Questions tagged [pam]
Pluggable Authentication Modules handle authentication tasks of applications or services running on the system.
686 questions
2 votes
0 answers
25 views
Linux login and unlock screen by two passwords + face recognition
How to configure PAM to asks for password, and try recognize of face or input additional password. I need to use sudo by face. Additional password is required to enhance security (nobody will run sudo ...
- 123
6 votes
1 answer
216 views
pam_mount results not available in pam_exec
How can a pam_exec script access mounts performed by pam_mount? I have a working auth optional pam_mount.so PAM configuration such that the device is not mounted before entering the passphrase (tested ...
- 163
5 votes
1 answer
231 views
'sudo su' Permission Denied, but relogging fixes it
I am having an issue that is only present since about April after updating packages. When I am accessing servers and use sudo su or sudo -s to access root and enter my password, I'll get: sudo: PAM ...
- 81
3 votes
1 answer
143 views
pam syntax help for password-auth
I have an /etc/pam.d/dcv file (goes with nice-dcv) and it has just these two lines: auth include password-auth account include password-auth my problem is a security request to include a ...
- 9,175
1 vote
1 answer
2k views
pam_env(sshd:session): deprecated reading of user environment enabled
Debian 12 Bookworm; Inspecting the SSH system log, there is always a trailing grayed-out message at the end of each log entry: pam_env(sshd:session): deprecated reading of user environment enabled I ...
- 31.3k
0 votes
2 answers
136 views
How to redirect output from a program that waits for input
Following this post I created my own version of the script, with the difference that user and password are forwarded from the environment variables: #!/bin/zsh pamtester login $user authenticate <&...
- 101
1 vote
1 answer
91 views
PAM maxlogins limit not working
Since upgrading from CentOS 7 to Rocky Linux 8 our PAM maxlogins limit is no longer being enforced for SFTP sessions. SFTP users belong to the sftp group and we have this in /etc/security/limits.d/10-...
- 125
0 votes
1 answer
217 views
How to configure the system so that users in a specific user group can execute programs requiring the cap_sys_admin capability?
My primary goal is to allow users in a specific group to execute programs requiring the cap_sys_admin capability (e.g., perf) after SSH-ing into Ubuntu 22.04. A simple solution is modifying ...
- 103