Questions tagged [pam]

Pluggable authentication modules, a flexible framework for configuring authentication, most commonly the login component of Linux systems, but used in other components and operating systems.

Useful links

The tag pam can be used for all programming related problems. Please note that https://serverfault.com/ is another Stack Exchange website where you can ask configuration specific problems.

474 questions
24
votes
3 answers

Limit the memory and cpu available for a user in Linux

I am a little concerned with the amount of resources that I can use in a shared machine. Is there any way to test if the administrator has a limit in the amount of resources that I can use? And if does, to make a more complete question, how can I…
Eduardo
  • 19,928
  • 23
  • 65
  • 73
23
votes
3 answers

how to create a pam module?

Can anyone tell me about this... I want to create a pam module similar to the login module in /etc/pam.d
Innovators
  • 341
  • 1
  • 2
  • 3
20
votes
4 answers

Resident Set Size (RSS) limit has no effect

The following problem occurs on a machine running Ubuntu 10.04 with the 2.6.32-22-generic kernel: Setting a limit for the Resident Set Size (RSS) of a process does not seem to have any effect. I currently set the limit in Python with the following…
BrainCore
  • 5,214
  • 4
  • 33
  • 38
15
votes
0 answers

Autologin and unlock keyring using LUKS passphrase?

I use LUKS full disk encryption on my archlinux system. When i boot my system i used to input the same password three times. That always bothered me. Recently i found out how to unlock the gnome keyring using the login password. Now i would really…
xophos
  • 366
  • 4
  • 19
14
votes
3 answers

OpenID PAM module

I am looking for a PAM module that can use OpenID to do the authentication. My idea is that I want to logon my Linux box using my gmail account and password. I found there is a open source project in Google Code which seems to be doing the things…
Harvey Kwok
  • 11,713
  • 6
  • 37
  • 59
14
votes
2 answers

Unescaped left brace regex error

I’m not an expert in regex and can't figure what I am supposed to change here. I get these two errors Unescaped left brace in regex is deprecated, passed through in regex; marked by <-- HERE in m/^(.*?)(\\)?\${ <-- HERE ([^{}]+)}(.*)$/ at…
14
votes
1 answer

Security concerns with a Python PAM module?

I'm interested in writing a PAM module that would make use of a popular authentication mechanism for Unix logins. Most of my past programming experience has been in Python, and the system I'm interacting with already has a Python API. I googled…
lfaraone
  • 49,562
  • 17
  • 52
  • 70
13
votes
4 answers

pam_appl.h and pam_misc.h missing, in rshd.c source code

I am working on a centOS 5.5 OS. It shows error that /security/pam_appl.h and /security/misc.h file is missing. Actually my rshd.c does not loads PAM module, may be by putting this libraries, it helps me to work my rshd fine. That's why I posted…
devsda
  • 4,112
  • 9
  • 50
  • 87
12
votes
5 answers

pam_unix(sudo:auth): conversation failed, auth could not identify password for [username]

I'm using ansible to provision my Centos 7 produciton cluster. Unfortunately, execution of below command results with ansible Tiemout and Linux Pluggable Authentication Modules (pam) error conversation failed. The same ansible command works well,…
Lukasz Dynowski
  • 11,169
  • 9
  • 81
  • 124
12
votes
2 answers

Limit number of processes started inside docker container

I'm trying to minimize damage made by fork bombs inside of a docker container. I'm using pam_limits and /etc/security/limits.conf file is 1000:1128 hard nproc 40 1000:1128 soft nproc 40 This means that any user with id in range [1000..1128] can…
Gregory Kalabin
  • 1,760
  • 1
  • 19
  • 45
12
votes
1 answer

psql: FATAL: PAM authentication failed for user

PostgreSQL 9.2.4 I cannot login anymore with a user that has worked in the past. I assume a configuration problem. So for testing I created a test user role 'testing' with the same options as the role in question (as the 'postgres' user who is still…
Markus L
  • 932
  • 2
  • 20
  • 38
9
votes
4 answers

PAM Authentication for a Legacy Application

I have a legacy app that receives a username/password request asynchronously over the wire. Since I already have the username and password stored as variables, what would be the best way to authenticate with PAM on Linux (Debian 6)? I've tried…
Jim Miller
  • 426
  • 5
  • 14
8
votes
2 answers

Can Amazon IAM be used as an authentication method for hosts?

Is it possible to use IAM to manage user accounts for EC2-hosted unix hosts by way of a PAM module similarly to LDAP, NIS, etc...? My goal is to have a means to centralize host authentication on our EC2 hosts without the overhead of setting up a…
hinder90
  • 571
  • 1
  • 4
  • 7
7
votes
2 answers

Install binaries into /bin, /sbin, /usr/bin and /usr/sbin, interactions with --prefix and DESTDIR

Most packages using Autotools are user-level utilities or at least high-enough level to be completely under /usr, or low enough to be entirely below /usr. I'm writing a package that would need to install some files into /bin, some into /sbin,…
Paweł Hajdan
  • 18,074
  • 9
  • 49
  • 65
7
votes
3 answers

How to retrieve user password in cleartext using PAM?

I am writing a PAM module which writes the username/password in a file for further transaction by an other application. I only saw the PAM_AUTHTOK item but I'm not sure from which type is it. Anybody knows that or another way to get the cleartext…
pluckyDuck
  • 1,099
  • 3
  • 13
  • 14
1
2 3
31 32