The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
6 views

PAM modules and sshd passwords

I've been struggling for a while now getting sshd authentication to work with a PAM module (eg pam_pwdfile) on my Debian Wheezy system. That shouldn't be too hard, but it seems sshd (or pam) is ...
0
votes
1answer
31 views

Authentication working with partial password

I have a 13 character long password and my system is allowing me to authenticate with only 8, why? I have no clue at all, so please give me some guide on what to add to my question, for instance ...
0
votes
1answer
24 views

Crontab command cannot be executed. Error PAM configurations

Here's the command that I would like to execute but it seems not to work. [mdubois@veloce ~]$ crontab -l Autorisation refusée You (mdubois) are not allowed to access to (crontab) because of pam ...
2
votes
0answers
46 views

ConsoleKit reports active/is-local only on the second+ login

Running KDE Frameworks 5, Plasma 5, using sddm as a display manager. ConsoleKit and PAM-linux are both installed. Upon login (using the sddm login screen), ck-list-sessions returns FALSE for both ...
0
votes
0answers
13 views

keyboard-interactive:pam asking for password not code

sshd_config UsePAM yes ChallengeResponseAuthentication yes AuthenticationMethods publickey keyboard-interactive:pam pam.d/sshd #auth required pam_securetty.so #disable remote root auth ...
0
votes
0answers
16 views

What options can be passed to pam_mysql.so in /etc/pam.d/ config files?

There's no manpage for libpam (on Ubuntu 14.10) and man pam refers to something unrelated to PAM. Search engine results only refer to example configuration files, bugs (about escaping) and postfix ...
0
votes
0answers
102 views

Permission denied one correct login even as root after changes to /etc/pam.d/system-auth

I changed my system-auth file in etc/pam.d to the following. #%PAM-1.0 auth required pam_env.so auth required pam_lastlog.so inactive=35 auth required ...
0
votes
1answer
94 views

pam_exec.so doesn't write password to script when expose_authtok is enabled

We are using PAM for authenticating with external radius server. We have the following line in /etc/pam.d/common-auth auth [success=6 default=ignore] pam_exec.so expose_authtok ...
0
votes
0answers
38 views

sudo-ldap using LDAPv3 for Mac OSX - Possible?

I have been able to setup Mac OSX to authenticate via LDAPv3 and KRB5 to a Fedora FreeIPA server. Took some work - but got it to work. My question now is if it is possible to configure the sudo ...
0
votes
0answers
29 views

Issues with SELinux and PAM logging in

I had a recent issue where users weren't able to log in our Linux server. In the logs I found: login: FAILED LOGIN 1 FROM tty1 FOR REDACTED, Authentication failure login: pam_succeed_if(login:auth): ...
0
votes
0answers
25 views

How PAM module reads /etc/shadow

I am developing a PAM module, which is much similar to pam_unix.so, the default authentication module. I also have a small test app that uses this module for authentication purposes. My module first ...
0
votes
0answers
21 views

PAM authentication problems with su - $username

When I try to su - postgres as the root user, I immediately get su: Authentication failure This is my pam.d/su file # Begin /etc/pam.d/su # always allow root auth sufficient pam_rootok.so ...
0
votes
0answers
22 views

time.conf - datetime range details

I'm writing a time.conf GUI editor for my personal use and I need to understand how does the datetime range work, so I would be grateful if someone could explain to me: What does MoWk mean? Such ...
0
votes
0answers
1k views

Samba, winbind and AD authentication: username is invalid on this system

I am trying to set up a file server with Active Directory authentication using Samba and Winbind. Domain controller is Windows 2000 SP4 (don't judge). File server is Debian 7.7 (latest stable). This ...
1
vote
0answers
200 views

Samba sync password with Unix

I'm trying to set up Samba to sync passwords with Unix (i.e. when someone changes their password via passwd their Samba password is also changed). I've tried following the "Password Synchronization ...
0
votes
1answer
300 views

unable to lock a non-root RHEL account using pam_tally2.so PAM module

I have RHEL 5.5 and making the below change in /etc/pam.d/system-auth file: auth required pam_env.so auth required pam_tally2.so deny=3 onerr=fail auth ...
1
vote
0answers
55 views

Ulimit is set on second login, not first

I'm using Debian Jessie and I have a strange error connected with setting the limit of open files per process. I want to increase the default limit for certain user (me), so I added to ...
1
vote
1answer
170 views

Where does Debian take the default umask from?

