Pluggable Authentication Modules handle authentication tasks of applications or services running on the system.

learn more… | top users | synonyms

1
vote
1answer
43 views

Find out which program is asking for privilege escalation?

I have a finger print reader on my laptop, and I configured PAM with fprintd, sometimes when it lights up, I want to find out which program is asking for a privilege escalation. Any ideas?
1
vote
1answer
350 views

Unable to log in to Ubuntu server 10.04 after trying to join Windows domain

I was trying to join our Ubuntu 10.04 server to the Windows domain and I ended up editing the pam.d configuration files. My aim was to have domain users log into the Ubuntu server with their domain ...
2
votes
2answers
207 views

Allow 1 hour only in day with PAM

How to allow user to access system only 1 hour in day using PAM? For example I wish to give access to a user only for 1hr on a workstation in 24hrs. First the 24hr time period needs to be defined, as ...
3
votes
1answer
791 views

Setting ulimits without PAM

How to do that? Without PAM on my GNU/Linux OS the number of open files is 1024 by default and cannot be raised above 4096 (via ulimit -n NNNN command) despiting what is written in ...
4
votes
1answer
2k views

How to have pam_exec run the script as the current user?

I need to run a script, when the session is opened, as the user who's opening the session. I have added in /etc/pam.d/common-session : session optional pam_exec.so ...
0
votes
2answers
5k views

Avoid asking password if `su -m user command` is used under `user`?

If I run the script containing su -m user service userservice start under root user, I do not need to enter the password. But when I run it under user user, it asks passwords all the time. That really ...
3
votes
1answer
325 views

Configure SCP access for login without a local account

Can I set up accounts that can do SCP that are NOT local users (i.e. users with an entry in /etc/passwd)? I've tried googling for SCP "without PAM authentication" or alternative authenication for sshd ...
3
votes
2answers
3k views

Ubuntu password policy

I want to set the system-wide password policy on an Ubuntu 12.04 LTS server. Googling around, a lot of people point to this (very old) document: ...
0
votes
2answers
3k views

Winbind PAM.D AD Groups, CentOS 5, Allow Only?

I'm attempting to create a configuration, where users in specified AD groups can log in. I'm having trouble stopping every AD user from logging in. I've been doing this though /etc/pam.d/sshd/ but ...
6
votes
4answers
2k views

Is it possible to change password database file(/etc/passwd) in linux?

Is it possible to change password database file(/etc/passwd) to some other file. How does this authentication mechanism work internally ? Does it depend on pam ?
8
votes
2answers
13k views

Effect of entries in /etc/securetty

By default on RHEL 5.5 I have [deuberger@saleen trunk]$ sudo cat /etc/securetty console vc/1 vc/2 vc/3 vc/4 vc/5 vc/6 vc/7 vc/8 vc/9 vc/10 vc/11 tty1 tty2 tty3 tty4 tty5 tty6 tty7 tty8 tty9 tty10 ...
16
votes
2answers
3k views

How does one change the delay that occurs after entering an incorrect password?

After entering an incorrect password at a login prompt, there s an approximately 3-second delay. How can I change that on a Linux system with PAM?
2
votes
1answer
307 views

Locked out by pamd. Help!

I recently changed some pamd settings because I wanted my ssh keys unlocked at login. I followed the instructions at this wiki page. Ignoring the warning, I have become locked out (cannot log in ...
2
votes
1answer
510 views

Pamd not mounting ecryptfs disk anymore since upgrade

I have encrypted my home disk a long time ago and I configured pam to mount it automatically on login. However after update to version 1.1.5-3 pam is not mounting the disk anymore. Here are the logs ...
2
votes
4answers
15k views

vsftpd fails pam authentication

Moving a tried-and-true vsftpd configuration onto a new server with Fedora 16, I ran into a problem. All seems to go as it should, but user authentication fails. I cannot find any entry in any log ...
2
votes
1answer
2k views

Problem with pam_mount and sshfs

I'm trying to configure automounting of users home directories using pam_mount and sshfs (users are LDAP users on remote machine). I configured pam_mount: <?xml version="1.0" encoding="utf-8" ...
4
votes
2answers
2k views

What are the reasons Slackware still refuses to include PAM?

I know that Pat Volkerding didn't include PAM back in the day when it was considered by some to be messy or inconsistent, although that doesn't really seem to be the case today with PAM being ...
3
votes
1answer
624 views

Is /sbin/sulogin safe?

Lately my machine's authentication system broke twice: once because I messed up with PAM/LDAP and the other one because I messed up with /etc/passwd or /etc/shadow. In order to recover things I had ...
6
votes
1answer
941 views

How to make a system lock when the USB pendrive with authentication key is removed?

