The pam tag has no wiki summary.
1
vote
0answers
34 views
User not recognized by underlying authentication
I'm running lxc on Linux Mint Debian Edition tracking Wheezy/Sid. I created a container using "lxc-create -t debian -n dev". In accordance with the Debian wiki article on LXC I have mounted the ...
0
votes
2answers
32 views
Configure interactive keyboard authentication
I have a linux machine running OpenSSH Server 4.3.
How can I configure it to use keyboard-interactive authentication - define prompts and responses and so on.
Please be specific, as I am pretty new ...
0
votes
0answers
49 views
How to prevent getent from enumerating disabled accounts from Active Directory (pam_winbind)
I have a series of services in linux servers that rely on AD central authentication, and to prevent file ownership, I do not delete user accounts, just disabled them. There's a downfall in this ...
2
votes
1answer
59 views
Expired “authentication token” for user with deleted password
The Setup:
1) The user's password was deleted with "passwd -d " command
2) The user has cron jobs running
The Problem:
Once every 30 days (default password expiration policy) the cron fails with an ...
1
vote
0answers
59 views
pam_unix(sshd:auth): auth could not identify password for [admin] - sshd[6968]?
Why is the following log produced?
pam_unix(sshd:auth): auth could not identify password for [admin] - sshd[6968]
Is it because of a timeout, or is there some other reason?
1
vote
1answer
81 views
debian: cannot change password
As the root user, I can change the password:
hussie:/home/claudiu# passwd
Enter new password:
Retype new password:
passwd: password updated successfully
As a non-root user I cannot:
...
0
votes
1answer
88 views
pppd PAM use and combining with CHAP/MSCHAP
Managed to successfully configure pppd to use PAM (/etc/pam.d/ppp) for authentication steps (used login option in addition to auth). However, this seems to work only for PAP (require pap, refuse ...
1
vote
1answer
90 views
Account lockout using Openldap
What is the best way to implement account lockout in openldap? I have an openldap server with Ubuntu desktop client connecting to it for authentication. I want he accounts to locked out after say 5 ...
0
votes
1answer
39 views
Postfix/Dovecot don't use pam_mkhomedir
I have users in external database. So far - ssh, postfix, dovecot and some others - use entries with no problem.
I have Maildirs inside /home/[user] and if the homedir exists - everything is ok - ...
2
votes
0answers
54 views
Logging on as root without winbind timeouts
How can I set up my Linux box so that, if the Active Directory domain controller is down, I can still log in as root, without any timeouts or delays?
Following the example of most of the ...
0
votes
2answers
55 views
Postfix not connecting to sql database
I have postfix set up to use postfix/proxymap to store configs. I get this error when trying to end email.
Nov 9 06:18:33 mail postfix/pickup[16979]: D1A5E18F30: uid=2000 from=<rperkins>
Nov ...
0
votes
2answers
102 views
Make user home directory at gdm login
I'm trying to make home directory at (RADIUS) user gdm login.
The auth is working right, but when I try gdm says that the user hasn't a home directory.
I tried to do that with pam_mkhomedir.so but ...
1
vote
1answer
304 views
smbpasswd: Failed to add entry for user
tl;dr Assuming a basic (but functioning) LDAP/PAM configuration, how come smbpasswd fails with this error message when I try to add an existing UNIX/LDAP user to Samba?
I have a basic, but working ...
2
votes
1answer
207 views
Where do I find USEFUL official documentation for LDAP authentication on Centos/RHEL 6?
Does it exist any official installation documentation about how to setup an LDAP server that I can connect my clients to with authconfig. I'm will be Centos 6 and RHEL 6.1.
What I can find is this. ...
0
votes
0answers
74 views
CentOS 6 - php5-pam-auth?
Where do I get an updated version of the PHP pam_auth module? Can't find it on yum and the latest version I can find to download is for PHP 4.3.
0
votes
1answer
87 views
pam_ldap, where is the filter set?
A while ago I asked a question about this same issue already (Cyrus on CentOS with sasl / pam / ldap), and I came a bit further.
The Bind DN is no longer empty; LDAP works with all apps except imap.
...
1
vote
1answer
201 views
VsFTPd - pam_mkhomedir
I am trying to set up a FTP server that authenticates against an LDAP server. This part is done and works. My server is VsFTPd on Ubuntu Server 11.04.
