The tag has no usage guidance.

learn more… | top users | synonyms

2
votes
3answers
864 views

How can I determine if a client SSH connection has a tty associated with it?

Im writing a PAM module to handle authentication (server side - sshd) and I have to know if an ssh client is a tty (interactive) or not (non interactive). Does anyone have a clue?
4
votes
2answers
10k views

/etc/security/limits.conf for setting program limits in Linux

I have the following inside /etc/security/limits.conf (I have specified root separately because * will not include it.) user2 - core unlimited * - core 0 root ...
1
vote
2answers
657 views

Crontab command cannot be executed. Error PAM configurations

Here's the command that I would like to execute but it seems not to work. [mdubois@veloce ~]$ crontab -l Autorisation refusée You (mdubois) are not allowed to access to (crontab) because of pam ...
1
vote
2answers
109 views

Is it possible to define a custom basepath for proftpd home directories?

I know the DefaultRoot ~ setting that you can use to jail users into their home directories but I need to customize this. When authenticating with proftpd I get the user's home-directory from ldap ...
2
votes
1answer
511 views

How can I set path for non-interactive user authenticated using LDAP?

On a Mac running OSX 10.7.5, I need to set the PATH for non-interactive users who connect via ssh and are authenticated using LDAP. It's the same question that was asked (and answered) here: ...
1
vote
1answer
149 views

Authentication Failure Upon Successful Login

I was reveiwing the logs when I was successful in logging into a workstation - however in the in the var/log/secure log it is logged as > gnome-screensaver-dialog:pam_unix(gnome-screensaver:auth): ...
1
vote
1answer
2k views

Setting User Password Policy as per their group Linux?

I wanted to set a password restriction policy , like minlen , maxage , minage etc . I know the way to do it system wide , Can we do it for a particular group of users . I mean only users under ...
0
votes
1answer
117 views

Change order of two-factor-authentication

I am testing two-factor-authentication for ssh logins on some CentOS containers in our testing environment. I compiled my own rpms from github's source, installed and configured everything and have ...
0
votes
1answer
140 views

Deploy PAM system-auth file from Configuration Server (Spacewalk)

I have my pam.d system-auth file set up correctly on a laptop to set password complexity requirements. If the contents of the file are copied directly into the /etc/pam.d/system-auth location (or the ...
0
votes
1answer
703 views

Can't login with KDM and SSSD but the login works fine from the console

I have LDAP authentication set up with SSSD and I can login fine through console and ssh. However when I try to login through KDM it just says authentication failure... More specifically: Jan 9 ...
0
votes
1answer
926 views

Mac OS X: Make home directory at login via SSH

I have LDAP server on Ubuntu 12.04 and Mac OS X 10.7.5 client configured via Directory Service. The NFSHomeDirectory property mapped to #/Users/$uid$. LDAP users can login to Mac via login screen or ...
3
votes
0answers
676 views

Alternative (pref. mature) Linux PAM authentication methods?

I'm looking for alternative, non-keyboard-password authentication methods to unlock my laptop. Whatever authentication it is, it should be quick and convenient to perform and relatively secure. Yes, ...
2
votes
0answers
128 views

ConsoleKit reports active/is-local only on the second+ login

Running KDE Frameworks 5, Plasma 5, using sddm as a display manager. ConsoleKit and PAM-linux are both installed. Upon login (using the sddm login screen), ck-list-sessions returns FALSE for both ...
2
votes
0answers
65 views

using pam_mount in WLAN setting

I thought this should be a simple exercise here, but obviously I couldn't find a solution, yet. I use KDE on Ubuntu 12 LTS. I want to use libpam-mount to mount a nfs share to a directory within user's ...
2
votes
0answers
2k views

How to trace LDAP authentication failures?

1) I have a working LDAP server which I've confirmed can be used with LDAP clients, running on ec2 via jumpbox. 2) I've run authconfig to setup ldap based authentication, to point to the server: ...
1
vote
0answers
37 views

Mount encrypted partition after login (LUKS/pam_mount)

During the installations of Fedora 23 I have chosen the option to encrypt the /home partition. As expected, I am asked now to enter the passphrase before the login appears. Now, I have to achieve that ...
1
vote
0answers
303 views

Samba sync password with Unix

I'm trying to set up Samba to sync passwords with Unix (i.e. when someone changes their password via passwd their Samba password is also changed). I've tried following the "Password Synchronization ...
1
vote
0answers
106 views

Ulimit is set on second login, not first

I'm using Debian Jessie and I have a strange error connected with setting the limit of open files per process. I want to increase the default limit for certain user (me), so I added to ...
1
vote
0answers
863 views

Can't perform Kerberos login

I can't do a Kerberos login. I've tweaked rsyslog to record *.debug to /var/log/debug, whose output is below. If I attempt to log in with ssh, I get: Jun 6 23:13:05 foo-machine sshd[13965]: ...
1
vote
0answers
49 views

Does sequence matter in case of pam_env.so and pam_tally2.so together?

Very short question. auth required pam_env.so auth required pam_tally2.so deny=3 even_deny_root unlock_time=120 or auth required pam_tally2.so deny=3 ...
1
vote
0answers
398 views

xrdp with two factor authentication (libpam-google-authenticator)

I'm trying to setup a Debian VM that uses two factor authentication for logins via google-authenticator's PAM plugin. The google-authenticator part is working great through regular console logins or ...
1
vote
0answers
932 views

CIFS share via LDAP + SSL

I have NAS drive which is bound to an Open Directory LDAP server for authentication with SSL enabled. The NAS allows for CIFS shares to be accessed via LDAP authentication. (in this case the NAS is a ...
1
vote
0answers
326 views

Is there a size limit for pam modules run by vsftpd?

