Pluggable authentication modules, a flexible framework for configuring authentication, most commonly the login component of Linux systems, but used in other components and operating systems.

learn more… | top users | synonyms

1
vote
1answer
2k views

Setting User Password Policy as per their group Linux?

I wanted to set a password restriction policy , like minlen , maxage , minage etc . I know the way to do it system wide , Can we do it for a particular group of users . I mean only users under ...
4
votes
1answer
410 views

Root account locked/suspended?

I'm shipping ts7800 boards running debian 6.07. After programming, some boards do not run their cron jobs, complaining that they do not recognise the user root. This happened on 2 out of 12 devices....
0
votes
1answer
221 views

Could SSH client connect to SSHServer and create user if not exists?

My question is the next, Could I create users in server (on sshd), when ssh client connect to the server and in this moment create account in server with a spectific group and permissions for this ...
1
vote
1answer
2k views

Using OpenSSH Server without local user

Currently I've noticed when I use the OpenSSH Server with PAM and for instance RADIUS while I can get the user to authenticate successfully with PAM, I still need a local user account in /etc/passwd, ...
0
votes
1answer
235 views

Using virtual users with pam gives error

I get this error from PAM using mysql with vsftpd: PAM unable to dlopen(/lib/security/pam_mysql.so): /lib/security/pam_mysql.so: undefined symbol: make_scrambled_password From what I understand ...
0
votes
1answer
216 views

unix_chkpw run before access.conf via pam - security risk

I have RHEL 6.3 systems that have PAM's access.conf correctly configured and running. However, it seems in a less than ideal state, after analysis of a root-hack attempt, and I'm wondering if there's ...
2
votes
1answer
4k views

Linux user issues with PAM?

Had setup a user to use instead of root. Was working fine and dandy till I started playing with user settings. Now all users (apart from root) borked. Can't login (ssh) with other users, even after ...
1
vote
1answer
206 views

Running multiple vsftpd daemons with multiple PAM files

If I am running multiple vsftpd daemons on a single machine, is it possible to specify the pluggable authentication module for each one? In other words, can two vsftpd server instances run on ...
4
votes
2answers
1k views

Prevent linux user from changing their password in ssh

How can I prevent users from changing their passwords? I still want to be able to change the passwords as root if necessary but keep the user from changing their password.
0
votes
1answer
1k views

Mac OS X: Make home directory at login via SSH

I have LDAP server on Ubuntu 12.04 and Mac OS X 10.7.5 client configured via Directory Service. The NFSHomeDirectory property mapped to #/Users/$uid$. LDAP users can login to Mac via login screen or ...
2
votes
1answer
2k views

How do I build openvpn without libpam?

Since I have no root privilege to install libpam, I failed to run ./configure. So is there any method with which I can build openvpn without libpam? checking for OPENSSL_CRYPTO... yes checking for ...
1
vote
0answers
176 views

Without pam (Pluggable Authentication Modules) how linux system will behave?

Suppose if we create nologin file under /etc then only root can login, but if we comment on all pam_nologin.so line in every file under /etc/pam.d/ then other user also login. That means these /etc/...
3
votes
0answers
747 views

Alternative (pref. mature) Linux PAM authentication methods?

I'm looking for alternative, non-keyboard-password authentication methods to unlock my laptop. Whatever authentication it is, it should be quick and convenient to perform and relatively secure. Yes, ...
0
votes
0answers
912 views

ssh login with mail address

I have an Ldap Server configured an running and another server listen to this users database. (Ldap client) I need to force users login on ssh with user as email (dc: mail=myself@anymail.com) ...
1
vote
2answers
512 views

How can I avoid hard-coding YubiKey user identities into the PAM stack?

The Yubico PAM Module seems to require changes to the PAM stack for each user that will be authenticated with a YubiKey. Specifically, it seems that each user's client identity must be added to the ...
0
votes
0answers
57 views

Switching user in openssh using PAM

I'm trying to write a PAModule which will use compare the inserted username against a file. If the username exists in the file, it will change the username to root (since the username does not really ...
4
votes
3answers
5k views

How do I permanently delete /var/log/lastlog?

My /var/log/lastlog file is huge. I know it's really only a few kilobytes, but tar isn't smart enough to know that, so when I image a virtual machine, my restore fails because it thinks I'm trying to ...
2
votes
1answer
1k views

Use user-installed shell? [duplicate]

How do I change my shell to one installed in my home directory? I installed a new zsh in my home directory, which is picked up: >> which zsh >> /home/myname/bin/zsh It's not listed in /...
5
votes
3answers
9k views

Why won't vsftpd let me log in with a virtual user account?

I would like to use vsftpd with virtual users and pam_pwdfile.so. I installed vsftpd and added two users (ramon and dragon) via htpasswd to my file /etc/vsftpd.passwd. The /etc/pam.d/vsftpd is ...
3
votes
1answer
817 views

limits.conf ulimits not being applied to chrooted processes

We allow users to execute scripts on our servers. Our security model involves chrooting them. We want to be able to apply ulimit restrictions to them, and the best way to do it would seem to be in /...
3
votes
1answer
6k views

How can i block su access to some users only in linux

I want to configure pam in a way so that my some users can su to only some user. In RHEL4, I used /etc/pam.d/su auth required /lib/security/$ISA/pam_stack.so service=system-auth auth ...
0
votes
2answers
1k views

authenticating linux client with active directory

I am attempting to setup a linux client to authenticate with active directory. I tried following this article, but have had no luck authenticating: https://wiki.archlinux.org/index.php/...
1
vote
0answers
182 views

Single sign on with remote SSH server

Is it possible to authorize user based on provided login and password by connecting to remote SSH server? If connection is successfully established and login-password pair is logged on the remote end,...
0
votes
1answer
1k views

Using pam_exec.so for openvpn authentication

I've set up a PAM authentication config for OpenVPN. auth required pam_exec.so debug expose_authtok /opt/openvpn/bin/pamauth The script pamauth returns 0 on success. I verify this is true by also ...
1
vote
2answers
3k views

pam mount - my password prompt now says pam_mount password:

I am using pam_mount to mount users' home directory upon successfully logging into the system. It works; however, the password prompt says: pam_mount password: Instead of just: password: How can ...
3
votes
2answers
11k views

/etc/security/limits.conf for setting program limits in Linux

I have the following inside /etc/security/limits.conf (I have specified root separately because * will not include it.) user2 - core unlimited * - core 0 root ...
2
votes
2answers
1k views

Linux (Ubuntu) USB Auth

I want to be able to authenticate with PAM using a USB drive with a file on it. I've read about how to do this with a PAM module that reads the specific USB hardware ID of a device, but if the device ...
1
vote
2answers
2k views

GPG smartcards handling 4096-bit keys

are there smartcards that handle 4096-bit keys supported both by GPG and Enigmail (PAM would be additional benefit)? Preferably on USB.
2
votes
2answers
1k views

how to allow a certain group of useres to only login via LDAP while others can use LDAP or local login?

I managed to set up my system to use either LDAP or the local password (by adding "password sufficient pam_ldap.so" to PAM and calling "pam_unix2.so" afterwards). However I would like to restrict a ...
0
votes
1answer
905 views

Tweaking linux console: 1) display password 2) set background color

I want to alter background color since very first lines of kernel output, remember that there was an ability to change colors with echo'ing some special character, but waiting for /etc/init.d/* is too ...