Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [pam]

Pluggable authentication modules, a flexible framework for configuring authentication, most commonly the login component of Linux systems, but used in other components and operating systems.

752 questions
0
votes
1 answer

SSH/SFTP to Centos 7 from Coda

I am running a droplet on DO with Centos 7 - from my mac terminal I can login as root (with password) without any problems. But if I try the same from Coda (editor) I run into problems. My audit log file looks like this: Nov 15 21:19:14 ePHIcenter…
Steven M
  • 113
  • 2
0
votes
0 answers

CentOS7 ldap client not authenticating with ldap server

I am using ApacheDS which was a breeze to setup thanks to the apacheds mailing list. I am able to retrieve ldapsearch results, however, I am not able to get anything by doing a:"getent passwd ". [root@elasticmaster3 pam.d]# ldapsearch -x -H…
user5191140
  • 3
  • 1
  • 6
0
votes
1 answer

PAM standard macros and logging on CentOS7

According to the D(x) macro defined in pam_macros.h (source code) and used as follows: D(("Hello PAM World")); Where is this log located on CentOS7? Note that I am using as flag debug in my pam.d conf file. I tried also the following command: grep…
vdenotaris
  • 123
  • 2
  • 8
0
votes
2 answers

/var/log/secure reporting false positives

I have my CentOS 6 system configured to use sssd with ldap provider. I am able to login and use sudo, however /var/log/secure always reports authentication failure: Sep 18 07:09:52 serverA sudo: pam_unix(sudo:auth): authentication failure;…
Python Novice
  • 351
  • 1
  • 5
  • 13
0
votes
1 answer

pam google authenticator can't compute location of secret file

I've installed Google Authentication on all the machines in our system, and while the authentication during login works fine, our machines are producing logs that have this line over and over: sshd(pam_google_authenticator)[2 Failed to compute…
Clare
  • 3
  • 3
0
votes
3 answers

Using PAM and vsftpd without root access

I'm trying to set up a few vsftpd instances on a machine that I have no root access to. The authentication should be done through PAM with pam_listfile, like this: pam_listfile.so item=group sense=allow file=/path/filename onerr=fail I can ask the…
Zizzencs
  • 947
  • 1
  • 10
  • 22
0
votes
0 answers

centos7 pam_authz_search for *.group.company.com

Upgrading from Centos6 where we were using ldap.conf entry "pam_check_host_attr=yes" previously, with wildcard host attribute in ldap where the host attribute looked like host=*.group.company.com providing access to all servers with the domain name…
dhartford
  • 313
  • 2
  • 12
0
votes
3 answers

Disable ssh login on specified time for particular users

I would like to disable ssh login to my system for particular users say X,and Y on specified time 17.00 to 18.00. so how to achieve this ? any help would be appreciated.
Rahul
  • 67
  • 1
  • 12
0
votes
1 answer

Unable to authenticate LDAP client with PAM when pwdReset = TRUE

I have searched tons of webs and tutorials but I couldn't find an answer to my problem. I have set up OpenLDAP 2.4 on a OpenSUSE 12.3 machine with a password policy overlay. The client is a Linux Mint 17.1 machine with libnss-ldap and libpam-ldap…
rutex
  • 1
  • 2
0
votes
1 answer

tacacs+ for Linux authentication/authorization using pam_tacplus

I am using TACACS+ to authenticate Linux users using pam_tacplus.so PAM module and it works without issues. I have modified the pam_tacplus module to meet some of my custom requirements. I know by default, TACACS+ does not have any means to support…
chandank
  • 847
  • 3
  • 14
  • 31
0
votes
0 answers

ProFTPd won't allow me to log in after password change

I've changed a password for one of my users (using passwd username), and now ProFTPd won't allow that user to log in. Other users can still log in as normal. I'm running Ubuntu 14.04 LTS The error I'm getting in /var/log/auth.log…
a1phanumeric
  • 101
  • 2
0
votes
2 answers

sendmail & sasl auth on CentOS 6

I'm moving a mail server from one CentOS 6 to another. I use sendmail with sasl pam authentication. When I try to send mail it fails because the user is not authenticated and the mail client does not require password. All the configurations files…
NickSoft
  • 278
  • 6
  • 23
0
votes
1 answer

pam_mount on centos won't mount cifs

so I have this problem that pam_mount won't mount my cifs home dirs pam_mount has this in /var/log/messages: Feb 3 15:49:18 centosy nslcd[1278]: [3c9869] (re)loading /etc/nsswitch.conf Feb 3 15:49:20 centosy systemd: Starting…
Tomas
  • 259
  • 3
  • 7
  • 16
0
votes
2 answers

Linux smart card authentication

I am using puttysc to authenticate to a remote Linux server with my smart card . But as I understand, this isn't true PKI authentication - puttysc just unlocks the public key and matches it to a user account on the Linux server. Is there a way…
ring0
  • 1
  • 1
0
votes
0 answers

pam_tally is not supporting user locking after failed attempts on CentOS

After adding the below configurations in /etc/pam.d/system-auth. The user account is not getting locked after multiple failed attempts. As per the below configuration the account should be locked after 3 failed attempts and the account should be…
Mohammed Selman
  • 101
  • 1
1 2 3
…
50 51