Pluggable authentication modules, a flexible framework for configuring authentication, most commonly the login component of Linux systems, but used in other components and operating systems.

learn more… | top users | synonyms

1
vote
2answers
41 views

Sending automatic mail on ssh-login fails

I'm trying to let my server send me automatically an email on ssh-login. What I've done: Created a login-notify.sh file (user root, group root, chmod 755) and placed it inside /etc/ssh/ #!/bin/sh ...
2
votes
0answers
120 views

Trying to script rsync using pam_exec

I'm trying to write a bash script that will execute rsync when called by pam_exec. I've tried a couple different ways, and I'm not sure what I'm doing wrong. When I try to run the script at login by ...
3
votes
1answer
986 views

vsftpd - PAM - MySQL and pam_mkhomedir to create directories

I've been successfully using vsftpd with virtual users connecting with PAM to my mysql DB. Now I'd like to automate creation of user directories with successful vsftpd connection. Here is ...
0
votes
1answer
844 views

How does changes in /etc/pam.d/common-session-noninteractive affect fail2ban and possibly other programs/services?

Fail2Ban on Ubuntu 10.04 Configuration files /etc/fail2ban/jail.local [DEFAULT] ignoreip = 127.0.0.1 bantime = 10 # made for test purposes maxretry = 3 backend = polling destemail = ...
0
votes
0answers
15 views

Postgres on OpenSuse doesn't start after update

I tried to upgrade OpenSuse from 12.1 to 13.1 and after 'zypper update' and reboot Postgresql doesn't start. Here is the output of service postgresgl status: postgresql.service - LSB: Start the ...
2
votes
1answer
955 views

vsftpd with pam_winbind.so

I'm trying to setup vsftpd to use logins from our domain. I want the ftp users to be able to login using their active directory username/password and have be able to have full access to ...
2
votes
1answer
1k views

pam_unix(sshd:auth): auth could not identify password for [admin] - sshd[6968]?

Why is the following log produced? pam_unix(sshd:auth): auth could not identify password for [admin] - sshd[6968] Is it because of a timeout, or is there some other reason?
1
vote
1answer
2k views

libpam-ldapd not looking for secondary groups

I'm migrating from libpam-ldap to libpam-ldapd. I'm having some trouble gathering the secondary groups from LDAP. On libpam-ldap, I had this on the /etc/ldap.conf file: nss_schema rfc2307bis ...
2
votes
3answers
856 views

ProFTPD / PAM issues with new centos/virtualmin install

I just installed CentOS 5.4 on a rackspace cloud server and installed virtualmin which all seemed to go fine. The only problem I have is that I can not access the virtual servers directories via FTP. ...
10
votes
6answers
8k views

pam service(sshd) ignoring max retries

I have vps that I use to run a webserver on, it currently runs ubuntu server 12.04. Since a few weeks I keep getting a lot of errors in my ssh console. 2014 Apr 11 08:41:18 vps847 PAM service(sshd) ...
1
vote
3answers
3k views

ulimit -n not changing - values limits.conf has no effect

I am trying to raise the open file descriptor maximum for all users on an ubuntu machine. This question is somewhat of a follow up to this question. open file descriptor limits.conf setting ...
0
votes
1answer
57 views

imapd-ssl: admin: No such file or directory

I am trying to set up my VPS so I can use Thunderbird IMAP to manage my mails. First, I installed postfix and followed this guide to create an SSL certificate. Then I installed sasl2-bin and ...
3
votes
4answers
3k views

limits.conf not being applied.

I have the following lines in /etc/security/limits.conf * soft nofile 32768 * hard nofile 65536 root soft nofile 32768 root ...
-2
votes
2answers
38 views

How do PAM advanced options work, exactly?

I've been reading everything I can find on PAM (e.g. http://wpollock.com/AUnix2/PAM-Help.htm), however I'm still confused about how precisely the advanced options are supposed to work. For example, ...
4
votes
1answer
96 views

Practical ulimits

One of the projects I'm working on is moving certain puppet-applied ulimit settings away from "that sounds about right" to dynamically allocated based on the environment. This is for ...
1
vote
0answers
18 views

pwauth kerberos authentication specifying default and secondary servers

I am currently using Kerberos authentication for Basic Authentication on Apache using pwauth and mod_auth_external. I would like to add multiple servers to authenticate from, however they would have ...
1
vote
0answers
115 views