But I have to create the home directories for my ...
4
votes
6answers
237 views
How to customize telnet login prompt on linux
When I run login command on debian, I get:
hostname login: _
on RHEL5, Solaris or HP-UX I get:
login: _
I need to be able to customize login: and password: prompts it on a Linux box. I can ...
1
vote
2answers
262 views
VsFTPd - LDAP - PAM
I am trying to configure a VsFTPd server to authenticate agains an LDAP server. It may be easy, but since it is the first time that I am using both LDAP and PAM, I have some difficulties. VsFTPd runs ...
1
vote
1answer
150 views
VsFTPd - LDAP - PAM [closed]
Possible Duplicate:
VsFTPd - LDAP - PAM
I am trying to configure a VsFTPd server to authenticate agains an LDAP server. It may be easy, but since it is the first time that I am using both ...
0
votes
0answers
44 views
error in auth.log but can login; LDAP/PAM
I have a server running OpenLDAP. When I start a ssh-session I can log in without problems, but an error appears in the logs. This only happens when I log in with a LDAP account (so not with a system ...
2
votes
1answer
79 views
Problem with mixed cases in username
We have integrated a linux thin client with an AD using kerberos, pam and winbindd. We are using pam_mkhomedir to make the home dir, and that works fine. But the login scripts don't run when the AD ...
2
votes
1answer
145 views
Account lockout in Ubuntu
I am trying to implement account lockout for Ubuntu systems using pam_tally. The login should be disabled for certain interval on 3 invalid login attempts. This should happen for both system and LDAP ...
1
vote
2answers
495 views
How can I install pam_mount on Centos 6 x86_64?
I need to use pam_mount to mount user home directories individually at the time that each user logs in. I cant locate a package for this, at least for Centos 6. I would not have a problem building ...
0
votes
0answers
64 views
Limit access on linux via LDAP, PAM, Active Directory, and Security Group
We run AD on server 2008. It has been determined that we won't install services for unix. Knowing that is it possible to limit user access to linux machines based on security groups using only LDAPS? ...
3
votes
0answers
77 views
Samba, password change and windows error messages
I moved password quality checking in Samba from check password script to PAM, now when pam_passwdqc or pam_cracklib deny password change the user revives a "Access denied" error, not the standard "The ...
1
vote
1answer
54 views
Changing eDirectory Password From Linux Machine
I have Configured LDAP Authentication for my Linux Machines. The LDAP Server is Novell eDirectory. The LDAP Users are able to login into the machine. But when i am issuing passwd command it is asking ...
0
votes
0answers
346 views
SASL PLAIN authentication failed: no mechanism available
I'm using postfix smtp while having encrypted passwords in mysql database. Passwords are checked through Cyrus SASL and PAM.
I updated my debian server to the recent versions of postfix and cyrus ...
1
vote
4answers
985 views
Centos 6 Linux and nss-pam-ldapd
I am trying get centos 6 to authenticate against ldap (active directory to be specific) I am a bit confuse though because after installing nss-pam-ldapd I see several files that appear to be the same ...
0
votes
1answer
127 views
Google Authenticator PAM for specific users
My current sshd PAM config:
#%PAM-1.0
auth include system-auth
account required pam_nologin.so
account include system-auth
password include system-auth
session ...
0
votes
1answer
347 views
Cyrus on CentOS with sasl / pam / ldap
SASL/PAM/LDAP is driving me crazy... that's what I read a lot when googling for problems in this area, and what I experience myself :-S
I'm trying to get Cyrus imap working for virtual hosting on ...
0
votes
0answers
45 views
PAM-Authentication after SSH-PubKey
I want to setup Google 2-Factor Authentication for my server in combination with SSH pubkeys.
There's already a program called "login_duo" that is able to do this with 2-factor-auth from duosecurity.
...
2
votes
3answers
122 views
Programmatic way to validate a Linux Login/password
I would to like to validate a username and password correspond to a valid unix account.
The current solution I have uses expect to wait for a password prompt and then supply the password and see if ...
0
votes
2answers
87 views
pam.d errors after OMSA 6.4 upgrade
I have a Dell R710 running CentOS 5.6 x64. I have it set up to pull Dell's software & patches from their own repos. This works as well as I can expect it work. However, I"ve been getting these ...
