Tagged Questions

The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
2answers
41 views

Samba + LDAP: Newly created users cannot log in

I'm having a problem where users which recently were created are unable to log in, even though they have been added to the correct groups. When viewing the error logs, I'm getting these errors: ...
0
votes
2answers
24 views

How to enable LDAP auth for SFTP logins only

I currently use ActiveDirectory for authentication on my Ubuntu 10.04 servers using a tool called Centrify Express. Centrify has a custom .so file that is configured in /etc/pam.d/common-auth. I'd ...
2
votes
1answer
28 views

Should pam_mkhomedir.so be in /etc/pam.d/sshd or /etc/pam.d/$anotherservice?

I want to enable pam_mkhomedir.so for users who authenticate to our system. I want a user's home directory to be created when they SSH into the box. One common convention seems to be to put ...
-2
votes
0answers
29 views

Configure PAM, Radius for ssh

I want to do following scenario: I configured PAM and freeradius, so when a user wants to ssh to server, server asks PAM if the password is correct and it is working well. Now, I want to let users ...
0
votes
3answers
58 views

Switching user in openssh using PAM

I'm trying to write a PAM module which will on login will compare the username provided against a list of "virtual" user names. If the username provided is a "virtual user" it will complete the ...
1
vote
1answer
31 views

set umask per user

It's possible to force any ssh type connection to have a umask of 0777 using pam. This is what I have: # /etc/pam.d/ssh sesssion required pam_umask.so umask=0777 I want to do this only for a ...
0
votes
1answer
38 views

Blocking failed logins using PAM

I heard Centos can block user based on failed logins. http://www.cyberciti.biz/tips/lock-unlock-set-number-of-login-attempts.html The post says by default it checks for /var/log/faillog how do I ...
1
vote
2answers
80 views

changing shadow hash algorithm to bcrypt: how to rehash

I want to change my SHA512 shadow file to use bcrypt as shown in this question/answer: Enable blowfish-based hash support for crypt The problem is that i run into a chicken and egg problem, because ...
0
votes
0answers
71 views

Clients not recognizing secondary LDAP groups?

I'm having an issue where users who are members of secondary groups in LDAP are not being recognized as members of that group by the client. In this case, user jdoe is not being recognized as a member ...
0
votes
1answer
63 views

login faild when autorize dovecot from pam

I installed dovecot 2.0.13 with postfix in ubuntu server 11.10 , after installation I can send e-mail with the mail command and dovecot works when I test it with telnet I then installed roundcube on ...
1
vote
1answer
140 views

How to use nginx PAM module?

I would like to use nginx PAM module to authenticate a site with existing users on a FreeBSD system. I tried to use pam_unix.so, but no luck. It's just not let me in with my usr/psw pair. :( nginx ...
4
votes
2answers
126 views

How to grant su access to wheel without asking for password on FreeBSD?

I would like to grant users of the wheel group (other sysadmins) su access without being asked for password. I know how to do it with pam in linux, but the question now is for FreeBSD. I am not ...
0
votes
0answers
65 views

Reliable CIFS mount using PAM: Do not unmount on logout, allow re-mount if forcibly unmounted

In our group, the group shares and Windows homes are hosted on a CIFS NAS. These locations are mounted using PAM from the Linux boxes. However, automatic logout is incompatible with screen and other ...
0
votes
2answers
112 views

LDAP auth in Ubuntu PAM?

I have a 64-bit Ubuntu 11.04 server I'm setting up, and I would like to configure it to use LDAP for authentication. The LDAP server happens to be an ActiveDirectory server, but I'm not trying to bind ...
0
votes
0answers
321 views

vsftp login errors 530 login incorrect

Using Ubuntu 10.04 on an aws ec2 instance. I was happy just using ssh but then a wordpress plugin needs ftp access...I just need ftp access for one site www.sitebuilt.net which is in /home/sitebuil. ...
0
votes
1answer
190 views

Apache Kerberos Authentication with LDAP Authorization: access to / failed, reason: require directives present and no Authoritative handler

I am trying to get a VirtualHost (well multiple VirutalHosts) up and running with kerberos authentication and group requirements. My latest configuration within the <Directory> directive looks ...
1
vote
1answer
251 views

pam_mount of smb share on rhel6, home directory not available for login - probably SELinux?

