Pluggable authentication modules, a flexible framework for configuring authentication, most commonly the login component of Linux systems, but used in other components and operating systems.

learn more… | top users | synonyms

4
votes
2answers
347 views

Samba: read-only LDAP + additional local users

My server has access to a read-only LDAP where information about 99% of user accounts will reside. On my server I want to configure Samba to use LDAP for authentication. Now and then there will be ...
1
vote
1answer
502 views

Can't configure PAM + LDAP on Debian Lenny - Getting error=49 on server logs

I've been migrating some servers and desktops using Ubuntu 10.04 from getting the users from an old OpenLDAP implementation to a newer Centos Active Directory. I haven't had any problems so far, until ...
2
votes
1answer
478 views

pam_cracklib on Linux: how to disable credits

The pam_cracklib 'minlen' does not work as I want it to. PAM allows passwords even with lesser length than it is set to with the 'minlen' option. It gives credits (by default 1) to the 'upper-case', ...
5
votes
1answer
4k views

Users cannot use crontab after password security upgrade

I have a box being upgraded from CentOS 5 to CentOS 6. On the original server, all users have MD5 passwords. The upgraded server is now using SHA-512 passwords. Users who have changed their password ...
0
votes
1answer
541 views

pam_radius_auth.so - Setting up Radius on RHEL 5.6

I am currently dissecting a single-sign-on RPM. Contained within the RPM there is the module pam_radius_auth.so. Based on the documentation here: http://freeradius.org/pam_radius_auth/ and here: ...
1
vote
1answer
3k views

LdapErr: DSID-0C0903AA, data 52e: authenticating against AD '08 with pam_ldap

I have full admin access to the AD '08 server I'm trying to authenticate towards. The error code means invalid credentials, but I wish this was as simple as me typing in the wrong password. First ...
2
votes
2answers
662 views

pam_unix(su:session): session opened for user

Jun 26 15:58:52 hostme su: pam_unix(su:session): session opened for user {USER} by root(uid=0) Jun 26 15:59:02 hostme su: pam_unix(su:session): session opened for user {USER} by root(uid=0) Jun 26 ...
1
vote
1answer
2k views

nginx public webdav server

Can you check the user group from a $remote_user? location ~ ^/dav/(.*)$ { alias /home/$remote_user/$1; auth_pam "Restricted"; auth_pam_service_name "nginx"; dav_methods PUT DELETE ...
4
votes
1answer
235 views

Weird stuff in in my /var/log/auth.log

I just check my logs on my deed server, I spotted some weird log in the auth.log: Jun 17 22:27:01 mutualab CRON[16249]: pam_unix(cron:session): session opened for user user by (uid=0) Jun 17 22:27:01 ...
1
vote
1answer
339 views

pam_ecryptfs: Error getting passwd (ProFTPD)

proftpd: pam_ecryptfs: Error getting passwd info for user [USERNAME] I am getting this error in the syslog nearly every time any user connects via FTP, the user is able to connect and the session ...
3
votes
1answer
1k views

Linux with winbind, disable local users while AD is available?

Routers and switches with RADIUS authentication can be configured such that login is disabled for locally configured users as long as the RADIUS server is available. If the RADIUS server becomes ...
0
votes
1answer
184 views

PAM module for authentication by IP or other password-disabling module

I'm looking for a Linux pam module that accepts any password for connections from a specific IP. I don't want to disable passwords completely. I need it for migration from one imap server to another ...
2
votes
3answers
2k views

How to use PAM to limit failed login attempts by IP?

I'm working through a process of hardening my server security against the daily hacking attempts that arise the moment you attach a server to an IP and give it a domain name. I get anywhere from 1 to ...
10
votes
3answers
2k views

How to deny access to disabled AD accounts via kerberos in pam_krb5?

I have a working AD/Linux/LDAP/KRB5 directory and authentication setup, with one small problem. When an account is disabled, SSH publickey authentication still allows user login. It's clear that ...
1
vote
2answers
2k views

Samba + LDAP: Newly created users cannot log in

I'm having a problem where users which recently were created are unable to log in, even though they have been added to the correct groups. When viewing the error logs, I'm getting these errors: ...
0
votes
2answers
2k views

How to enable LDAP auth for SFTP logins only

I currently use ActiveDirectory for authentication on my Ubuntu 10.04 servers using a tool called Centrify Express. Centrify has a custom .so file that is configured in /etc/pam.d/common-auth. I'd ...
3
votes
1answer
504 views

Should pam_mkhomedir go in /etc/pam.d/login , sshd or system-auth?

