Pluggable authentication modules, a flexible framework for configuring authentication, most commonly the login component of Linux systems, but used in other components and operating systems.

learn more… | top users | synonyms

0
votes
0answers
9 views

why did pam_tty_audit stop working?

I recently installed the following updates to my system: Upgrade: libpam-runtime:amd64 (1.1.8-3, 1.1.8-3.1), libpam0g:amd64 (1.1.8-3, 1.1.8-3.1), libpam-modules:amd64 (1.1.8-3, 1.1.8-3.1), ...
3
votes
1answer
58 views

PAM Faulty Module

After updating PAM secure log started showing: su: PAM unable to dlopen(/lib64/security/pam_rootok.so): /lib64/security/pam_rootok.so: undefined symbol: selinux_check_access su: PAM adding faulty ...
1
vote
2answers
61 views

How can I log on my linux machine with my Active Directory credentials?

I'm on a windows computer RDPing to a RHEL 7 Server. I now want to be able to log into that server using my windows domain credentials(over SSH, preferably RDP too but not necessary). Here's what I ...
0
votes
0answers
7 views

Suse 11 Sp2 pam-config doesn't work

I try to add pam_ldap module in Suse 11 Sp1 Server 64 bit using: pam-config -a --ldap OS information: node01:~ # file $(which pam-config) /usr/sbin/pam-config: ELF 64-bit LSB executable, ...
0
votes
1answer
32 views

PostgreSQL user authentication against PAM

I am trying to set up authentication via PAM for PostgreSQL 9.3. I already managed to get this working on an Ubuntu 12.04 server, but I am unable to get this working on a Centos-6 install. The ...
0
votes
0answers
12 views

Solaris 11: How can I limit the number of concurrent users with PAM?

I have a solaris 11 machine that has PAM helping in an authentication process for an obscure service called netatalk. I know that PAM is involved in client authentication to the service, so if I can ...
0
votes
2answers
55 views

Non-root user is not allowed to use crontab due to PAM restrictions

I have the issue that I am not able to use cron with my normal user ( other than root ) [coins@COINS-TEST ~]$ crontab -l Authentication service cannot retrieve authentication info You (coins) are ...
0
votes
0answers
12 views

pam_listfile works with groups but not with users

I have a strange problem: I try to restrict access to my RHEL 6.4 over pam_listfile module. Doing this with groups, it works perfectly. But if I try to do it with users, it somehow fails. Both, users ...
1
vote
1answer
64 views

Accept any SSH connection irrespective of client key

Imagine I'm setting up a honeypot, what would be the quickest way to setup SSHD to just accept any connection? and yes, this is really insecure, so please don't copy :-) Might be useful (put ...
1
vote
0answers
28 views

FreeRadius-GoogleAuthenticator-Kerberos Password Change Weirdness

We are using FreeRadius, Kerberos and Google Authenticator to implement two-factor authentication. The two factor auth works fine, both from radtest and from a Watchguard firewall. To log in, a user ...
0
votes
0answers
25 views

Can sssd-ldap authenticate non-posix users?

I am migrating a sealed MSA from using pam_ldap to pam_sss (sssd-ldap). However, pam_sss seems to have having trouble authenticating users without uidNumbers. I had thought changing ...
0
votes
0answers
22 views

pam-mysql: “Failed password” when using hash methods

today I installed mysql-pam in order to store user credentials for ssh logins in a mysql database. At first I set users.password_crypt = 0, which means that plain passwords are saved in the db. After ...
0
votes
1answer
26 views

Create alias for UNIX username in LDAP for DB2

I want to use LDAP data for the authentication process in DB2. I have already configured DB2 via PAM to retrieve the information of the NIS server that is in the ActiveDirectory. It works perfect ...
5
votes
2answers
301 views

Logins take a long time

After upgrading to Debian 7.4 password authentication from any service take a long time. This is true for SSH logins, sudo'ing and authentication with dovecot (which is configured to use PAM). I am ...
1
vote
1answer
33 views

Is it possible to have one group or account authenticate locally, bypassing LDAP auth?

We have one RAC cluster of machines where the local UID:GID of a couple users (oracle and grid) do not match the UID:GID of those same users in LDAP. Ultimately we ought to change the UID and GID of ...
1
vote
0answers
67 views

passwd: Authentication token manipulation error

I am running a Ubuntu 12 machine, and have recently been working to secure it. I made all the changes from this guide. I am not running a Linode, but I used these as a starting point for setting up ...
1
vote
1answer
86 views

Is anyone using access.conf and netgroup authentication with sssd?

