Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [pam]

Pluggable authentication modules, a flexible framework for configuring authentication, most commonly the login component of Linux systems, but used in other components and operating systems.

752 questions
0
votes
0 answers

vsftpd with MySQL 8 - login not working

I try to set up vsftpd using MySQL database for login users via pam.d I have this config in /etc/pam.d/vsftpd: # Standard behaviour for ftpd(8). auth required pam_listfile.so item=user sense=deny file=/etc/ftpusers onerr=succeed # Note:…
netdjw
  • 121
  • 4
0
votes
0 answers

Control sudoers using oidc user data

I am implementing a Linux host login using the OpenID Connect PAM module. I use Keycloak as OIDC Identity Provider. Googling, I didn't find a solution to control the sudoers file using OIDC data (like sudoers.ldap does, for example). Are there…
graydon
  • 1
0
votes
1 answer

Dovecot auth-worker logs fails but log in works

Everytime a log in occurs I get three log lines: Mar 19 15:29:05 auth-worker(6379): Info: pam(golf@email.com,124.1.1.1,): pam_authenticate() failed: Authentication failure (Password mismatch?) Mar 19 15:29:05 auth-worker(6379):…
Grandmaster Og
  • 1
  • 1
0
votes
0 answers

Howto: Pam session steps loggued in GDM UI

On Ubuntu 20.04, with gdm3 When my user succesfuly loggued-in, I've a pam-session script that do a lot of long running jobs before starting gnome. I simple looking for writing some basic info in the GDM UI to let know the user what's going on. At…
Thomas B
  • 1
0
votes
0 answers

sshd allows login with no authentication all accounts

This morning I was logging into an Ubuntu 18 machine that luckily we use for testing and is not on the Internet. When my SSH client got to the authentication point I accidentally hit 'ESC' which means that all I did was pass a username to the client…
ZCT
  • 13
  • 2
0
votes
0 answers

Explanation of pam.conf for sshd

I’m trying to configure public key + TOTP-based 2FA based ssh on a server. The setup works perfectly, however I’m curious to know how exactly the configuration works. This is what /etc/pam.d/sshd looks like. #%PAM-1.0 auth required …
xrisk
  • 181
  • 1
  • 6
0
votes
0 answers

Remote side unexpectedly closed network connection RHEL 7.9

I have a situation where a rhel server becomes inaccessible using AD accounts but lets a local account to login. We are using a PAM tool that serves as our AD broker that enables us to login with AD credentials and enforces MFA. The issue is…
doublehunter
  • 1
  • 1
0
votes
1 answer

Best practices to completely disable LDAP users' access to mixed services with mixed authentication methods?

Background We use LDAP in our department to authenticate users to various services including web apps as well as Linux servers (via SSH).  When a user leaves the department, we should disable their access to our services but still retain the account…
AGI-Chandler
  • 38
  • 7
0
votes
0 answers

Add Ansible Template as RPC dependancy for Privilege Vault/Secret Server

We're running Delinea/Thycotic Privilege Vault in our environment. We're trying to onboard all credentials into Privilege Vault as much as possible, so that we can leverage Auto-Change, where the password is rotated by Privilege Vault every X…
user1913559
  • 219
  • 2
  • 12
0
votes
0 answers

nss_ldap failed to bind to LDAP server

i have configured ldap client (ubuntu 20.04) with nss_ldap to connect on ldap server and accept users in a specific group, it seems that everything is working fine, the client can access the ldap server and ldap users can access the client machine.…
Khloud Mostafa
  • 1
  • 3
0
votes
0 answers

How to enable password policy on readonly filesystem?

I'm using a read-only filesystem (squashfs). I've used the overlays file system to mount /etc directory. I can change the password using passwd command. I've included libpam & libpwquality packages to enable the strong password policy. I see the…
vishnumotghare
  • 101
  • 1
0
votes
0 answers

how to configure passwd/pam.d to confirm new password 3 or more times when changing password with passwd

I am looking to reconfigure my pam.d to prompt for new password confirmation 3 times when using passwd to change password. I have tried to duplicate the unix.so line in password-auth and system-auth like this password sufficient pam_unix.so sha512…
juwonlona
  • 1
  • 1
0
votes
0 answers

How to show the user a PAM module’s errors when attempting SSH authentication?

I have set up TOTP 2FA authentication on my VPS, mostly thanks to this answer. I’ve been testing the authentication to see if my setup works as intended and it does, and when looking through /var/log/auth.log, I’ve noticed that the Google…
Siph
  • 1
  • 2
0
votes
1 answer

PAM deems Kerberos password as expired

I run Kerberos / LDAP authentication in a small network for years. Kerberos is held in LDAP, which in turn is replicated to another site. Machines at the second site authenticate to the replica, the old site authenticates to the original server.…
Lars Hanke
  • 285
  • 3
  • 16
0
votes
0 answers

sssd/ldap does not authenticate against LDAP

I have configured SSSD with AD as ID and Auth providers. I am not caching credentials, so I expect connections to AD for authentication when I ssh to the host, but I do not see any. The user account is created: # sssctl user-checks ams user:…
user2634153
  • 101
  • 2
1 2 3
…
50 51