The pam tag has no wiki summary.
1
vote
2answers
41 views
Samba + LDAP: Newly created users cannot log in
I'm having a problem where users which recently were created are unable to log in, even though they have been added to the correct groups. When viewing the error logs, I'm getting these errors:
...
0
votes
2answers
24 views
How to enable LDAP auth for SFTP logins only
I currently use ActiveDirectory for authentication on my Ubuntu 10.04 servers using a tool called Centrify Express. Centrify has a custom .so file that is configured in /etc/pam.d/common-auth.
I'd ...
2
votes
1answer
28 views
Should pam_mkhomedir.so be in /etc/pam.d/sshd or /etc/pam.d/$anotherservice?
I want to enable pam_mkhomedir.so for users who authenticate to our system. I want a user's home directory to be created when they SSH into the box.
One common convention seems to be to put ...
-2
votes
0answers
29 views
Configure PAM, Radius for ssh
I want to do following scenario:
I configured PAM and freeradius, so when a user wants to ssh to server, server asks PAM if the password is correct and it is working well.
Now, I want to let users ...
0
votes
3answers
58 views
Switching user in openssh using PAM
I'm trying to write a PAM module which will on login will compare the username provided against a list of "virtual" user names. If the username provided is a "virtual user" it will complete the ...
1
vote
1answer
31 views
set umask per user
It's possible to force any ssh type connection to have a umask of 0777 using pam. This is what I have:
# /etc/pam.d/ssh
sesssion required pam_umask.so umask=0777
I want to do this only for a ...
0
votes
1answer
38 views
Blocking failed logins using PAM
I heard Centos can block user based on failed logins.
http://www.cyberciti.biz/tips/lock-unlock-set-number-of-login-attempts.html
The post says by default it checks for /var/log/faillog how do I ...
1
vote
2answers
80 views
changing shadow hash algorithm to bcrypt: how to rehash
I want to change my SHA512 shadow file to use bcrypt as shown in this question/answer: Enable blowfish-based hash support for crypt
The problem is that i run into a chicken and egg problem, because ...
0
votes
0answers
71 views
Clients not recognizing secondary LDAP groups?
I'm having an issue where users who are members of secondary groups in LDAP are not being recognized as members of that group by the client. In this case, user jdoe is not being recognized as a member ...
0
votes
1answer
63 views
login faild when autorize dovecot from pam
I installed dovecot 2.0.13 with postfix in ubuntu server 11.10 , after installation I can send e-mail with the mail command and dovecot works when I test it with telnet
I then installed roundcube on ...
1
vote
1answer
140 views
How to use nginx PAM module?
I would like to use nginx PAM module to authenticate a site with existing users on a FreeBSD system. I tried to use pam_unix.so, but no luck. It's just not let me in with my usr/psw pair. :(
nginx ...
4
votes
2answers
126 views
How to grant su access to wheel without asking for password on FreeBSD?
I would like to grant users of the wheel group (other sysadmins) su access without being asked for password.
I know how to do it with pam in linux, but the question now is for FreeBSD. I am not ...
0
votes
0answers
65 views
Reliable CIFS mount using PAM: Do not unmount on logout, allow re-mount if forcibly unmounted
In our group, the group shares and Windows homes are hosted on a CIFS NAS. These locations are mounted using PAM from the Linux boxes. However, automatic logout is incompatible with screen and other ...
0
votes
2answers
112 views
LDAP auth in Ubuntu PAM?
I have a 64-bit Ubuntu 11.04 server I'm setting up, and I would like to configure it to use LDAP for authentication. The LDAP server happens to be an ActiveDirectory server, but I'm not trying to bind ...
0
votes
0answers
321 views
vsftp login errors 530 login incorrect
Using Ubuntu 10.04 on an aws ec2 instance. I was happy just using ssh but then a wordpress plugin needs ftp access...I just need ftp access for one site www.sitebuilt.net which is in /home/sitebuil.
...
0
votes
1answer
190 views
Apache Kerberos Authentication with LDAP Authorization: access to / failed, reason: require directives present and no Authoritative handler
I am trying to get a VirtualHost (well multiple VirutalHosts) up and running with kerberos authentication and group requirements.
My latest configuration within the <Directory> directive looks ...
