Questions tagged [pam]

Pluggable authentication modules, a flexible framework for configuring authentication, most commonly the login component of Linux systems, but used in other components and operating systems.

773 questions
48
votes
2 answers

Slow ssh login - Activation of org.freedesktop.login1 timed out

On one of my servers I've noticed really delay on SSH logins. Connecting using the ssh -vvv options the delay occurs at debug1: Entering interactive session. extract of connection: debug1: Authentication succeeded (publickey). Authenticated to…
Alasdair
  • 601
44
votes
7 answers

Switch on PAM debugging to Syslog

How do I switch on PAM debugging in Debian Squeeze at the admin level? I have checked every resource I was able to find. Google, manpages, whatever. The only thing I haven't tried yet (I simply not dare to, did I mention that I hate PAM?) is digging…
Tino
  • 1,193
43
votes
8 answers

Is there a command line two-factor authentication verification code generator?

I manage a server with two-factor authentication. I have to use the Google Authenticator iPhone app to get the 6-digit verification code to enter after entering the normal server password. The setup is described here:…
dan
  • 927
38
votes
6 answers

pam service(sshd) ignoring max retries

I have vps that I use to run a webserver on, it currently runs ubuntu server 12.04. Since a few weeks I keep getting a lot of errors in my ssh console. 2014 Apr 11 08:41:18 vps847 PAM service(sshd) ignoring max retries; 6 > 3 2014 Apr 11 08:41:21…
Jerodev
  • 491
35
votes
9 answers

ssh: "Access denied by PAM account configuration" for one non-root user but not another

On a VM I am initializing I am able to log in as one non-root user ( admin ) but not another ( tbbscraper ) over SSH with public key authentication. The only error message I can find in any log file is Sep 18 17:21:04 [REDACTED] sshd[18942]: fatal:…
zwol
  • 1,435
29
votes
2 answers

Understand PAM and NSS

In the last days I have set up some Linux system with LDAP authentication and everything works fine, but there's still something I can't really understand regarding NSS and PAM, also after a lot of research. Citing: NSS allows administrators to…
ColOfAbRiX
  • 1,130
28
votes
1 answer

Purpose Behind Disabling PAM in SSH

I'm setting up key based authentication for SSH on a new box, and was reading a few articles that mention setting UsePAM to no along with PasswordAuthentication . My question is, what is the purpose of setting UsePAM to no if you already have…
tacotuesday
  • 1,409
27
votes
5 answers

ulimit -n not changing - values limits.conf has no effect

I am trying to raise the open file descriptor maximum for all users on an ubuntu machine. This question is somewhat of a follow up to this question. open file descriptor limits.conf setting isn't read by ulimit even when pam_limits.so is required…
Abbas Gadhia
  • 383
24
votes
3 answers

What can be learned about a user from a failed SSH attempt?

What can be learned about a 'user' from a failed malicious SSH attempt? User name entered ( /var/log/secure ) Password entered (if configured, i.e. by using a PAM module) Source IP address ( /var/log/secure ) Are there any methods of extracting…
Exbi
  • 373
24
votes
2 answers

"success=n" control syntax in pam.conf / pam.d/* files

After sucessfully configuring Kerberos, this is what I've found in /etc/pam.d/common-auth file: auth [success=2 default=ignore] pam_unix.so nullok_secure auth [success=1 default=ignore] pam_winbind.so krb5_auth krb5_ccache_type=FILE cached_login…
Jamie
  • 1,384
22
votes
1 answer

Connection closed by UNKNOWN port 65535 when SSH using AD Creds on RHEL Machine

Recently I installed PAM & all the necessary packages needed to enable ssh authentication via AD on my RHEL 7.5 machines. When I try to SSH using "ssh user@domainname@hostname" it asks for my password and as soon as I type my password, I get the…
Doug
  • 339
20
votes
2 answers

How to use the ssh server with PAM but disallow password auth?

Many tutorials tell you to config your ssh server like this: ChallengeResponseAuthentication no PasswordAuthentication no UsePAM no but with this setup you cannot use PAM, as i plan to use 2 Factor Auth with Google Authenticator (OTP Onetime…
c33s
  • 1,605
  • 4
  • 23
  • 41
18
votes
2 answers

open file descriptor limits.conf setting isn't read by ulimit even when pam_limits.so is required

I am trying to raise the open file descriptor maximum for all users on an ubuntu machine. I've added the following lines to /etc/security/limits.conf : * soft nofile 100000 * hard nofile 100000 And, based on this question I've checked the…
bantic
  • 1,639
  • 3
  • 15
  • 17
17
votes
4 answers

How to fix a crontab access issue with a pam configuration error message?

I attempted to access my crontab as the non-root user "coins" when I encountered a permissions issue as shown in the following error message mentioning the pam configuration: [coins@COINS-TEST ~]$ crontab -l Authentication service cannot retrieve…
Raj
  • 181
1
2 3
…
51 52