Ubuntu server + Samba + PAM + Apple OpenDirectory

Due to various reasons, we are looking to migrate our file servers from OS X Server 10.9 over to a true Samba implementation running on Ubuntu 14.04LTS. We have Ubuntu up and running with Samba ...
2
votes
1answer
5k views

PAM unable to dlopen(/lib64/security/pam_fprintd.so) causing CentOS/Redhat server to crash

CentOS 6, Parallels PLESK 10.4, Apache One of my servers went down over the weekend much to my dismay. On the day and time it occurred, my log errors/messages end with this - /var/log/secure: Jul ...
0
votes
1answer
17 views

Chrooted user logged out immediately after login

I am trying to use chroot to setup a user who can login via ssh and limit access to the /var/www directory. The server is on AWS running Amazon Linux 64-bit, openssh installed. I used ssh-keygen to ...
0
votes
1answer
105 views

su: Authentication failure

I have Ubuntu 14.04 server on which I can't use anything that relies on su. This manifests in inability to restart services or even switch users. root@ci-web1:~# su - mxx su: Authentication failure ...
2
votes
1answer
2k views

LDAP authentication on CentOS 7

After upgrading to CentOS 7 it's no longer possible to login via LDAP. With CentOS 6 I used the package pam_ldap which worked fine, but now pam_ldap is no longer available for the new version of ...
3
votes
11answers
9k views

Restrict root ssh from all but one IP/hostname

I'm wanting to restrict root ssh login coming from all but a single IP address. I was under the impression that I just had to add this to /etc/pam.d/sshd: account required pam_access.so and this ...
2
votes
1answer
110 views

Kerberos-PAM authentication failure: pam or pre-authentication

kinit -p 'username' works -- no problem with the setup of the Kerberos realm. I can't get the login from the GUI to work, however. Client auth.log: pam_krb5(gdm3:auth): user <username> ...
0
votes
1answer
39 views

PAM tty auditing on CentOS 6.4

I am trying to implement pam tty auditing using http://jaredrobinson.com/blog/linux-tty-auditing/ but it is not working for me. Can some one tell me that any thing else apart from "session required ...
0
votes
0answers
24 views

auditd auid changes after su

I try to implement individual accountability for my RHEL systems using selinux and the audit.log. I followed the instructions given here: Log all commands run by admins on production servers If I ...
0
votes
0answers
34 views

what could be causing a 30 second delay while issuing commands through salt using PAM auth?

On my salt-master, I have pam auth enabled: external_auth: pam: salt: - .* - '@runner' - '@wheel' when I run a salt command on the master, with -a pam, there is a 30 second ...
1
vote
2answers
2k views

PBIS Open AD authentication stops working on ubuntu with errors: “user accout has expired” and “is your account locked?”

We have been using PowerBroker Identity Services Open to authenticate active directory users from ubuntu hosts successfully for six months. Recently AD authentication stopped working on several ...
0
votes
3answers
2k views

Non-root user is not allowed to use crontab due to PAM restrictions [closed]

I have the issue that I am not able to use cron with my normal user ( other than root ) [coins@COINS-TEST ~]$ crontab -l Authentication service cannot retrieve authentication info You (coins) are ...
0
votes
1answer
375 views

openSUSE 13.1 pam_ldap error trying to bind invalid credentials

Environment: new install of openSUSE 13.1 into a internal network of mostly 10.2 and 10.3 openSUSE. LDAP server (@(#) $OpenLDAP: slapd 2.3.19 (Jul 28 2006 17:00:02)) running on SUSE LE 10 . ...
1
vote
2answers
473 views

Is anyone using access.conf and netgroup authentication with sssd?

I want to be able to authenticate users (via ssh) to specific groups of hosts based on the users' LDAP netgroup membership. The LDAP server is dsee7. The distro is OEL 6.5 with openldap as the client. ...
1
vote
2answers
951 views

Linux nested groups with winbind

We have several RHEL6 servers connected to Active Directory using winbind. All servers are configured identically using a configuration management tool. Servers however produce different results when ...
2
votes
2answers
877 views

pam_ldap and ldaps can't contact ldap server

I'm trying to allow authentication via LDAP on a CentOS host system. But I always get a Can't contact LDAP server error from pam_ldap. The LDAP server is pingable and authentication works perfectly ...
2
votes
3answers
2k views

How to increase max FD limit for a daemon process running under a headless user?

