Ask Ubuntu
Ask Ubuntu

Questions tagged [pam]

Pluggable authentication modules (PAM)

A mechanism to integrate multiple low-level authentication schemes into a high-level application programming interface (API)

317 questions
56
votes
3 answers

How can I use a passcode generator for authentication for remote logins?

I would like to strengthen the authentication of my SSH logins by adding another factor: a passcode generator device, or a passcode generation application on my mobile phone. The only obvious options in the default setup are a fixed password and key…
Jorge Castro
  • 73,717
22
votes
3 answers

How do you set requirements (such as minimum length) on passwords?

Is there any way to set up minimum passcode requirements, such as a minimum length, requirement of mixed case alphanumerics and at least 1 symbol in the passcode, and enforce that at passcode changes?
Thomas Ward
  • 78,878
19
votes
2 answers

How do I enforce a password complexity policy?

I need to configure an Ubuntu server to follow a strict company password policy that specifies the following: at least one upper case at least one lower case at least one digit at least one special character I've had a look around and all I have…
Stephen RC
  • 4,920
17
votes
1 answer

Setup for mounting kerberized nfs home directory - gssd not finding valid kerberos ticket

Our home directories are exported via kerberized nfs, so the user needs a valid kerberos ticket to be able to mount its home. This setup works fine with our existing clients & server. Now we want to add some 11.10 client and thus set up ldap &…
jan bernlöhr
  • 271
15
votes
3 answers

How can I lower the delay after incorrectly entered login and sudo passwords?

I am horribly impatient and can't stand the (for me subjectively long) delay of around 2 seconds after entering an incorrect password in the login screen or also as sudo password, before I can retry typing it correctly. Is there a way to modify the…
Byte Commander
  • 110,243
12
votes
3 answers

Disable PAM module for group

I recently enabled two-factor-authentication using google-authenticator on my SSH server. However I am now facing a problem: I have a different group of users on my server which I am using for SFTP, but that group is no longer able to login since…
Z3r0byte
  • 243
12
votes
1 answer

Permanently raising nofile limits in Ubuntu 14.04 LTS

I cannot seem to figure out what exactly is needed to allow the maximum number of file descriptors to be raised permanently for all users. /etc/security/limits.conf: root hard nofile 1500000 root soft nofile 1000000 root hard …
w3rthl3ss
  • 225
12
votes
9 answers

Desktop login fails, terminal works

I have a freshly setup 12.04 LTS pc system (120 GB SSD, 1 TB HDD, 16 GiB RAM); since a few days, I can't login to the graphical desktop anymore: there is very short flashing shell window which disappears very quickly (edit: see below), and I'm…
Tobias
  • 251
11
votes
1 answer

how to setup two factor authentication in Ubuntu for Ubuntu users using Google authenticator?

How to setup two factor authentication in Ubuntu for Ubuntu users using Google authenticator (It can also be setup for non Google accounts)?
Hrish
  • 2,399
11
votes
2 answers

Change the delay that occurs after entering an incorrect password in the gdm3 login-screen?

I am very impatient, when I unfortunately mistype my login-password on my laptop (Ubuntu 20.04), I don't want to wait three seconds to retry. (A delay of 0.3 seconds would be enough to prevent potential brute force and there is a longer time after 3…
rubo77
  • 34,024
  • 52
  • 172
  • 299
10
votes
2 answers

Use one password for administration and another for system login

How can I give a user one password for normal usage when logging in, and another password for system administration and sudo access? I want one user to have two passwords.
Varun Sridharan
  • 163
9
votes
1 answer

How to force user to run quiz after login and before displaying desktop

I have a kid and I want to allow him to use the computer only after he solves a certain quiz at logon. I can write a quiz application itself. What I don't know is how to set it up in the way, that computer doesn't show normal desktop until the quiz…
Adam Ryczkowski
  • 4,453
9
votes
1 answer

Custom mount points in gvfs

Is there a way to attach gvfs mount to a custom directory? So instead of ~/.gvfs/sftp for leon on filezzzz.tim-online.nl/ something like: ~/mounts/filezzzz.tim-online.nl/? I thought about using pam_mount but that lacks the nice gnome keyring…
Leon
  • 275
8
votes
0 answers

What is the correct way to modify /etc/pam.d/common-auth?

By default /etc/pam.d/common-auth looks like this $ cat /etc/pam.d/common-auth # # /etc/pam.d/common-auth - authentication settings common to all services # # This file is included from other service-specific PAM config files, # and should contain…
hydrajump
  • 191
7
votes
0 answers

Add CAP_SYS_PTRACE for a user in LTS 16

I would like to be able to attach to a process with gdb. The process has my uid, but the executable file is set-gid. So, apparently, I'm learning about PAM. It's my understanding any process attaching to a set-gid process needs CAP_SYS_PTRACE (or…
James K. Lowden
  • 191
1
2 3
…
21 22