I want to be able to authenticate users (via ssh) to specific groups of hosts based on the users' LDAP netgroup membership. The LDAP server is dsee7. The distro is OEL 6.5 with openldap as the client. ...
0
votes
1answer
61 views

Mounting NFS shares with pam_mount module

I am setting up a classroom environment where Windows 2012 R2 Server is used as a domain controller and file server. All the clients will be Kubuntu 14.04. I have set up the domain and NFS shares ...
2
votes
0answers
64 views

RHEL 6.5 web application PAM AUTH pam_oddjob_mkhomedir

I've got a RHEL 6.5 that authenicates against an AD server, that side is working fine. The machine is also running a web application that uses a PAM module to authenticate. I copied login to make a ...
1
vote
1answer
17 views

How can I verify that my PAM configuration works as expected

I'm trying to setup a vsftpd server in a virtual machine and all I can ever get from it is an authentication error (530 Login incorrect). Since I've tried to configure it using virtual users with PAM, ...
0
votes
0answers
57 views

LDAP: forced to change root password on every login

I have finally configured my new server as LDAP-client of my existing one. Now, every time I login as root, I am prompted to change my 'LDAP password': login as: root root@111.111.111.111's password: ...
0
votes
1answer
63 views

PAM Authentication with LDAP on Debian Jessie Not Finding LDAP Users

Debian Jessie (specifically, Debian Server Wheezy x64 with testing repos) OpenLDAP 2.4.39 libpam-ldapd 0.9.4-1 Upon installing libpam-ldapd, the dpkg configuration asked for my LDAP address ...
0
votes
0answers
27 views

pam_exec not working for auth?

Here's my PAM configuration file: #%PAM-1.0 auth requisite pam_exec.so seteuid /srv/auth/pam_auth_user.py Here's /srv/auth/pam_auth_user.py (I've run chmod +x and chown root:root on it): ...
2
votes
3answers
55 views

is there a PAM module for DNSBL lookups?

I have been enumerating the remaining security concerns on one of my back-end production servers, when I came to the realization that something which could be incredibly useful was missing from my ...
1
vote
1answer
123 views

Token error when trying to change password through pam-mysql

I am currently preparing a machine for a web hosting service, and I decided to use MySQL to store all our users (since the rest of our services use it already). For that, I am using libnss-mysql and ...
0
votes
1answer
100 views

Pam-Mysql “Can't initialize threads: error 11”

Inside a Debian OpenVZ container, I have 2 OpenVPN servers (udp on port 53 and tcp on port 443). The authentication is based on Pam-Mysql. Inside my OpenVPN conf file I have: [...] plugin ...
0
votes
0answers
39 views

pam_exec not working? cannot allocate 2 bytes?

I am trying to run a script during the login process using PAM and libpam_exec; I have added this line to the desired file under /etc/pam.d/: auth required pam_exec.so debug log=/var/log/debug ...
1
vote
1answer
27 views

skip 2 steps verification when there is ssh key Debian [closed]

I had installed 2 steps verification on my server using this great manual: http://support.jpgottech.com/knowledgebase.php?article=72 Everything works great but I had encountered a small issue, I want ...
0
votes
0answers
35 views

enforce password length on ubuntu with pam_cracklib

I was trying to enforce password length to a minimum of 10 using pam_cracklib. here is my /etc/pam.d/common-password password requisite pam_cracklib.so retry=3 minlen=10 ...
0
votes
0answers
14 views

Multiple server with Pam radius?

I have an issue with Pam radius . I want to use two radius servers at same time with different databases with Pam_radius I use Open-connect which use Pam authentication . in ...
2
votes
1answer
46 views

pam_tally2 causing unwanted lockouts with SCOM or Nervecenter

We use pam_tally2 in our system-auth config file which works fine for users. With services such as SCOM or Nervecenter it causes lockouts. Same behavior on RHEL5 and RHEL6 This is ...
0
votes
1answer
76 views

Why does debian not set the pam module called pam_limits.so in the file /etc/pam.d/su

I am using debian version 7.4 The /etc/pam.d/su file there does not enable pam_limits.so the snippet is: # Sets up user limits, please uncomment and read /etc/security/limits.conf # to enable ...
0
votes
0answers
88 views

Red Hat 6.5 - Login Errors After Security Hardening

I followed the information below, however, it is strangely blocking me from entering a password upon entering the login prompt on the server: To configure the system to lock out accounts after a ...
0
votes
0answers
34 views

Getting PAM/user info into php - something like Net_Finger instead of a db?