1
vote
1answer
251 views
pam_mount of smb share on rhel6, home directory not available for login - probably SELinux?
I'm using the Fedora 12 pam_mount / libHX RPMs on a RHEL 6 x86_64 system to automatically mount home directories from a NetApp system configured with NTFS-only security
AD-bound logins work fine - ...
1
vote
3answers
57 views
Limiting SSH root logins to only “safe” networks in OpenSSH 4.x
We want to limit root SSH login to only a few networks that we consider "safe" (VPN, etc.) without imposing the same condition on other accounts.
In OpenSSH 5.x, we could use the match block. ...
0
votes
1answer
112 views
Installing pam_mount on CentOS 5
I'm working on getting a CentOS 5 system that I've successfully gotten to authenticate with AD, to automount the user home directories from AD. After searching around, I found pam_mount, which seemed ...
0
votes
1answer
70 views
limits.conf not being applied.
I have the following lines in /etc/security/limits.conf
* soft nofile 32768
* hard nofile 65536
root soft nofile 32768
root ...
0
votes
0answers
48 views
How to realize single sign on with pam and php apps?
Let's say that I've a server in the internet. Every user connect through an ssh tunnel to a various of php apps on it. Is it somehow possible to reuse the ssh authentication for these php apps, which ...
1
vote
0answers
116 views
User not recognized by underlying authentication
I'm running lxc on Linux Mint Debian Edition tracking Wheezy/Sid. I created a container using "lxc-create -t debian -n dev". In accordance with the Debian wiki article on LXC I have mounted the ...
0
votes
2answers
49 views
Configure interactive keyboard authentication
I have a linux machine running OpenSSH Server 4.3.
How can I configure it to use keyboard-interactive authentication - define prompts and responses and so on.
Please be specific, as I am pretty new ...
2
votes
1answer
122 views
Expired “authentication token” for user with deleted password
The Setup:
1) The user's password was deleted with "passwd -d " command
2) The user has cron jobs running
The Problem:
Once every 30 days (default password expiration policy) the cron fails with an ...
1
vote
0answers
178 views
pam_unix(sshd:auth): auth could not identify password for [admin] - sshd[6968]?
Why is the following log produced?
pam_unix(sshd:auth): auth could not identify password for [admin] - sshd[6968]
Is it because of a timeout, or is there some other reason?
1
vote
1answer
196 views
debian: cannot change password
As the root user, I can change the password:
hussie:/home/claudiu# passwd
Enter new password:
Retype new password:
passwd: password updated successfully
As a non-root user I cannot:
...
0
votes
1answer
154 views
pppd PAM use and combining with CHAP/MSCHAP
Managed to successfully configure pppd to use PAM (/etc/pam.d/ppp) for authentication steps (used login option in addition to auth). However, this seems to work only for PAP (require pap, refuse ...
1
vote
1answer
167 views
Account lockout using Openldap
What is the best way to implement account lockout in openldap? I have an openldap server with Ubuntu desktop client connecting to it for authentication. I want he accounts to locked out after say 5 ...
0
votes
1answer
74 views
Postfix/Dovecot don't use pam_mkhomedir
I have users in external database. So far - ssh, postfix, dovecot and some others - use entries with no problem.
I have Maildirs inside /home/[user] and if the homedir exists - everything is ok - ...
2
votes
0answers
99 views
Logging on as root without winbind timeouts
How can I set up my Linux box so that, if the Active Directory domain controller is down, I can still log in as root, without any timeouts or delays?
Following the example of most of the ...
0
votes
2answers
104 views
Postfix not connecting to sql database
I have postfix set up to use postfix/proxymap to store configs. I get this error when trying to end email.
Nov 9 06:18:33 mail postfix/pickup[16979]: D1A5E18F30: uid=2000 from=<rperkins>
Nov ...
0
votes
2answers
173 views
Make user home directory at gdm login
I'm trying to make home directory at (RADIUS) user gdm login.
The auth is working right, but when I try gdm says that the user hasn't a home directory.
I tried to do that with pam_mkhomedir.so but ...
1
vote
1answer
721 views
smbpasswd: Failed to add entry for user
tl;dr Assuming a basic (but functioning) LDAP/PAM configuration, how come smbpasswd fails with this error message when I try to add an existing UNIX/LDAP user to Samba?