I want to enable pam_mkhomedir.so for users who authenticate to our system. I want a user's home directory to be created when they SSH into the box. One common convention seems to be to put ...
1
vote
3answers
460 views

Switching user in openssh using PAM

I'm trying to write a PAM module which will on login will compare the username provided against a list of "virtual" user names. If the username provided is a "virtual user" it will complete the ...
1
vote
1answer
172 views

set umask per user

It's possible to force any ssh type connection to have a umask of 0777 using pam. This is what I have: # /etc/pam.d/ssh sesssion required pam_umask.so umask=0777 I want to do this only for a ...
0
votes
1answer
179 views

Blocking failed logins using PAM

I heard Centos can block user based on failed logins. http://www.cyberciti.biz/tips/lock-unlock-set-number-of-login-attempts.html The post says by default it checks for /var/log/faillog how do I ...
3
votes
2answers
2k views

changing shadow hash algorithm to bcrypt: how to rehash

I want to change my SHA512 shadow file to use bcrypt as shown in this question/answer: Enable blowfish-based hash support for crypt The problem is that i run into a chicken and egg problem, because ...
0
votes
1answer
331 views

login faild when autorize dovecot from pam

I installed dovecot 2.0.13 with postfix in ubuntu server 11.10 , after installation I can send e-mail with the mail command and dovecot works when I test it with telnet I then installed roundcube on ...
4
votes
1answer
3k views

How to use nginx PAM module?

I would like to use nginx PAM module to authenticate a site with existing users on a FreeBSD system. I tried to use pam_unix.so, but no luck. It's just not let me in with my usr/psw pair. :( nginx ...
4
votes
2answers
1k views

How to grant su access to wheel without asking for password on FreeBSD?

I would like to grant users of the wheel group (other sysadmins) su access without being asked for password. I know how to do it with pam in linux, but the question now is for FreeBSD. I am not ...
0
votes
2answers
269 views

LDAP auth in Ubuntu PAM?

I have a 64-bit Ubuntu 11.04 server I'm setting up, and I would like to configure it to use LDAP for authentication. The LDAP server happens to be an ActiveDirectory server, but I'm not trying to bind ...
2
votes
1answer
2k views

vsftp login errors 530 login incorrect

Using Ubuntu 10.04 on an aws ec2 instance. I was happy just using ssh but then a wordpress plugin needs ftp access...I just need ftp access for one site www.sitebuilt.net which is in /home/sitebuil. ...
0
votes
1answer
913 views

Apache Kerberos Authentication with LDAP Authorization: access to / failed, reason: require directives present and no Authoritative handler

I am trying to get a VirtualHost (well multiple VirutalHosts) up and running with kerberos authentication and group requirements. My latest configuration within the <Directory> directive looks ...
1
vote
1answer
2k views

pam_mount of smb share on rhel6, home directory not available for login - probably SELinux?

I'm using the Fedora 12 pam_mount / libHX RPMs on a RHEL 6 x86_64 system to automatically mount home directories from a NetApp system configured with NTFS-only security AD-bound logins work fine - ...
1
vote
3answers
302 views

Limiting SSH root logins to only “safe” networks in OpenSSH 4.x

We want to limit root SSH login to only a few networks that we consider "safe" (VPN, etc.) without imposing the same condition on other accounts. In OpenSSH 5.x, we could use the match block. ...
0
votes
1answer
474 views

Installing pam_mount on CentOS 5

I'm working on getting a CentOS 5 system that I've successfully gotten to authenticate with AD, to automount the user home directories from AD. After searching around, I found pam_mount, which seemed ...
3
votes
4answers
3k views

limits.conf not being applied.

I have the following lines in /etc/security/limits.conf * soft nofile 32768 * hard nofile 65536 root soft nofile 32768 root ...
2
votes
0answers
1k views

User not recognized by underlying authentication

I'm running lxc on Linux Mint Debian Edition tracking Wheezy/Sid. I created a container using "lxc-create -t debian -n dev". In accordance with the Debian wiki article on LXC I have mounted the ...
0
votes
2answers
135 views

Configure interactive keyboard authentication

I have a linux machine running OpenSSH Server 4.3. How can I configure it to use keyboard-interactive authentication - define prompts and responses and so on. Please be specific, as I am pretty new ...
5
votes
1answer
3k views

Expired “authentication token” for user with deleted password

The Setup: 1) The user's password was deleted with "passwd -d " command 2) The user has cron jobs running The Problem: Once every 30 days (default password expiration policy) the cron fails with an ...
2
votes
1answer
1k views

pam_unix(sshd:auth): auth could not identify password for [admin] - sshd[6968]?

