Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [pam]

Pluggable authentication modules, a flexible framework for configuring authentication, most commonly the login component of Linux systems, but used in other components and operating systems.

752 questions
0
votes
1 answer

Strange Change in ssh behavior + LDAP

We have a cluster with a front node that admits normal users and LDAP users. Two days ago the ssh show a strange behavior: The LDAP users can't login in the front node using password but, The LDAP users can login if they setup ssh-key in…
Zhen
  • 2,159
  • 4
  • 19
  • 31
0
votes
1 answer

What are disadvantages of using nsswitch compat?

In my current LDAP set-up "getent passwd" shows all 600+ users that exist in the LDAP, not enumerating only the 20 LDAP-users that have permission to access this netgroup/server. This can be solved by compat mode to filter the…
ujjain
  • 3,983
  • 16
  • 53
  • 91
0
votes
1 answer

LDAP queries for local users

Recently, in the company where I work, we have had a general system crash and we are figuring out the causes. Our machines are configured for LDAP authentication plus some local users in some of them. LDAP authentication works fine but we have…
ColOfAbRiX
  • 1,080
  • 2
  • 12
  • 23
0
votes
2 answers

Kerberos pre-authentication failed on nfs mount

I have the following nfs export: /home/users 192.168.1.0/24(rw,sec=krb5p,no_subtree_check,nohide,async,anonuid=65534,anongid=65534) When trying to mount that on a client I get: client:/home # mount -t nfs4 -o sec=krb5p server:/home/users…
d_inevitable
  • 209
  • 1
  • 7
  • 19
0
votes
1 answer

Dell OMSA Authentication Fail on Ubuntu

I am trying to log into an install of Dell OMSA 5 on a Dell PowerEdge 2850 running Ubuntu 8.04 LTS x64. OMSA is 32bit and is trying to load the 64bit pam modules for authentication. Whatever credentials I use to authenticate with via the OMSA web…
jwbensley
  • 4,202
  • 11
  • 58
  • 90
0
votes
1 answer

Account lockout setting in Centos 6

I'm trying to implement an account lockout after 3 fail sign-on attempt. Root is exempted. Here's what I have in my /etc/pam.d/system-auth file so far auth required pam_tally2.so deny=3 onerr=fail magic_root account required …
Johnson Brandt
  • 3
  • 1
  • 2
0
votes
2 answers

changing /etc/pam.d location

is there a way to change location of /etc/pam.d directory, or is it hardcoded into PAM? can't it be changed with some environment variable for specific client programs? for example: PAM_CONFIG_ROOT=/tmp/pam_test_configs pam_client_app or it can't…
mighq
  • 355
  • 1
  • 3
  • 11
0
votes
2 answers

Requiring two-factor ssh authentication only from certain clients

I am about to make two-factor authentication mandatory for ssh logins using libpam_google_authenticator. I'd like to be able to waive this requirement when users log in from certain IP addresses. I have this in /etc/pam.d/sshd: auth …
Flup
  • 7,978
  • 2
  • 32
  • 43
0
votes
4 answers

sshd[4344]: error: ssh_selinux_setup_pty: security_compute_relabel: Invalid argument?

OpenSSH_5.8p1, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 selinux-policy-2.4.6-338.el5 pam-0.99.6.2-12.el5 SELinux is running in permissive mode: # sestatus SELinux status: enabled SELinuxfs mount: /selinux Current mode:…
quanta
  • 51,413
  • 19
  • 159
  • 217
0
votes
1 answer

Can I setup a Samba master password?

I want to be able to connect to a Samba share as a specific user but I don't know his password, and I don't want to change it. I did this on Dovecot by setting up a master password, can I do something similar on Samba? I currently have users on ldap…
Lluís
  • 425
  • 1
  • 4
  • 22
0
votes
2 answers

Can't get pam_time.so to work with http

The /etc/security/time.conf man page contains this example: All users except for root are denied access to console-login at all times: login ; tty* & !ttyp* ; !root ; !Al0000-2400 For this to work, /etc/pam.d/login needs to have a line account…
MWB
  • 187
  • 9
0
votes
3 answers

validate only one user with pam ldap and nslcd

I want only user "theuser" to login to this host. I have tried the following in nslcd.conf: pam_authz_search (&(objectClass=posixAccount)(IsActive=TRUE)(uid=theuser)) but all can login. If instead of pam_authz_search I use the "filter" command, it…
sivann
  • 563
  • 5
  • 16
0
votes
2 answers

Whitelist IP from google-authenticator in sshd pam

My Ubuntu 12.04 server uses the google-authenticator pam module to provide two step authentication for ssh. I need to make it so that a certain IP does not need to type the verification code. The /etc/pam.d/sshd file is below: # PAM configuration…
spudwaffle
  • 111
  • 1
  • 5
0
votes
1 answer

How to merge .rpmnew files in Pluggable Authentication Modules (PAM)?

A few .rpmnew files are being created after performing an upgrade of the Fedora OS. The normal procedure for merging .rpmnew files into the original ones is to compare the differences, make the necessary changes to the configuration on the .rpmnew…
Question Overflow
  • 2,103
  • 7
  • 30
  • 45
0
votes
1 answer

Authenticate by libpam-mysql and libnss-mysql (CentOS)

I'm trying to get MySQL to function as a backend for authenticating users on CentOS 6.3. So far I have successfully installed and configured libnss-mysql. I can test this by doing: # groups testuser testuser : sftp Testuser is a member of the sftp…
Chris
  • 251
  • 2
  • 8
1 2 3
…
50 51