I've got a very small user group who just need to login, upload, check and then move specific files to a different area when ready. Right now, I use the nginx PAM auth module to log them in against ...
3
votes
1answer
171 views

Understanding PAM authentication procedure on FreeBSD with security/sssd

I'm trying to understand what's behaving errantly on my PAM configuration on FreeBSD 10.0 The machine is configured with two different authentication realms, one is the default Unix authentication ...
1
vote
1answer
52 views

On Solaris, can I create a user account in a single command line entry that is not disabled, but is password disabled (only allows SSH)

I am building a script for SA's to follow when performing a certain task. That task requires adding a user to a system that can only SSH to the system (using a key) and not log in with a password. ...
0
votes
0answers
112 views

authenticating and authorizing linux users kept in mysql database using pam and nss

I am not able to authenticate and authorize users present in my mysql database. If someone can point out where I am wrong it would be very helpful.Following are the steps that I followed. Firstly I ...
0
votes
0answers
21 views

Linux PAM auth chain w/ module independence

I have a working PAM configuration using google_authentitcator in addition to the standard pam_unix password module as a two factor solution. In short it prompts (requisite) for a verification code ...
0
votes
1answer
533 views

CentOS PAM unable to open /etc/pam.d/system-auth

In gdm I have checked "Require smartcard login" but forgot about adding any smartcard for authentication. Then I've tried to boot from LiveCD and disable SC auth. Something went wrong and now I am not ...
3
votes
1answer
383 views

Public-Key -or- Password & Google Authenticator for SSH Login

I found an article (http://www.howtogeek.com/121650/how-to-secure-ssh-with-google-authenticators-two-factor-authentication/) that explains how to configure OpenSSH to ask for a Google Authenticator ...
6
votes
1answer
96 views

Different “RequiredAuthentications2” for sshd and sftp subsystem

we're currently using a 2factor authentication on our SSH servers, so we have "RequiredAuthentications2 publickey,keyboard-interactive" in our sshd_config (publickey for the key, keyboard-interactive ...
1
vote
1answer
270 views

Account Lockout with pam_faillock in RHEL6

Previously, I asked about using pam_tally2 under RHEL6. I would like to pose this question and answer to document the recommended use of pam_faillock over pam_tally2 for the same function; What is ...
3
votes
2answers
308 views

OpenSSH and PAM authentication using a public key

I'm looking for a way to authenticate users using a public key which is stored in a db (MongoDB). Similar questions usually resulted with a suggestion to installed a patched version of OpenSSH ...
4
votes
3answers
173 views

FreeIPA: prevent local root accessing user accounts

So after asking this question, I've been test-driving FreeIPA as a central authentication source. Managing access to multiple linux system One problem I ran into is that if a user is given local root ...
2
votes
1answer
148 views

build user chroot on first login

I'm using ldap for remote user authentication and I basically need to either figure out how to: a. chroot a user on machine b from machine a via nfs,(which doesn't seem possible without mounting ...
1
vote
0answers
103 views

How to add two-factor authetntication to ssh?

I am trying to add 2FA to sshd using PAM from oathtool package. I want two ways to login to server: publickey and 2FA, or password and 2FA So far I managed to add 2FA to publickey authentication, ...
6
votes
4answers
3k views

pam service(sshd) ignoring max retries

I have vps that I use to run a webserver on, it currently runs ubuntu server 12.04. Since a few weeks I keep getting a lot of errors in my ssh console. 2014 Apr 11 08:41:18 vps847 PAM service(sshd) ...
0
votes
1answer
768 views

How to I authenticate with Dovecot + IMAP + PAM on CentOS?

I set up Dovecot IMAP to use PAM as suggested here: http://wiki2.dovecot.org/PasswordDatabase/PAM PAM/dovecot [root@ip-172-31-15-65 pam.d]# cat dovecot #%PAM-1.0 auth required ...
0
votes
0answers
119 views

Apache + PAM + Winbind slow logins

Since upgrading our old Debian Lenny server to Ubuntu 12.04, we've noticed intermittent slow or failed access to Apache. Many or most web requests work fine, but occasionally, a Subversion client ...
1
vote
0answers
53 views

Centos 6.2 Openwebmail change password issue

Recently build environment to test, install openldap, openwebmail and PAM authentication module After experiencing the current account login webmail change password will be "password is wrong, change ...