Super User
Super User

Questions tagged [pam]

Pluggable authentication modules, a flexible framework for configuring authentication, most commonly the login component of Linux systems, but used in other components and operating systems.

useful links

148 questions
11
votes
5 answers

How do I disable or modify pam's password requirements?

I'm using Fedora 19. By default it's setup with pam to disable bad passwords, like "password". This is good. Trying to change this default is infuriating. This is a box for testing internal stuff, not connected to the internet, nor any machine that…
djeikyb
  • 951
10
votes
1 answer

Why do we need `required` when we have `requisite` in `PAM`?

I was wondering why do we need required in PAM when we have requisite. I know that required will allow to keep going through auth stack, but the authentication process will fail anyway finally. So why not simply to use requisite? Is that for…
Mohammed Noureldin
  • 1,355
7
votes
1 answer

How to trace LDAP authentication failures?

I have a working LDAP server which I've confirmed can be used with LDAP clients, running on ec2 via jumpbox. I've run authconfig to setup ldap based authentication, to point to the server: authconfig --useshadow --enablesssd --enablesssdauth…
jayunit100
  • 641
7
votes
4 answers

How do I permanently delete /var/log/lastlog?

My /var/log/lastlog file is huge. I know it's really only a few kilobytes, but tar isn't smart enough to know that, so when I image a virtual machine, my restore fails because it thinks I'm trying to load more data than I have capacity on my…
GregB
  • 217
7
votes
4 answers

Why won't vsftpd let me log in with a virtual user account?

I would like to use vsftpd with virtual users and pam_pwdfile.so. I installed vsftpd and added two users (ramon and dragon) via htpasswd to my file /etc/vsftpd.passwd. The /etc/pam.d/vsftpd is configured to use this file. auth required …
Ramon
  • 71
6
votes
1 answer

Use user-installed shell?

How do I change my shell to one installed in my home directory? I installed a new zsh in my home directory, which is picked up: >> which zsh >> /home/myname/bin/zsh It's not listed in /etc/shells (and won't be, as I lack permission), so how do I…
rxmnnxfpvg
  • 813
6
votes
6 answers

PAM SSSD Allow Local Users

I've got a default SSSD configuration with PAM. I can login fine as any LDAP user. However, when I create a local user on a server: adduser test1 passwd test1 and then try to login as that user I get the following error: pam_sss(sshd:account):…
user3063045
  • 268
  • 1
  • 3
  • 13
5
votes
1 answer

PAM Authentication / Login

I'm having a little issue on Ubuntu where any commands that require root privileges takes longer to execute than normal. I managed to identify the culprit to the cause after checking my /var/log/auth.log and I believe it's to do with krb5 PAM for…
theguest
  • 51
5
votes
2 answers

Prevent linux user from changing their password in ssh

How can I prevent users from changing their passwords? I still want to be able to change the passwords as root if necessary but keep the user from changing their password.
Vreality
  • 204
5
votes
3 answers

Locked out of sudo by erroneous PAM config causing PAM bad jump in stack

While trying to mitigate some spammy PAM messages in /var/log/auth.log, following this post, I tried various combinations in /etc/pam.d/sudo. Unfortunately, the last line I tried, completely locked me out of any sudo/su operations. session…
not2qubit
  • 2,651
  • 4
  • 34
  • 45
4
votes
4 answers

Crontab command cannot be executed. Error PAM configurations

Here's the command that I would like to execute but it seems not to work. [mdubois@veloce ~]$ crontab -l Autorisation refusée You (mdubois) are not allowed to access to (crontab) because of pam configuration. below is my /etc/pam.d/crond file…
Danial Aswad
  • 41
4
votes
1 answer

Is there a way to force all Linux users to change their passwords on first login?

I am looking for a way to configure Linux machine so any time a new user is created, he/she will have to set a new password on first login. To clarify the task here are assumptions: I am not looking for using chage -d 0 command every time user is…
Grzegorz
  • 286
  • 3
  • 14
4
votes
1 answer

Root account locked/suspended?

I'm shipping ts7800 boards running debian 6.07. After programming, some boards do not run their cron jobs, complaining that they do not recognise the user root. This happened on 2 out of 12 devices. When I sshed in to investigate I was forced to…
Shiftee
  • 161
4
votes
1 answer

How do I build openvpn without libpam?

Since I have no root privilege to install libpam, I failed to run ./configure. So is there any method with which I can build openvpn without libpam? checking for OPENSSL_CRYPTO... yes checking for OPENSSL_SSL... yes checking for…
hugemeow
  • 2,329
4
votes
1 answer

limits.conf ulimits not being applied to chrooted processes

We allow users to execute scripts on our servers. Our security model involves chrooting them. We want to be able to apply ulimit restrictions to them, and the best way to do it would seem to be in /etc/security/limits.conf But, it doesn't seem to…
hwjp
  • 146
1
2 3
…
9 10