The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
3answers
372 views

How can I determine if a client SSH connection has a tty associated with it?

Im writing a PAM module to handle authentication (server side - sshd) and I have to know if an ssh client is a tty (interactive) or not (non interactive). Does anyone have a clue?
0
votes
3answers
3k views

How do I disable or modify pam's password requirements?

I'm using Fedora 19. By default it's setup with pam to disable bad passwords, like "password". This is good. Trying to change this default is infuriating. This is a box for testing internal stuff, not ...
4
votes
2answers
7k views

/etc/security/limits.conf for setting program limits in Linux

I have the following inside /etc/security/limits.conf (I have specified root separately because * will not include it.) user2 - core unlimited * - core 0 root ...
4
votes
1answer
536 views

PAM Authentication / Login

I'm having a little issue on Ubuntu where any commands that require root privileges takes longer to execute than normal. I managed to identify the culprit to the cause after checking my ...
2
votes
1answer
252 views

How can I set path for non-interactive user authenticated using LDAP?

On a Mac running OSX 10.7.5, I need to set the PATH for non-interactive users who connect via ssh and are authenticated using LDAP. It's the same question that was asked (and answered) here: ...
1
vote
1answer
998 views

Setting User Password Policy as per their group Linux?

I wanted to set a password restriction policy , like minlen , maxage , minage etc . I know the way to do it system wide , Can we do it for a particular group of users . I mean only users under ...
1
vote
1answer
1k views

How do I build openvpn without libpam?

Since I have no root privilege to install libpam, I failed to run ./configure. So is there any method with which I can build openvpn without libpam? checking for OPENSSL_CRYPTO... yes checking for ...
0
votes
1answer
26 views

Deploy PAM system-auth file from Configuration Server (Spacewalk)

I have my pam.d system-auth file set up correctly on a laptop to set password complexity requirements. If the contents of the file are copied directly into the /etc/pam.d/system-auth location (or the ...
0
votes
1answer
51 views

pam_tally2 does not show address of the failing user

See this output below: # pam_tally2 -u Login Failures Latest failure From root 1 04/16/14 16:44:16 10.4.1.189 greg 2 04/16/14 16:35:57 unknown ...
0
votes
1answer
255 views

Can't login with KDM and SSSD but the login works fine from the console

I have LDAP authentication set up with SSSD and I can login fine through console and ssh. However when I try to login through KDM it just says authentication failure... More specifically: Jan 9 ...
0
votes
1answer
476 views

Mac OS X: Make home directory at login via SSH

I have LDAP server on Ubuntu 12.04 and Mac OS X 10.7.5 client configured via Directory Service. The NFSHomeDirectory property mapped to #/Users/$uid$. LDAP users can login to Mac via login screen or ...
3
votes
0answers
558 views

limits.conf ulimits not being applied to chrooted processes

We allow users to execute scripts on our servers. Our security model involves chrooting them. We want to be able to apply ulimit restrictions to them, and the best way to do it would seem to be in ...
2
votes
0answers
24 views

using pam_mount in WLAN setting

I thought this should be a simple exercise here, but obviously I couldn't find a solution, yet. I use KDE on Ubuntu 12 LTS. I want to use libpam-mount to mount a nfs share to a directory within user's ...
2
votes
0answers
371 views

Alternative (pref. mature) Linux PAM authentication methods?

I'm looking for alternative, non-keyboard-password authentication methods to unlock my laptop. Whatever authentication it is, it should be quick and convenient to perform and relatively secure. Yes, ...
1
vote
0answers
24 views

Is it possible to define a custom basepath for proftpd home directories?

I know the DefaultRoot ~ setting that you can use to jail users into their home directories but I need to customize this. When authenticating with proftpd I get the user's home-directory from ldap ...
1
vote
0answers
23 views

Does sequence matter in case of pam_env.so and pam_tally2.so together?

