Tagged Questions
2
votes
1answer
110 views
Restrict two way SSH and Apache authentication to non-local networks
I am using Google's open-source PAM module for two-way authentication for SSH logins and certain Apache directives. It works great, however I would like to use this only when trying to log in from an ...
0
votes
1answer
111 views
How to authenticate a user with PAM, that is not the user that started the application
I'm currently developing an authentication module for an application. The decision was made to do this by using PAM. I have made this work but it can only authenticate the user that started the ...
10
votes
2answers
271 views
Groups differ from the local ones when logging in remotely
We store our users in LDAP, alongside some groups that have meaning across different systems (organizational roles including wheel). There are also groups local to workstations, e.g. audio or video ...
6
votes
4answers
681 views
Is it possible to change password database file(/etc/passwd) in linux?
Is it possible to change password database file(/etc/passwd) to some other file. How does this authentication mechanism work internally ?
Does it depend on pam ?
0
votes
0answers
142 views
How can I setup auth/winbind to prefer local accounts over AD even if the account is in both systems?
I seem to have an interesting account/permissions problem on my RHEL 6 server. We migrated from a RHEL 3 installation and I moved over /etc/shadow,passwd,and groups so that we can maintain all of our ...
1
vote
3answers
5k views
vsftpd fails pam authentication
Moving a tried-and-true vsftpd configuration onto a new server with Fedora 16, I ran into a problem. All seems to go as it should, but user authentication fails. I cannot find any entry in any log ...
1
vote
1answer
249 views
Can't su root after editing PAM confiugration on Rackspace Linux box
I've just hosed a system. Working on pam-ldap on an Ubuntu box, I've run pam-auth-update and told it to override local modifications (which had previously allowed for sudo su, but I was having issues ...
4
votes
3answers
1k views
SSH authentication: either SSH keys or one time password
I have an Ubuntu 10.04 Linux server that I normally ssh into (from my home machine) using ssh key authentication. However, sometimes I need to ssh remotely from potentially insecure machines (like ...
4
votes
1answer
1k views
Preventing `passwd` for asking for the local password
I have setup the sever to only use LDAP for authentication by using authconfig-tui. Everything works well but, when I run passwd, I get two prompts for a password:
[beamin@rhel6-test-server1 ~]$ ...
4
votes
1answer
372 views
Custom PAM modules and security considerations
I am writing my own PAM module that will be part of an application that I am developing, but I'm not sure exactly where to put it. My module basically does network-level authentication (with other ...
30
votes
2answers
9k views
Why is there a big delay after entering a wrong password?
I notice a weird (well, according to me) thing about passwords. For example, if I type an incorrect password during login, there will be a few seconds' delay before the system tells me so. When I try ...
4
votes
6answers
797 views
Identity Management with ActiveDirectory
What is the best, or most reliable, way to manage my Unix/Linux user accounts with ActiveDirectory? Or, is this even feasible?