Why is the following log produced? pam_unix(sshd:auth): auth could not identify password for [admin] - sshd[6968] Is it because of a timeout, or is there some other reason?
2
votes
2answers
4k views

debian: cannot change password

As the root user, I can change the password: hussie:/home/claudiu# passwd Enter new password: Retype new password: passwd: password updated successfully As a non-root user I cannot: ...
0
votes
1answer
728 views

pppd PAM use and combining with CHAP/MSCHAP

Managed to successfully configure pppd to use PAM (/etc/pam.d/ppp) for authentication steps (used login option in addition to auth). However, this seems to work only for PAP (require pap, refuse ...
1
vote
1answer
1k views

Account lockout using Openldap

What is the best way to implement account lockout in openldap? I have an openldap server with Ubuntu desktop client connecting to it for authentication. I want he accounts to locked out after say 5 ...
0
votes
1answer
273 views

Postfix/Dovecot don't use pam_mkhomedir

I have users in external database. So far - ssh, postfix, dovecot and some others - use entries with no problem. I have Maildirs inside /home/[user] and if the homedir exists - everything is ok - ...
3
votes
1answer
839 views

Logging on as root without winbind timeouts

How can I set up my Linux box so that, if the Active Directory domain controller is down, I can still log in as root, without any timeouts or delays? Following the example of most of the ...
0
votes
2answers
834 views

Postfix not connecting to sql database

I have postfix set up to use postfix/proxymap to store configs. I get this error when trying to end email. Nov 9 06:18:33 mail postfix/pickup[16979]: D1A5E18F30: uid=2000 from=<rperkins> Nov ...
0
votes
2answers
501 views

Make user home directory at gdm login

I'm trying to make home directory at (RADIUS) user gdm login. The auth is working right, but when I try gdm says that the user hasn't a home directory. I tried to do that with pam_mkhomedir.so but ...
1
vote
1answer
4k views

smbpasswd: Failed to add entry for user

tl;dr Assuming a basic (but functioning) LDAP/PAM configuration, how come smbpasswd fails with this error message when I try to add an existing UNIX/LDAP user to Samba? I have a basic, but working ...
3
votes
1answer
817 views

Where do I find USEFUL official documentation for LDAP authentication on Centos/RHEL 6?

Does it exist any official installation documentation about how to setup an LDAP server that I can connect my clients to with authconfig. I'm will be Centos 6 and RHEL 6.1. What I can find is this. ...
1
vote
1answer
2k views

CentOS 6 - php5-pam-auth?

Where do I get an updated version of the PHP pam_auth module? Can't find it on yum and the latest version I can find to download is for PHP 4.3.
0
votes
1answer
382 views

pam_ldap, where is the filter set?

A while ago I asked a question about this same issue already (Cyrus on CentOS with sasl / pam / ldap), and I came a bit further. The Bind DN is no longer empty; LDAP works with all apps except imap. ...
1
vote
3answers
2k views

VsFTPd - pam_mkhomedir

I am trying to set up a FTP server that authenticates against an LDAP server. This part is done and works. My server is VsFTPd on Ubuntu Server 11.04. But I have to create the home directories for my ...
4
votes
6answers
3k views

How to customize telnet login prompt on linux

When I run login command on debian, I get: hostname login: _ on RHEL5, Solaris or HP-UX I get: login: _ I need to be able to customize login: and password: prompts it on a Linux box. I can ...
3
votes
2answers
8k views

VsFTPd - LDAP - PAM

I am trying to configure a VsFTPd server to authenticate agains an LDAP server. It may be easy, but since it is the first time that I am using both LDAP and PAM, I have some difficulties. VsFTPd runs ...
1
vote
1answer
1k views

VsFTPd - LDAP - PAM [duplicate]

Possible Duplicate: VsFTPd - LDAP - PAM I am trying to configure a VsFTPd server to authenticate agains an LDAP server. It may be easy, but since it is the first time that I am using both ...