With a fresh ssh login: $ umask 0007 But: $ find . -maxdepth 1 -name '.*' -type f | xargs grep 007 | less $ # grep 007 /etc/profile # # grep -i umask /etc/login.defs # UMASK ...
1
vote
0answers
82 views

Is it possible to define a custom basepath for proftpd home directories?

I know the DefaultRoot ~ setting that you can use to jail users into their home directories but I need to customize this. When authenticating with proftpd I get the user's home-directory from ldap ...
1
vote
0answers
542 views

Can't perform Kerberos login

I can't do a Kerberos login. I've tweaked rsyslog to record *.debug to /var/log/debug, whose output is below. If I attempt to log in with ssh, I get: Jun 6 23:13:05 foo-machine sshd[13965]: ...
0
votes
1answer
91 views

Change order of two-factor-authentication

I am testing two-factor-authentication for ssh logins on some CentOS containers in our testing environment. I compiled my own rpms from github's source, installed and configured everything and have ...
0
votes
0answers
42 views

ec2 enable su for user ubuntu

I am trying to enable rstudio-server login with ubuntu on ec2, but it fails. I think it uses the same auth mechanism as su. So I did sudo passwd su someotheruser su ubuntu But even though I know ...
0
votes
1answer
103 views

Deploy PAM system-auth file from Configuration Server (Spacewalk)

I have my pam.d system-auth file set up correctly on a laptop to set password complexity requirements. If the contents of the file are copied directly into the /etc/pam.d/system-auth location (or the ...
2
votes
0answers
45 views

using pam_mount in WLAN setting

I thought this should be a simple exercise here, but obviously I couldn't find a solution, yet. I use KDE on Ubuntu 12 LTS. I want to use libpam-mount to mount a nfs share to a directory within user's ...
0
votes
1answer
345 views

pam_tally2 does not show address of the failing user

See this output below: # pam_tally2 -u Login Failures Latest failure From root 1 04/16/14 16:44:16 10.4.1.189 greg 2 04/16/14 16:35:57 unknown ...
0
votes
1answer
189 views

Why shadow password hashed with sha512 contains 99 instead of 129 characters?

My Linux is configured to use sha512. Yet, the /etc/shadow file contains hashed password with 99 characters only. Why 99 and not 129 (64*2+1)? Note that I had changed password after making sure the ...
1
vote
0answers
42 views

Does sequence matter in case of pam_env.so and pam_tally2.so together?

Very short question. auth required pam_env.so auth required pam_tally2.so deny=3 even_deny_root unlock_time=120 or auth required pam_tally2.so deny=3 ...
2
votes
1answer
796 views

Debian disable su to root user

I am currently using Debian 7 (Wheezy) and I am trying to disable the su command only when the target user is root and not a privileged user. For example, let's suppose the following users exist: ...
2
votes
1answer
2k views

Is there a way to force all Linux users to change their passwords on first login?

I am looking for a way to configure Linux machine so any time a new user is created, he/she will have to set a new password on first login. To clarify the task here are assumptions: I am not ...
1
vote
0answers
295 views

xrdp with two factor authentication (libpam-google-authenticator)

I'm trying to setup a Debian VM that uses two factor authentication for logins via google-authenticator's PAM plugin. The google-authenticator part is working great through regular console logins or ...
4
votes
1answer
1k views

PAM Authentication / Login

I'm having a little issue on Ubuntu where any commands that require root privileges takes longer to execute than normal. I managed to identify the culprit to the cause after checking my ...
0
votes
1answer
550 views

Can't login with KDM and SSSD but the login works fine from the console

I have LDAP authentication set up with SSSD and I can login fine through console and ssh. However when I try to login through KDM it just says authentication failure... More specifically: Jan 9 ...
2
votes
0answers
1k views

How to trace LDAP authentication failures?