I'm using the Fedora 12 pam_mount / libHX RPMs on a RHEL 6 x86_64 system to automatically mount home directories from a NetApp system configured with NTFS-only security AD-bound logins work fine - ...
1
vote
3answers
57 views

Limiting SSH root logins to only “safe” networks in OpenSSH 4.x

We want to limit root SSH login to only a few networks that we consider "safe" (VPN, etc.) without imposing the same condition on other accounts. In OpenSSH 5.x, we could use the match block. ...
0
votes
1answer
112 views

Installing pam_mount on CentOS 5

I'm working on getting a CentOS 5 system that I've successfully gotten to authenticate with AD, to automount the user home directories from AD. After searching around, I found pam_mount, which seemed ...
0
votes
1answer
70 views

limits.conf not being applied.

I have the following lines in /etc/security/limits.conf * soft nofile 32768 * hard nofile 65536 root soft nofile 32768 root ...
0
votes
0answers
48 views

How to realize single sign on with pam and php apps?

Let's say that I've a server in the internet. Every user connect through an ssh tunnel to a various of php apps on it. Is it somehow possible to reuse the ssh authentication for these php apps, which ...
1
vote
0answers
116 views

User not recognized by underlying authentication

I'm running lxc on Linux Mint Debian Edition tracking Wheezy/Sid. I created a container using "lxc-create -t debian -n dev". In accordance with the Debian wiki article on LXC I have mounted the ...
0
votes
2answers
49 views

Configure interactive keyboard authentication

I have a linux machine running OpenSSH Server 4.3. How can I configure it to use keyboard-interactive authentication - define prompts and responses and so on. Please be specific, as I am pretty new ...
2
votes
1answer
122 views

Expired “authentication token” for user with deleted password

The Setup: 1) The user's password was deleted with "passwd -d " command 2) The user has cron jobs running The Problem: Once every 30 days (default password expiration policy) the cron fails with an ...
1
vote
0answers
178 views

pam_unix(sshd:auth): auth could not identify password for [admin] - sshd[6968]?

Why is the following log produced? pam_unix(sshd:auth): auth could not identify password for [admin] - sshd[6968] Is it because of a timeout, or is there some other reason?
1
vote
1answer
196 views

debian: cannot change password

As the root user, I can change the password: hussie:/home/claudiu# passwd Enter new password: Retype new password: passwd: password updated successfully As a non-root user I cannot: ...
0
votes
1answer
154 views

pppd PAM use and combining with CHAP/MSCHAP

Managed to successfully configure pppd to use PAM (/etc/pam.d/ppp) for authentication steps (used login option in addition to auth). However, this seems to work only for PAP (require pap, refuse ...
1
vote
1answer
167 views

Account lockout using Openldap

What is the best way to implement account lockout in openldap? I have an openldap server with Ubuntu desktop client connecting to it for authentication. I want he accounts to locked out after say 5 ...
0
votes
1answer
74 views

Postfix/Dovecot don't use pam_mkhomedir

I have users in external database. So far - ssh, postfix, dovecot and some others - use entries with no problem. I have Maildirs inside /home/[user] and if the homedir exists - everything is ok - ...
2
votes
0answers
99 views

Logging on as root without winbind timeouts

How can I set up my Linux box so that, if the Active Directory domain controller is down, I can still log in as root, without any timeouts or delays? Following the example of most of the ...
0
votes
2answers
104 views

Postfix not connecting to sql database

I have postfix set up to use postfix/proxymap to store configs. I get this error when trying to end email. Nov 9 06:18:33 mail postfix/pickup[16979]: D1A5E18F30: uid=2000 from=<rperkins> Nov ...
0
votes
2answers
173 views

Make user home directory at gdm login

I'm trying to make home directory at (RADIUS) user gdm login. The auth is working right, but when I try gdm says that the user hasn't a home directory. I tried to do that with pam_mkhomedir.so but ...
1
vote
1answer
721 views

smbpasswd: Failed to add entry for user

tl;dr Assuming a basic (but functioning) LDAP/PAM configuration, how come smbpasswd fails with this error message when I try to add an existing UNIX/LDAP user to Samba? I have a basic, but working ...
2
votes
1answer
428 views

Where do I find USEFUL official documentation for LDAP authentication on Centos/RHEL 6?