I have a basic, but working ...
2
votes
1answer
428 views
Where do I find USEFUL official documentation for LDAP authentication on Centos/RHEL 6?
Does it exist any official installation documentation about how to setup an LDAP server that I can connect my clients to with authconfig. I'm will be Centos 6 and RHEL 6.1.
What I can find is this. ...
0
votes
1answer
134 views
CentOS 6 - php5-pam-auth?
Where do I get an updated version of the PHP pam_auth module? Can't find it on yum and the latest version I can find to download is for PHP 4.3.
0
votes
1answer
129 views
pam_ldap, where is the filter set?
A while ago I asked a question about this same issue already (Cyrus on CentOS with sasl / pam / ldap), and I came a bit further.
The Bind DN is no longer empty; LDAP works with all apps except imap.
...
1
vote
1answer
391 views
VsFTPd - pam_mkhomedir
I am trying to set up a FTP server that authenticates against an LDAP server. This part is done and works. My server is VsFTPd on Ubuntu Server 11.04.
But I have to create the home directories for my ...
4
votes
6answers
348 views
How to customize telnet login prompt on linux
When I run login command on debian, I get:
hostname login: _
on RHEL5, Solaris or HP-UX I get:
login: _
I need to be able to customize login: and password: prompts it on a Linux box. I can ...
1
vote
2answers
772 views
VsFTPd - LDAP - PAM
I am trying to configure a VsFTPd server to authenticate agains an LDAP server. It may be easy, but since it is the first time that I am using both LDAP and PAM, I have some difficulties. VsFTPd runs ...
1
vote
1answer
262 views
VsFTPd - LDAP - PAM [closed]
Possible Duplicate:
VsFTPd - LDAP - PAM
I am trying to configure a VsFTPd server to authenticate agains an LDAP server. It may be easy, but since it is the first time that I am using both ...
0
votes
0answers
88 views
error in auth.log but can login; LDAP/PAM
I have a server running OpenLDAP. When I start a ssh-session I can log in without problems, but an error appears in the logs. This only happens when I log in with a LDAP account (so not with a system ...
2
votes
1answer
133 views
Problem with mixed cases in username
We have integrated a linux thin client with an AD using kerberos, pam and winbindd. We are using pam_mkhomedir to make the home dir, and that works fine. But the login scripts don't run when the AD ...
2
votes
1answer
183 views
Account lockout in Ubuntu
I am trying to implement account lockout for Ubuntu systems using pam_tally. The login should be disabled for certain interval on 3 invalid login attempts. This should happen for both system and LDAP ...
1
vote
2answers
890 views
How can I install pam_mount on Centos 6 x86_64?
I need to use pam_mount to mount user home directories individually at the time that each user logs in. I cant locate a package for this, at least for Centos 6. I would not have a problem building ...
0
votes
0answers
105 views
Limit access on linux via LDAP, PAM, Active Directory, and Security Group
We run AD on server 2008. It has been determined that we won't install services for unix. Knowing that is it possible to limit user access to linux machines based on security groups using only LDAPS? ...
3
votes
1answer
123 views
Samba, password change and windows error messages
I moved password quality checking in Samba from check password script to PAM, now when pam_passwdqc or pam_cracklib deny password change the user revives a "Access denied" error, not the standard "The ...
1
vote
1answer
79 views
Changing eDirectory Password From Linux Machine
I have Configured LDAP Authentication for my Linux Machines. The LDAP Server is Novell eDirectory. The LDAP Users are able to login into the machine. But when i am issuing passwd command it is asking ...
0
votes
0answers
385 views
SASL PLAIN authentication failed: no mechanism available
I'm using postfix smtp while having encrypted passwords in mysql database. Passwords are checked through Cyrus SASL and PAM.
I updated my debian server to the recent versions of postfix and cyrus ...
2
votes
4answers
2k views
Centos 6 Linux and nss-pam-ldapd
I am trying get centos 6 to authenticate against ldap (active directory to be specific) I am a bit confuse though because after installing nss-pam-ldapd I see several files that appear to be the same ...
0
votes
1answer
199 views
Google Authenticator PAM for specific users
My current sshd PAM config:
#%PAM-1.0
auth include system-auth
account required pam_nologin.so
account include system-auth
password include system-auth
session ...
