Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [pam]

Pluggable authentication modules, a flexible framework for configuring authentication, most commonly the login component of Linux systems, but used in other components and operating systems.

752 questions
3
votes
2 answers

FreeBSD LDAP authentication, pam_ldap, can't bind

I've been able to get some of my linux servers authenticating users against my LDAP directory server, but I've been having some trouble trying to do this with nss_ldap and pam_ldap in FreeBSD. Going from FreeBSD official docs here:…
Cory J
  • 1,568
  • 5
  • 19
  • 28
3
votes
3 answers

How to make dovecot not ask passwords from localhost?

I have set up dovecot server and I'm currently using offline imap to sync my gmail to the dovecot imap running on the localhost. Currently I'm using plain text authentication, but this results in every single mail client to ask & remember my user…
Dima
  • 305
  • 1
  • 4
  • 17
3
votes
2 answers

PAM / LDAP authentication with Ubuntu 10.04

I can't wrap my brain around the new pam.d configuration syntax used in Ubuntu 10.04. How do I setup PAM so that it allows users stored in my LDAP database to login. I already configured nscd, so id or getent passwd are already listing my…
t6d
  • 527
  • 2
  • 5
  • 12
3
votes
1 answer

Private key authentication with pam_ldap

I'd like to set up pam_ldap on some of our servers so that we can centrally manage who has access to which server, and easily revoke access if e.g. someone leaves the company. I've done some research and got this working. Hooray! However I'd also…
Gareth
  • 1,416
  • 2
  • 11
  • 12
3
votes
1 answer

Dealing with LDAP failure when using it for PAM/NSS?

I use a redundant pair of OpenLDAP servers for PAM auth and directory services via NSS. It's been 100% reliable so far, but nothing runs flawlessly forever. What steps should I take now so I have a fighting chance of recovering from failure of the…
Insyte
  • 9,394
  • 3
  • 28
  • 45
3
votes
1 answer

Securing userPassword access with OpenLDAP in RHEL

I have set up an OpenLDAP server on RHEL 5.4, and am configuring other servers to authenticate against it. I have both ldap with StartTLS and ldaps configured and working. On my client machines, my /etc/nsswitch.conf includes: passwd: files…
Cooper
  • 272
  • 2
  • 8
3
votes
0 answers

sshd on Fedora: Recent changes to UsePAM break existing security; PermitRootPassword & UsePAM no not honored, minimal PAM config doesn't work either

I did upgrade on a Fedora Server and was SHOCKED to discover thousands of root attacks on my publicly facing servers and I can't seem to figure out how to stop them! To be clear; It IS possible to log in to the root account with a password when it…
Richard T
  • 1,206
  • 12
  • 29
3
votes
1 answer

configure saslauthd with PAM

I'm trying to configure saslauthd with PAM. I created a user test with password test using useradd and passwd and I checked that I can login with su - test. [arch@vps-5220ce87 ~]$ systemctl status saslauthd ● saslauthd.service - Cyrus SASL…
Labo
  • 151
  • 4
3
votes
1 answer

id: user: no such user

I'm using Centos 7 to authenticate locally Active directory users using kerberos. I joined the realm with the Administrator and i can login/ssh through it/with it, nslookup working fine, and adcli info is working. When i create another user called…
Gopal
  • 31
  • 1
  • 2
3
votes
5 answers

su to myself without password

How can one set it up so that su to the same user that is currently logged in, that is foo$ su -c 'something' foo does not require a password? This wouldn't add or remove any security, as it should be a noop. The reason for wanting this is that I…
Peter Eisentraut
  • 3,665
  • 1
  • 24
  • 21
3
votes
1 answer

pam_unix generates a lot of open/close sessions for my domain user

I setup a new VPS with ubuntu 18.04, including virtualmin/usermin. In auth.log I see a lot of su[12936]: Successful su for domain by root su[12936]: + ??? root:domain systemd-logind[148]: New session c315 of user domain . su[12936]:…
Amos
  • 257
  • 3
  • 4
  • 10
3
votes
0 answers

Permission issue preventing increase in Open Files Limit in Ubuntu

My Digital Ocean droplet's ulimit -n yields 1024. Now it's a dedicated machine with Ubuntu 16.04, 32GB Ram, 16 Cores. I want to crank it up to 65535. The problem: I followed a bunch of steps to configure this (given at the end). However, I run into…
Hassan Baig
  • 2,325
  • 12
  • 29
  • 48
2
votes
1 answer

Add a second /etc/passwd + /etc/shadow + /etc/group combination

Is it possible to add a second /etc/passwd + /etc/shadow + /etc/group combination like this to a linux system? /etc/passwd /etc/passwd2 /etc/shadow /etc/shadow2 /etc/group /etc/group2 During authentication process PAM should use all of this…
erunima
  • 31
  • 3
2
votes
0 answers

Why all users are uid=0 when connecting through SSH?

I was testing some pam rules and I noticed that all users has uid=0 (root) when they log in to the system through SSH. Could be a reason that sshd starts automatically when the server boots up? How to avoid this? Dec 13 08:41:56 dc01 sshd[4293]:…
DRI
  • 23
  • 5
2
votes
1 answer

PAM authentication hangs because of incorrect DNS settings but who is even triggering this lookup?

Recently I ran into the issue that an application which is performing PAM authentication was hanging for up to 20 seconds before it reported whether PAM authentication was successful or not. Other applications performing PAM authentication via…
Mecki
  • 889
  • 1
  • 8
  • 16
1 2 3
…
50 51