't working well with ...
0
votes
0
answers
2k
views
Samba AD DC no longer accepts login using domain accounts
I've been trying to setup Samba AD DC on Ubuntu 20.04 for a good while now and with some success. I use the server which runs this Samba instance as my primary workstation, so I need to be able to log ...