Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [pam]

Pluggable authentication modules, a flexible framework for configuring authentication, most commonly the login component of Linux systems, but used in other components and operating systems.

752 questions
2
votes
2 answers

pam_limits: Operation not permitted for sshd

Debian 8.0, pam 1.1.8-3.1, sshd 1:6.7p1-5. I'm trying to permanently increase the maximum number of open files. In /etc/pam.d/ I've got: /etc/pam.d# grep pam_limits.so * atd:session required pam_limits.so common-session:session required…
Yuri Ushakov
  • 1,113
  • 2
  • 8
  • 9
2
votes
2 answers

samba authentication via pam_pwdfile

When starting with the default samba configuration, what settings need to be changed to make samba authenticate it's users through pam? I'm attempting to authenticate samba users via pam, and specifically pam_pwdfile. The trouble I'm running into is…
Charles Y.
  • 123
  • 3
2
votes
0 answers

LDAP Not working for SSH connections on ubuntu 12.04

Connecting from the client to the server: $ ssh -vvv user@10.0.50.170 OpenSSH_6.2p2, OSSLShim 0.9.8r 8 Dec 2011 debug1: Reading configuration data /etc/ssh_config debug1: /etc/ssh_config line 20: Applying options for * debug1: /etc/ssh_config line…
sclarson
  • 3,684
  • 22
  • 20
2
votes
1 answer

SSHD applying different PAM rules for localhost connections

I am attempting to implement Yubikey auth via SSH. I've edited my /etc/pam.d/sshd file as follows, and it seems to work while connecting locally (ssh user@localhost): #%PAM-1.0 auth required pam_yubico.so id=20682…
Sudowned
  • 288
  • 1
  • 3
  • 13
2
votes
1 answer

vsftpd freezes after failed pam_script authentication

I have an Ubuntu 14.04 server with vsftpd and pam_script installed using apt-get. I've configured vsftpd to use pam_script for virtual user authentication and my /etc/pam.d/vsftpd file looks like this: auth sufficient pam_script.so account…
edziubudzik
  • 21
  • 2
2
votes
1 answer

How to override a user's UID coming from an LDAP directory?

I am trying to setup Linux logins for users in an LDAP directory. The directory contains users which have a UID under 1000 and I believe this is causing problems with logins to those accounts as UID under 1000 is reserved on Linux for system use.…
Server Fault
  • 3,714
  • 12
  • 54
  • 89
2
votes
2 answers

Debugging a Postfix Saslauthd PAM-PGsql authentication failure

I've set up pam-pgsql to lookup passwords in my database for Postfix via Saslauthd. I can test credentials using the command line: $ sudo testsaslauthd -u user@email.com -p password 0: NO "authentication failed" Authentication will fail, and I…
jonallard
  • 261
  • 2
  • 8
2
votes
1 answer

fail2ban did not ban anything, regardless of the settings

this is the first time that i did not find a solution here. so, hopefully it can be solved. i've installed a fresh, new ubuntu minimal system (14.04) with ssh on it. Right after that i installed fail2ban. my ssh is running on port 47629 my…
Peter Hawkins
  • 21
  • 1
2
votes
2 answers

How do I make a pam configuration to test that the account exists and ignore password?

I want to create a pam.d configuration file that will test that a user has an account but will not test the password. How should I go about this? I've tried using nullok but I've not been able to get it to work. I'm not sure this matters but I am…
John in MD
  • 221
  • 2
  • 9
2
votes
2 answers

Suse 11 Sp2 pam-config doesn't work

I try to add pam_ldap module in Suse 11 Sp1 Server 64 bit using: pam-config -a --ldap OS information: node01:~ # file $(which pam-config) /usr/sbin/pam-config: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), for GNU/Linux 2.6.4,…
c4f4t0r
  • 5,301
  • 3
  • 31
  • 42
2
votes
1 answer

PostgreSQL user authentication against PAM

I am trying to set up authentication via PAM for PostgreSQL 9.3. I already managed to get this working on an Ubuntu 12.04 server, but I am unable to get this working on a Centos-6 install. The relevant pg_hba.conf line: host all all …
elmuerte
  • 141
  • 1
  • 6
2
votes
1 answer

Accept any SSH connection irrespective of client key

Imagine I'm setting up a honeypot, what would be the quickest way to setup SSHD to just accept any connection? and yes, this is really insecure, so please don't copy :-) Might be useful (put pam_permit on the auth stack)... I just don't have much…
Craig Francis
  • 633
  • 1
  • 8
  • 23
2
votes
2 answers

passwd: Authentication token manipulation error

I am running a Ubuntu 12 machine, and have recently been working to secure it. I made all the changes from this guide. I am not running a Linode, but I used these as a starting point for setting up the firewall and such. All went smoothly, and I…
The_Anomaly
  • 131
  • 1
  • 2
2
votes
3 answers

Is anyone using access.conf and netgroup authentication with sssd?

I want to be able to authenticate users (via ssh) to specific groups of hosts based on the users' LDAP netgroup membership. The LDAP server is dsee7. The distro is OEL 6.5 with openldap as the client. The only account we don't want to authenticate…
mr.zog
  • 923
  • 3
  • 20
  • 39
2
votes
3 answers

is there a PAM module for DNSBL lookups?

I have been enumerating the remaining security concerns on one of my back-end production servers, when I came to the realization that something which could be incredibly useful was missing from my operating systems upstream repository. I have been…
RapidWebs
  • 571
  • 4
  • 13
1 2 3
…
50 51