I'm writing a pam module to let users authenticate against a PostreSQL database linked to a Django site. It works fine when I let sshd use it, but whenever I try it with vsftpd I get the following ...
1
vote
0answers
167 views

Without pam (Pluggable Authentication Modules) how linux system will behave?

Suppose if we create nologin file under /etc then only root can login, but if we comment on all pam_nologin.so line in every file under /etc/pam.d/ then other user also login. That means these ...
1
vote
0answers
182 views

Single sign on with remote SSH server

Is it possible to authorize user based on provided login and password by connecting to remote SSH server? If connection is successfully established and login-password pair is logged on the remote ...
0
votes
0answers
19 views

Loading kerberos keytab from root cron

When I run a script (see below) to load a kerberos keytab from a users cron it works just fine. Running it from root cron however a password is asked for the keytab and it aborts with: kinit: Generic ...
0
votes
0answers
23 views

How to force users to change password according to policy standard in Debian Linux

In Linux how do I force users to change password according to standard only (that defined in /etc/pam.f/passwd)? I read that pam_cracklib.so only tells user that password is not according to standard ...
0
votes
0answers
35 views

How to determine the source(s) of PAM authentication attempts?

I see persistent authentication attempts in /var/log/messages: Jan 13 02:00:05 ns1 saslauthd[912]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth ...
0
votes
0answers
7 views

PAM select authentication

Is there an existing mechanism for allowing a user to choose one of various authentication means? Suppose I have a 2FA system set up: Password Second factor TOTP U2F device Possibly other 2nd ...
0
votes
0answers
34 views

passwd fails with passwd: pam_start() failed, error 26 in tahr puppy 6.0.2

From the messages log: Dec 17 08:08:28 puppypc30098 authpriv.err passwd[8265]: PAM _pam_load_conf_file: unable to open /etc/pam.d/common-password The file /etc/pam.d/common-passwd is indeed ...
0
votes
0answers
29 views

Centos 7 pam_tally2 not working

I have edited /etc/pam.d/password_auth to block users logging in from ssh with 3 fails: I have added the pam_tally2.so lines: #%PAM-1.0 # This file is auto-generated. # User changes will be ...
0
votes
0answers
11 views

Pam.d not enforcing

I am having an issue with pam.d, I configured the system-auth file with: password requisite pam_cracklib.so try_first_pass retry=3 minlen=x difok=x lcredit=x ucredit=x dcredit=x ocredit=x ...
0
votes
0answers
10 views

Adding groups on the fly using PAM

I am using Ubuntu and I've modified group.conf file adding the following line xsh;tty*;username;Al0900-2100;group but I am not getting added to this group. Why is that? Should I do anything else?
0
votes
0answers
45 views

keyboard-interactive:pam asking for password not code

sshd_config UsePAM yes ChallengeResponseAuthentication yes AuthenticationMethods publickey keyboard-interactive:pam pam.d/sshd #auth required pam_securetty.so #disable remote root auth ...
0
votes
0answers
37 views

What options can be passed to pam_mysql.so in /etc/pam.d/ config files?

There's no manpage for libpam (on Ubuntu 14.10) and man pam refers to something unrelated to PAM. Search engine results only refer to example configuration files, bugs (about escaping) and postfix ...
0
votes
0answers
225 views

Permission denied one correct login even as root after changes to /etc/pam.d/system-auth

I changed my system-auth file in etc/pam.d to the following. #%PAM-1.0 auth required pam_env.so auth required pam_lastlog.so inactive=35 auth required ...
0
votes
0answers
61 views

sudo-ldap using LDAPv3 for Mac OSX - Possible?

I have been able to setup Mac OSX to authenticate via LDAPv3 and KRB5 to a Fedora FreeIPA server. Took some work - but got it to work. My question now is if it is possible to configure the sudo ...
0
votes
0answers
64 views

Issues with SELinux and PAM logging in

I had a recent issue where users weren't able to log in our Linux server. In the logs I found: login: FAILED LOGIN 1 FROM tty1 FOR REDACTED, Authentication failure login: pam_succeed_if(login:auth): ...
0
votes
0answers
64 views

How PAM module reads /etc/shadow

I am developing a PAM module, which is much similar to pam_unix.so, the default authentication module. I also have a small test app that uses this module for authentication purposes. My module first ...
0
votes
0answers
36 views

PAM authentication problems with su - $username

When I try to su - postgres as the root user, I immediately get su: Authentication failure This is my pam.d/su file # Begin /etc/pam.d/su # always allow root auth sufficient pam_rootok.so ...
0
votes
0answers
2k views

Samba, winbind and AD authentication: username is invalid on this system

I am trying to set up a file server with Active Directory authentication using Samba and Winbind. Domain controller is Windows 2000 SP4 (don't judge). File server is Debian 7.7 (latest stable). This ...
0
votes
0answers
48 views

ec2 enable su for user ubuntu

I am trying to enable rstudio-server login with ubuntu on ec2, but it fails. I think it uses the same auth mechanism as su. So I did sudo passwd su someotheruser su ubuntu But even though I know ...
0
votes
0answers
818 views

ssh login with mail address

I have an Ldap Server configured an running and another server listen to this users database. (Ldap client) I need to force users login on ssh with user as email (dc: mail=myself@anymail.com) ...
0
votes
0answers
55 views

Switching user in openssh using PAM

I'm trying to write a PAModule which will use compare the inserted username against a file. If the username exists in the file, it will change the username to root (since the username does not really ...