Very short question. auth required pam_env.so auth required pam_tally2.so deny=3 even_deny_root unlock_time=120 or auth required pam_tally2.so deny=3 ...
1
vote
0answers
114 views

xrdp with two factor authentication (libpam-google-authenticator)

I'm trying to setup a Debian VM that uses two factor authentication for logins via google-authenticator's PAM plugin. The google-authenticator part is working great through regular console logins or ...
1
vote
0answers
43 views

Authentication Failure Upon Successful Login

I was reveiwing the logs when I was successful in logging into a workstation - however in the in the var/log/secure log it is logged as > gnome-screensaver-dialog:pam_unix(gnome-screensaver:auth): ...
1
vote
0answers
390 views

CIFS share via LDAP + SSL

I have NAS drive which is bound to an Open Directory LDAP server for authentication with SSL enabled. The NAS allows for CIFS shares to be accessed via LDAP authentication. (in this case the NAS is a ...
1
vote
0answers
192 views

Is there a size limit for pam modules run by vsftpd?

I'm writing a pam module to let users authenticate against a PostreSQL database linked to a Django site. It works fine when I let sshd use it, but whenever I try it with vsftpd I get the following ...
1
vote
0answers
151 views

Without pam (Pluggable Authentication Modules) how linux system will behave?

Suppose if we create nologin file under /etc then only root can login, but if we comment on all pam_nologin.so line in every file under /etc/pam.d/ then other user also login. That means these ...
1
vote
0answers
177 views

Single sign on with remote SSH server

Is it possible to authorize user based on provided login and password by connecting to remote SSH server? If connection is successfully established and login-password pair is logged on the remote ...
0
votes
0answers
12 views

Ulimit is set on second login, not first

I'm using Debian Jessie and I have a strange error connected with setting the limit of open files per process. I want to increase the default limit for certain user (me), so I added to ...
0
votes
0answers
96 views

Can't perform Kerberos login

I can't do a Kerberos login. I've tweaked rsyslog to record *.debug to /var/log/debug, whose output is below. If I attempt to log in with ssh, I get: Jun 6 23:13:05 foo-machine sshd[13965]: ...
0
votes
0answers
38 views

Change order of two-factor-authentication

I am testing two-factor-authentication for ssh logins on some CentOS containers in our testing environment. I compiled my own rpms from github's source, installed and configured everything and have ...
0
votes
0answers
15 views

ec2 enable su for user ubuntu

I am trying to enable rstudio-server login with ubuntu on ec2, but it fails. I think it uses the same auth mechanism as su. So I did sudo passwd su someotheruser su ubuntu But even though I know ...
0
votes
0answers
56 views

How to connect Linux machines to a Windows Active Directory with different user rights?

I have a Windows Active Directory Setup with Windows Clients. So far our Linux machines did not authenticate against the AD, I used root to login. Now I wanted to add those Linux machines to the AD ...
0
votes
0answers
59 views

How to change limits of non-interactive process?

I am trying to change the RTPRIO limit of a process that's run at startup. I have found 3 ways to change process interactively: setrlimit ulimit /etc/security/limits.conf However these only seem ...
0
votes
0answers
58 views

Is pam_url limited only to HTTPS?

As you probably are aware, pam_url has almost no documentation. I am trying to use pam_url to authenticate my users against ArangoDB database. Here is my /et/pam_url.conf file: # pam_url ...
0
votes
0answers
377 views

How to trace LDAP authentication failures?

1) I have a working LDAP server which I've confirmed can be used with LDAP clients, running on ec2 via jumpbox. 2) I've run authconfig to setup ldap based authentication, to point to the server: ...
0
votes
0answers
139 views

pam_unix: account has expired

I have setup my Ubuntu 13.4 machine with LDAP authentication. However when I try to send email, I am getting the following message: auth: pam_unix(dovecot:account): account has expired (account ...
0
votes
0answers
529 views

ssh login with mail address

I have an Ldap Server configured an running and another server listen to this users database. (Ldap client) I need to force users login on ssh with user as email (dc: mail=myself@anymail.com) ...
0
votes
0answers
47 views

Switching user in openssh using PAM

I'm trying to write a PAModule which will use compare the inserted username against a file. If the username exists in the file, it will change the username to root (since the username does not really ...