2
votes
1answer
44 views

pam service(sshd) ignoring max retries

I have vps that I use to run a webserver on, it currently runs ubuntu server 12.04. Since a few weeks I keep getting a lot of errors in my ssh console. 2014 Apr 11 08:41:18 vps847 PAM service(sshd) ...
0
votes
0answers
22 views

pam_unix and pam_userdb authentication failure log for VSFTPD

I see this in my /var/log/auth.log file for all the connection to my FTP server : Mar 26 12:30:13 production vsftpd: pam_unix(vsftpd:auth): check pass; user unknown Mar 26 12:30:13 production vsftpd: ...
0
votes
2answers
175 views

ulimit -n not changing - values limits.conf has no effect

I am trying to raise the open file descriptor maximum for all users on an ubuntu machine. This question is somewhat of a follow up to this question. open file descriptor limits.conf setting ...
0
votes
0answers
82 views

How to ask memcached auth connection by sasl and pam?

I use memcached in a untrust network, so I try to use sasl and pam to auth connection to memcached. I installed sasl and pam module, compiled and installed memcached with sasl enabled. Also I created ...
0
votes
0answers
119 views

pam-auth-update without the text UI

Is there a way to run pam-auth-update (or some equivalent command), non-interactively on Ubuntu 12.04. I'm trying to automate this process for a number of machines, and the curses interface is making ...
0
votes
0answers
447 views

How does changes in /etc/pam.d/common-session-noninteractive affect fail2ban and possibly other programs/services?

Fail2Ban on Ubuntu 10.04 Configuration files /etc/fail2ban/jail.local [DEFAULT] ignoreip = 127.0.0.1 bantime = 10 # made for test purposes maxretry = 3 backend = polling destemail = ...
0
votes
0answers
310 views

Why would Dovecot POP3 and IMAP Authentication from external IP address stop working?

Over a year ago I setup a Dovecot 1.2.9 POP3/IMAP server (which works alongside a Postfix SMTP server) with PAM authentication. This has been operating (I believe) without incident until recently ...
1
vote
1answer
300 views

Ubuntu 12.10 - Can't find my logs

Up until few days ago, my Ubuntu 10.04 worked like a clock. Then I switched to Ubuntu 12.10 and things don't work the same way with this setup. First, the new system wasn't logging any mail activity, ...
2
votes
1answer
948 views

Ubuntu 12.04 updates broke VSFTP

I am running Ubuntu 12.04 LTS. I did some minor updates using apt. After rebooting vsftp stopped accepting connections system user logins. In the auth log I am getting the following errors Dec 22 ...
0
votes
2answers
375 views

Whitelist IP from google-authenticator in sshd pam

My Ubuntu 12.04 server uses the google-authenticator pam module to provide two step authentication for ssh. I need to make it so that a certain IP does not need to type the verification code. The ...
2
votes
1answer
494 views

Linux ldap authentication, pam_filter ignored

I've set up linux client authentication via ldap, it works. I want to control user's access to several services by adding or removing different OUs for accounts. E.g., if user is allowed to login ...
0
votes
1answer
1k views

libpam-ldapd not looking for secondary groups

I'm migrating from libpam-ldap to libpam-ldapd. I'm having some trouble gathering the secondary groups from LDAP. On libpam-ldap, I had this on the /etc/ldap.conf file: nss_schema rfc2307bis ...
3
votes
1answer
207 views

Weird stuff in in my /var/log/auth.log

I just check my logs on my deed serv, i spotted some weird log in the auth.log : Jun 17 22:27:01 mutualab CRON[16249]: pam_unix(cron:session): session opened for user user by (uid=0) Jun 17 22:27:01 ...
1
vote
1answer
266 views

pam_ecryptfs: Error getting passwd (ProFTPD)

proftpd: pam_ecryptfs: Error getting passwd info for user [USERNAME] I am getting this error in the syslog nearly every time any user connects via FTP, the user is able to connect and the session ...
0
votes
1answer
253 views

login faild when autorize dovecot from pam

I installed dovecot 2.0.13 with postfix in ubuntu server 11.10 , after installation I can send e-mail with the mail command and dovecot works when I test it with telnet I then installed roundcube on ...
0
votes
2answers
262 views

LDAP auth in Ubuntu PAM?

I have a 64-bit Ubuntu 11.04 server I'm setting up, and I would like to configure it to use LDAP for authentication. The LDAP server happens to be an ActiveDirectory server, but I'm not trying to bind ...
3
votes
3answers
2k views

limits.conf not being applied.