1) I have a working LDAP server which I've confirmed can be used with LDAP clients, running on ec2 via jumpbox. 2) I've run authconfig to setup ldap based authentication, to point to the server: ...
1
vote
1answer
88 views

Authentication Failure Upon Successful Login

I was reveiwing the logs when I was successful in logging into a workstation - however in the in the var/log/secure log it is logged as > gnome-screensaver-dialog:pam_unix(gnome-screensaver:auth): ...
2
votes
1answer
419 views

How can I set path for non-interactive user authenticated using LDAP?

On a Mac running OSX 10.7.5, I need to set the PATH for non-interactive users who connect via ssh and are authenticated using LDAP. It's the same question that was asked (and answered) here: ...
0
votes
2answers
962 views

lsuser substitute in Linux?

Is there a way I can get information on the password for a particular user like what is the minimum length and minalpha and etc.? In AIX we have a command called lsuser: lsuser -a minlen username ...
1
vote
1answer
616 views

Restricting access with PAM - sufficient vs. required

I'm trying to restrict SSH access to certain groups, plus the users specified in a file. The groups are listed in /etc/ssh/user.allow, and the groups in /etc/ssh/group.allow. I've tried using the ...
0
votes
1answer
353 views

How to have a user who can 'su' to another user but not allowed to 'su' root

In my server, I have 2 groups: ssh-users and su-users ssh-users hold users I ssh to the box with. User sshu is a member of ssh-users. Once logged in to the server, I want ssh-users members to be able ...
1
vote
0answers
766 views

CIFS share via LDAP + SSL

I have NAS drive which is bound to an Open Directory LDAP server for authentication with SSL enabled. The NAS allows for CIFS shares to be accessed via LDAP authentication. (in this case the NAS is a ...
1
vote
4answers
7k views

How do I disable or modify pam's password requirements?

I'm using Fedora 19. By default it's setup with pam to disable bad passwords, like "password". This is good. Trying to change this default is infuriating. This is a box for testing internal stuff, not ...
2
votes
3answers
702 views

How can I determine if a client SSH connection has a tty associated with it?

Im writing a PAM module to handle authentication (server side - sshd) and I have to know if an ssh client is a tty (interactive) or not (non interactive). Does anyone have a clue?
1
vote
0answers
284 views

Is there a size limit for pam modules run by vsftpd?

I'm writing a pam module to let users authenticate against a PostreSQL database linked to a Django site. It works fine when I let sshd use it, but whenever I try it with vsftpd I get the following ...
1
vote
1answer
2k views

Setting User Password Policy as per their group Linux?

I wanted to set a password restriction policy , like minlen , maxage , minage etc . I know the way to do it system wide , Can we do it for a particular group of users . I mean only users under ...
4
votes
1answer
322 views

Root account locked/suspended?

I'm shipping ts7800 boards running debian 6.07. After programming, some boards do not run their cron jobs, complaining that they do not recognise the user root. This happened on 2 out of 12 ...
0
votes
1answer
146 views

Could SSH client connect to SSHServer and create user if not exists?

My question is the next, Could I create users in server (on sshd), when ssh client connect to the server and in this moment create account in server with a spectific group and permissions for this ...
1
vote
1answer
2k views

Using OpenSSH Server without local user

Currently I've noticed when I use the OpenSSH Server with PAM and for instance RADIUS while I can get the user to authenticate successfully with PAM, I still need a local user account in /etc/passwd, ...
0
votes
1answer
175 views

Using virtual users with pam gives error

I get this error from PAM using mysql with vsftpd: PAM unable to dlopen(/lib/security/pam_mysql.so): /lib/security/pam_mysql.so: undefined symbol: make_scrambled_password From what I understand ...
0
votes
1answer
185 views

unix_chkpw run before access.conf via pam - security risk

I have RHEL 6.3 systems that have PAM's access.conf correctly configured and running. However, it seems in a less than ideal state, after analysis of a root-hack attempt, and I'm wondering if there's ...
2
votes
1answer
3k views

Linux user issues with PAM?

Had setup a user to use instead of root. Was working fine and dandy till I started playing with user settings. Now all users (apart from root) borked. Can't login (ssh) with other users, even after ...
1
vote
1answer
164 views

Running multiple vsftpd daemons with multiple PAM files

If I am running multiple vsftpd daemons on a single machine, is it possible to specify the pluggable authentication module for each one? In other words, can two vsftpd server instances run on ...