0
votes
1answer
73 views
Configured Linux Machine to Authenticate to LDAP But not working
I am Using Cent Os Operating System and i need to configure LDAP Authentication for this machine. I have configured the ldap client using using authconfig-tui command. And i have cross checked the ...
0
votes
1answer
130 views
PAM, nsswitch and LDAP configuration
I have a technical and precise question about two type of configuration about LDAP, pam configuration files and nsswitch.conf.
Wich is the difference between the passwd_compat configuration and the ...
2
votes
1answer
181 views
Force SHA when user changes LDAP password using passwd
I'm trying to setup PAM/LDAP so that when a logged in SSH user changes their password using passwd, it encrypts the password with SHA1 before updating the LDAP entry. I have this
# /etc/ldap.conf
...
...
2
votes
3answers
256 views
libpam-ldap or libpam-ldapd?
I'm setting up LDAP authentication on my personal VPS, and Ubuntu has two packages for the same purpose: libpam-ldap and libpam-ldapd. Which should I use?
0
votes
0answers
158 views
vsftpd with pam_winbind.so
I'm trying to setup vsftpd to use logins from our domain. I want the ftp users to be able to login using their active directory username/password and have be able to have full access to ...
0
votes
1answer
110 views
Per-user umask over all ssh connections
Following on from How to setup ssh's umask for all type of connections
Is it possible to do this on a per-user basis? Here's what I have at the minute:
/etc/pam.d/ssh
sesssion optional ...
0
votes
1answer
154 views
FreeBSD 8.2 + Apache 2.2 + mod_auth_pam2: unable to authenticate
I've installed Apache 2.2 and mod_auth_pam2 from ports, but I can't get local UNIX authentication to work. When I access the protected part of my local website, I do get the authentication request, ...
1
vote
1answer
100 views
Restricting memory available to a user
In Debian 6, how can I limit the total amount of memory (both resident set size and total virtual memory) that a user has access to?
I have tried setting limits via ulimit, but if a process spawns ...
0
votes
0answers
18 views
Securing an HTTP PAM module
I have just created an HTTPS PAM module (based heavily on pam-http) that authenticates against an arbitrary HTTP server supporting SSL. That is all working, but I'm not too sure on how to integrate ...
0
votes
1answer
161 views
pam_exec.so PAM module does not export variable PAM_USER as stated in the documentation
I'm trying to use the pam_exec.so PAM module to execute a script which needs to know the username/password coming from the application (OpenVPN in this case).
I have a script that executes printenv ...
1
vote
1answer
325 views
PAM: How can I create a service which passes username/password to a script?
I'm setting up a PAM service for OpenVPN, such that the OpenVPN PAM module can authenticate a username/password to an external service that I will implement using a shell script.
The OpenVPN PAM ...
0
votes
0answers
166 views
libpam_ldapd - pam_ldap(sshd:account): 'Could not identify user'
I'm attempting to test the install procedure for libpam_ldapd on an Ubuntu/Debian Virtual machine.
I have the nscd / nslcd services off, and I'm watching the output from nslcd -d and ...
0
votes
0answers
86 views
pam_succeed_if on RHEL/CentOS
The default system-auth file for PAM on RHEL/CentOS has the following auth section:
auth required pam_env.so
auth sufficient pam_unix.so nullok try_first_pass
auth ...
0
votes
1answer
120 views
Using PAM from svnserve without Apache
I am investigating the options for upgrading a Subversion 1.4 server to 1.6.
I have been told by colleagues here that in an ideal world we should be moving towards using PAM to authenticate the ...
1
vote
1answer
51 views
how to limit maxlogin for a port forward over ssh user who Do not execute a remote command
I have some users, who connect to my server through the ssh for port forwarding and ssh tunneling, but there is a problem:
I cannot limit their concurrent logins, because they have no session and ...
1
vote
0answers
429 views
SASL LOGIN authentication failed: generic failure
I'm setting up a mail server with SMTP authentication and the backend
database is MySQL 5.1.53 with pam_mysql and cyrus-sasl2 2.1.23 on
Slackware Linux 13.1. When I telnet to test my server-side
...