I have the following lines in /etc/security/limits.conf * soft nofile 32768 * hard nofile 65536 root soft nofile 32768 root ...
0
votes
2answers
434 views

Make user home directory at gdm login

I'm trying to make home directory at (RADIUS) user gdm login. The auth is working right, but when I try gdm says that the user hasn't a home directory. I tried to do that with pam_mkhomedir.so but ...
3
votes
2answers
674 views

Account lockout in Ubuntu

I am trying to implement account lockout for Ubuntu systems using pam_tally. The login should be disabled for certain interval on 3 invalid login attempts. This should happen for both system and LDAP ...
4
votes
3answers
2k views

libpam-ldap or libpam-ldapd?

I'm setting up LDAP authentication on my personal VPS, and Ubuntu has two packages for the same purpose: libpam-ldap and libpam-ldapd. Which should I use?
0
votes
2answers
2k views

Ubuntu 11.04 pam_userdb.so missing

We just upgraded Ubuntu Server 10.10 to 11.04. After this upgrade, it seems Vsftpd with pam_userdb logins no longer work. I was investigating this and it seems /lib/security/pam_userdb.so is missing. ...
0
votes
1answer
657 views

vsftpd virtual users home directories with pam-mysql

ive saw many solutions like homedir=/somepath/$USER where $USER takes from sysvar and i want to change it for every user with mysql database. Im using it with pam-mysql so it will look like Id login ...
8
votes
1answer
4k views

open file descriptor limits.conf setting isn't read by ulimit even when pam_limits.so is required

I am trying to raise the open file descriptor maximum for all users on an ubuntu machine. I've added the following lines to /etc/security/limits.conf: * soft nofile 100000 ...
3
votes
2answers
1k views

Using ecryptfs encrypted home directories with Dovecot

I have setup home directory encryption on Ubuntu 10.04 machine, but ecryptfs does not seem to be able to work with Dovecot (or CourierIMAP, etc). After successful IMAP login, home directory is never ...
3
votes
4answers
965 views

/usr/bin/sshd isn't linked against PAM on one of my systems. What is wrong and how can I fix it?

I'm using AD as my user account server with ldap. Most of the servers run with UsePam yes except this one, it has lack of pam support on sshd. root@linserv9:~# ldd /usr/sbin/sshd ...
1
vote
6answers
996 views

Authentication failed of pure-ftpd

I installed pure-ftpd on Ubuntu 8.04 using aptitude install pure-ftpd What's the step to add users? I'm new to pure-ftpd and PAM authentication. but I followed pure-ftpd documentation to do pure-pw ...
3
votes
2answers
7k views

PAM / LDAP authentication with Ubuntu 10.04

I can't wrap my brain around the new pam.d configuration syntax used in Ubuntu 10.04. How do I setup PAM so that it allows users stored in my LDAP database to login. I already configured nscd, so id ...
15
votes
1answer
18k views
4
votes
5answers
4k views

Multiple logins with pam_mount means multiple (redundant) mounts

I've configured pam_mount.so to automagically mount a cifs share when users login; the problem is if a user logs into multiple times simultaneously, the mount command is repeated multiple times. ...
0
votes
2answers
753 views

Configuring PAM with pam_mount; getting a dlopen() with an HX_Init error

I'm trying to get automounting upon login working on Ubuntu 10.03 Beta 2. I didn't find a package for pam_mount, so I ended downloading it and building it. This required: sudo apt-get install ...
1
vote
2answers
660 views

Suggest methods for testing changes to “pam.d/common-*” files

How do I test the changes to the pam.d configuration files: Do I need to restart the PAM service to test the changes? Should I go through every service listed in the /etc/pam.d/ directory? I'm ...
0
votes
1answer
94 views

Decoding PAM configuration files

Could someone point me to some (recent) documentation that would help me with decoding PAM configuration file lines like this: auth [success=2 default=ignore] pam_unix.so nullok_secure auth ...
7
votes
3answers
6k views

Restricting account logins using LDAP and PAM

I was hoping some PAM/LDAP gurus may be able to help me out here. I've recently set up an LDAP directory on Ubuntu Server to hold accounts for both my clients (for use with web-based systems) and ...
0
votes
2answers
897 views

Telnet without passwords

Back in the days of Redhat 9 I set up networks using dumb terminals that used telnet to log in to the server. And simply by deleting the 'X' in /etc/passwd for the user, the user could log in with a ...
2
votes
3answers
6k views

How to use Linux username and password with Subversion?

I'd like to setup Subversion repository so that same username and password could be used to access repository as in ssh login. I managed to get login work so that correct username is required, but it ...
6
votes
4answers
1k views

Ubuntu linux takes longer time for incorrect passwords

When I log into my Ubuntu 8.10 box with a correct password the system figures out almost instantaneously that the password is correct and logs me in. However, if I supply an incorrect password, it ...