0
votes
1answer
276 views

CentOS PAM unable to open /etc/pam.d/system-auth

In gdm I have checked "Require smartcard login" but forgot about adding any smartcard for authentication. Then I've tried to boot from LiveCD and disable SC auth. Something went wrong and now I am not ...
5
votes
1answer
141 views

Combination of SSH key auth, and two-factor authentication

I was wondering if it is possible to accomplish the following, all at the same time: Disable root logins Enable SSH login for personal user, only via SSH keys Enable SSH login for unprivileged user, ...
0
votes
0answers
143 views

Pam password policy not working for root

I was following this guide (http://xmodulo.com/2013/12/set-password-policy-linux.html) for setting up pam and password for policy for CentOS. Everything works great except the root or any user's ...
0
votes
1answer
112 views

When changing passwords, how to let one PAM module check for old passwords and another to save new ones?

Our server is currently using the blowfish cipher to store passwords and it uses pam_unix2. We'd like to gradually switch to SHA. The idea is that all newly changed passwords would be hashed with SHA. ...
4
votes
1answer
3k views

Users cannot use crontab after password security upgrade

I have a box being upgraded from CentOS 5 to CentOS 6. On the original server, all users have MD5 passwords. The upgraded server is now using SHA-512 passwords. Users who have changed their password ...
5
votes
1answer
2k views

Expired “authentication token” for user with deleted password

The Setup: 1) The user's password was deleted with "passwd -d " command 2) The user has cron jobs running The Problem: Once every 30 days (default password expiration policy) the cron fails with an ...
2
votes
2answers
3k views

debian: cannot change password

As the root user, I can change the password: hussie:/home/claudiu# passwd Enter new password: Retype new password: passwd: password updated successfully As a non-root user I cannot: ...
3
votes
1answer
290 views

Samba, password change and windows error messages

I moved password quality checking in Samba from check password script to PAM, now when pam_passwdqc or pam_cracklib deny password change the user revives a "Access denied" error, not the standard "The ...
1
vote
1answer
443 views

Linux password complexity settings

I have two questions about the system-auth file 1) If the /etc/pam.d/system-auth password complexity settings are changed on an existing system, does it invalidate any existing passwords? 2) Is it ...
0
votes
2answers
114 views

PAM : Reject the standard password

I want to reject our standard password in pam for the services until the user change it. It is a fixed password, well known by our users, but I don't know how I can configure pam to refuse it. I check ...
0
votes
1answer
434 views

PAM cracklib vs login.defs

If there are different parameters set for minimum password length in pam_cracklib and login.defs. Which takes precedence ? Any good docs/books about PAM ?
0
votes
1answer
438 views

problem of Configure linux password rules: password shouldn't be the reverse of previous password

I am configuring password rules in linux system(RedHat Enterprise linux 5). By google, I found that using pam_cracklib will make simple check automatically. That is, pam_cracklib will automatically ...
2
votes
3answers
979 views

How to set up two-factor authentication with OTP on FreeBSD?

I have a FreeBSD server that I like to be able to get to from anywhere. Normally I use SSH publickey to log in, or if I don't have my SSH private key available then I might use regular password over ...
2
votes
4answers
3k views

How to access Unix passwd file from Apache when using .htaccess?

Is it possible to use the system passwd file for accessing a protected web page with Apache on Linux? Setting up multiple password files for shell access, Apache and Samba is a pain. If there is a ...