To increase the FD limit for a daemon process running under a headless user on a Ubuntu Linux machine we did following changes in /etc/security/limits.conf soft nofile 10000 hard nofile 10000 We ...
1
vote
1answer
43 views

SSH locale wrong

I have a debian server with locales set to hu_HU.UTF-8, and if i log in trough console it works perfectly in hungarian. It also worked with ssh logins until i disabled PAM in the sshd config. Since ...
1
vote
1answer
86 views

Suse 11 Sp2 pam-config doesn't work

I try to add pam_ldap module in Suse 11 Sp1 Server 64 bit using: pam-config -a --ldap OS information: node01:~ # file $(which pam-config) /usr/sbin/pam-config: ELF 64-bit LSB executable, ...
1
vote
1answer
799 views

Multiple sshd instances using different PAM configurations

I set up multiple open ssh daemons on different ports and would like to have them use different PAM configuration profiles. Is that possible? As far as I understand PAM determines the configuration ...
3
votes
1answer
115 views

PAM Faulty Module

After updating PAM secure log started showing: su: PAM unable to dlopen(/lib64/security/pam_rootok.so): /lib64/security/pam_rootok.so: undefined symbol: selinux_check_access su: PAM adding faulty ...
1
vote
2answers
200 views

How can I log on my linux machine with my Active Directory credentials?

I'm on a windows computer RDPing to a RHEL 7 Server. I now want to be able to log into that server using my windows domain credentials(over SSH, preferably RDP too but not necessary). Here's what I ...
1
vote
1answer
126 views

PostgreSQL user authentication against PAM

I am trying to set up authentication via PAM for PostgreSQL 9.3. I already managed to get this working on an Ubuntu 12.04 server, but I am unable to get this working on a Centos-6 install. The ...
0
votes
0answers
30 views

Solaris 11: How can I limit the number of concurrent users with PAM?

I have a solaris 11 machine that has PAM helping in an authentication process for an obscure service called netatalk. I know that PAM is involved in client authentication to the service, so if I can ...
1
vote
1answer
51 views

Is it possible to have one group or account authenticate locally, bypassing LDAP auth?

We have one RAC cluster of machines where the local UID:GID of a couple users (oracle and grid) do not match the UID:GID of those same users in LDAP. Ultimately we ought to change the UID and GID of ...
4
votes
1answer
235 views

Weird stuff in in my /var/log/auth.log

I just check my logs on my deed server, I spotted some weird log in the auth.log: Jun 17 22:27:01 mutualab CRON[16249]: pam_unix(cron:session): session opened for user user by (uid=0) Jun 17 22:27:01 ...
4
votes
2answers
1k views

How to grant su access to wheel without asking for password on FreeBSD?

I would like to grant users of the wheel group (other sysadmins) su access without being asked for password. I know how to do it with pam in linux, but the question now is for FreeBSD. I am not ...
0
votes
1answer
736 views

PAM Errors in auth.log [Debian Squeeze]

Based on the the Securing Debian article on debian.org, I added the following to /etc/pam.d/other. auth required pam_securetty.so auth required pam_unix_auth.so auth required ...
5
votes
1answer
4k views

Users cannot use crontab after password security upgrade

I have a box being upgraded from CentOS 5 to CentOS 6. On the original server, all users have MD5 passwords. The upgraded server is now using SHA-512 passwords. Users who have changed their password ...
3
votes
4answers
1k views

How can I require a certain group of users to login via LDAP while letting others use either LDAP or local login?

I have set up my system to allow either LDAP or the local password for login. I did this by adding "password sufficient pam_ldap.so" to PAM and calling "pam_unix2.so" afterwards. However I would ...
0
votes
0answers
62 views

pam_listfile works with groups but not with users

I have a strange problem: I try to restrict access to my RHEL 6.4 over pam_listfile module. Doing this with groups, it works perfectly. But if I try to do it with users, it somehow fails. Both, users ...
1
vote
1answer
335 views

Accept any SSH connection irrespective of client key

Imagine I'm setting up a honeypot, what would be the quickest way to setup SSHD to just accept any connection? and yes, this is really insecure, so please don't copy :-) Might be useful (put ...
1
vote
0answers
98 views

FreeRadius-GoogleAuthenticator-Kerberos Password Change Weirdness

We are using FreeRadius, Kerberos and Google Authenticator to implement two-factor authentication. The two factor auth works fine, both from radtest and from a Watchguard firewall. To log in, a user ...
0
votes
0answers
86 views

Can sssd-ldap authenticate non-posix users?

I am migrating a sealed MSA from using pam_ldap to pam_sss (sssd-ldap). However, pam_sss seems to have having trouble authenticating users without uidNumbers. I had thought changing ...