Does it exist any official installation documentation about how to setup an LDAP server that I can connect my clients to with authconfig. I'm will be Centos 6 and RHEL 6.1. What I can find is this. ...
0
votes
1answer
134 views

CentOS 6 - php5-pam-auth?

Where do I get an updated version of the PHP pam_auth module? Can't find it on yum and the latest version I can find to download is for PHP 4.3.
0
votes
1answer
129 views

pam_ldap, where is the filter set?

A while ago I asked a question about this same issue already (Cyrus on CentOS with sasl / pam / ldap), and I came a bit further. The Bind DN is no longer empty; LDAP works with all apps except imap. ...
1
vote
1answer
391 views

VsFTPd - pam_mkhomedir

I am trying to set up a FTP server that authenticates against an LDAP server. This part is done and works. My server is VsFTPd on Ubuntu Server 11.04. But I have to create the home directories for my ...
4
votes
6answers
348 views

How to customize telnet login prompt on linux

When I run login command on debian, I get: hostname login: _ on RHEL5, Solaris or HP-UX I get: login: _ I need to be able to customize login: and password: prompts it on a Linux box. I can ...
1
vote
2answers
772 views

VsFTPd - LDAP - PAM

I am trying to configure a VsFTPd server to authenticate agains an LDAP server. It may be easy, but since it is the first time that I am using both LDAP and PAM, I have some difficulties. VsFTPd runs ...
1
vote
1answer
262 views

VsFTPd - LDAP - PAM [closed]

Possible Duplicate: VsFTPd - LDAP - PAM I am trying to configure a VsFTPd server to authenticate agains an LDAP server. It may be easy, but since it is the first time that I am using both ...
0
votes
0answers
88 views

error in auth.log but can login; LDAP/PAM

I have a server running OpenLDAP. When I start a ssh-session I can log in without problems, but an error appears in the logs. This only happens when I log in with a LDAP account (so not with a system ...
2
votes
1answer
133 views

Problem with mixed cases in username

We have integrated a linux thin client with an AD using kerberos, pam and winbindd. We are using pam_mkhomedir to make the home dir, and that works fine. But the login scripts don't run when the AD ...
2
votes
1answer
183 views

Account lockout in Ubuntu

I am trying to implement account lockout for Ubuntu systems using pam_tally. The login should be disabled for certain interval on 3 invalid login attempts. This should happen for both system and LDAP ...
1
vote
2answers
890 views

How can I install pam_mount on Centos 6 x86_64?

I need to use pam_mount to mount user home directories individually at the time that each user logs in. I cant locate a package for this, at least for Centos 6. I would not have a problem building ...
0
votes
0answers
105 views

Limit access on linux via LDAP, PAM, Active Directory, and Security Group

We run AD on server 2008. It has been determined that we won't install services for unix. Knowing that is it possible to limit user access to linux machines based on security groups using only LDAPS? ...
3
votes
1answer
123 views

Samba, password change and windows error messages

I moved password quality checking in Samba from check password script to PAM, now when pam_passwdqc or pam_cracklib deny password change the user revives a "Access denied" error, not the standard "The ...
1
vote
1answer
79 views

Changing eDirectory Password From Linux Machine

I have Configured LDAP Authentication for my Linux Machines. The LDAP Server is Novell eDirectory. The LDAP Users are able to login into the machine. But when i am issuing passwd command it is asking ...
0
votes
0answers
385 views

SASL PLAIN authentication failed: no mechanism available

I'm using postfix smtp while having encrypted passwords in mysql database. Passwords are checked through Cyrus SASL and PAM. I updated my debian server to the recent versions of postfix and cyrus ...
2
votes
4answers
2k views

Centos 6 Linux and nss-pam-ldapd

I am trying get centos 6 to authenticate against ldap (active directory to be specific) I am a bit confuse though because after installing nss-pam-ldapd I see several files that appear to be the same ...
0
votes
1answer
199 views

Google Authenticator PAM for specific users

My current sshd PAM config: #%PAM-1.0 auth include system-auth account required pam_nologin.so account include system-auth password include system-auth session ...

1 2 3 4