Say, I have USB drive authentication up and working. So far, so hoopy. But now I want to take the next step, which is locking the machine when I eject the medium. I know there is udev I can script, ...
1
vote
1answer
352 views

Can't su root after editing PAM confiugration on Rackspace Linux box

I've just hosed a system. Working on pam-ldap on an Ubuntu box, I've run pam-auth-update and told it to override local modifications (which had previously allowed for sudo su, but I was having issues ...
1
vote
1answer
1k views

python-pam not working… How to dig for the error?

I have a django application where users should be able to login according to the system's shadow database. I found this login backend which uses python-pam, as far as I can tell. While installing the ...
6
votes
4answers
2k views

SSH authentication: either SSH keys or one time password

I have an Ubuntu 10.04 Linux server that I normally ssh into (from my home machine) using ssh key authentication. However, sometimes I need to ssh remotely from potentially insecure machines (like ...
5
votes
1answer
3k views

Preventing `passwd` for asking for the local password

I have setup the sever to only use LDAP for authentication by using authconfig-tui. Everything works well but, when I run passwd, I get two prompts for a password: [beamin@rhel6-test-server1 ~]$ ...
4
votes
1answer
257 views

Confused about PAM configuration stanza and the roles of the control-flag parameters

I just begun studying for the RHCE. While on the topic of PAM configuration, I was a little perplexed with this stanza from /etc/pam.d/system-auth: auth required pam_env.so auth ...
6
votes
1answer
465 views

Backing up and restoring a system user account

How would I go about completely backing up a user account and restoring it on a new system? The Home directory is just 'copy-and-paste'. But then what about things like the account password; and its ...
2
votes
1answer
188 views

Why can I still log in via SSH (PAM Auth) while `shutdown -k` is active?

Pretty straight-forward. Does SSH ignore the nologin file created by shutdown -k TIME? Using PAM Auth to sync password database to users; if that makes a difference.
5
votes
1answer
931 views

Allow su without password for users in a particular Active Directory group when using pam_winbind

I know on my Gentoo system, the /etc/pam.d/su file comes with the following commented out: auth sufficient pam_wheel.so use_uid trust Which allows a user to su to root without a password as ...
2
votes
1answer
89 views

Automated PAM module installation

I'm trying to set up an automated install process for a PAM module that provides LDAP-like HTTP authentication. Since this is an alternative authentication module, I would need to add something like ...
1
vote
2answers
1k views

newgrp and groups assigned via pam_group.so

For convenience reasons I tend to assign special group memberships like floppy, audio, plugdev, video etc. via /etc/security/group.conf (pam_group.so) mechanism instead of adding all users to this ...
5
votes
1answer
671 views

Custom PAM modules and security considerations

I am writing my own PAM module that will be part of an application that I am developing, but I'm not sure exactly where to put it. My module basically does network-level authentication (with other ...
2
votes
2answers
1k views

SFTP with Mysql user pass instead of PAM

Is there a way for people to log onto a debian server via sftp using just mysql database table as authentaction. IE not adding a user to the system? I know it can be done over ftp and TLS but i ...
2
votes
1answer
163 views

Is it possible to set su to use WE password dialog

I have sometimes problem when during entering password for su other window appears and steals the focus ("wait - did I just entered root password on public IRC chatroom?" - it did not happened but ...
4
votes
2answers
4k views

Can I create a local only guest account?

Is it possible to create a "guest" account in Linux? by "guest" account I mean an account that does not require a password to log in graphically. I want this account for when people come over and are ...
5
votes
1answer
3k views

What happens when your password expires and you're using key authentication?

on one of the boxes I don't control at work I use ssh keys to log in. Our passwords are set to expire after a few months. What happens if I don't reset my password and it expires? will I still be able ...
3
votes
1answer
2k views

Automatically mount encrypted home folder on login

I'm looking into encrypting my home folder with Truecrypt, and mounting it after I've logged in, which should be pretty straightforward. However, it occurred to me that it should be theoretically ...
7
votes
1answer
701 views

What steps does the system go through when handling an SSH connection?

What steps does the system go through when handling an SSH connection? We try to log in via ssh sshd starts pam and pam module to authenticate us Depending on pam configuration, we need to provide ...
7
votes
5answers
20k views

Program for decrypt linux shadow file

Is there any program or script available for decrypt Linux shadow file ?
46
votes
2answers
11k views

Why is there a big delay after entering a wrong password?

I notice a weird (well, according to me) thing about passwords. For example, if I type an incorrect password during login, there will be a few seconds' delay before the system tells me so. When I try ...
7
votes
4answers
1k views

How to set up two-factor authentication with OTP on FreeBSD?

I have a FreeBSD hosted server that I like to be able to get to from anywhere. Normally I use SSH publickey to log in, or if I don't have my SSH private key available then I might use regular password ...
4
votes
6answers
978 views

Identity Management with ActiveDirectory

What is the best, or most reliable, way to manage my Unix/Linux user accounts with ActiveDirectory? Or, is this even feasible?