I've specified an AD security group in PAM to restrict which domain users can login. I've also restricted sessions for AD users to this group. This prevents a logged in user from doing an "su -" to an AD user outside of the group.
The Winbind uid mapping is configured so that AD users have UID >= 10000000.
These work as expected with the PAM configuration below.
Thnx matone, so it should read:auth required pam_env.so
auth sufficient pam_unix.so try_first_pass nullok
auth required pam_winbind.so use_first_pass use_authtok
auth optional pam_permit.soEverything else should remain the same ?I'll try this also, I know I shouldn't mess with pam rules if I don't fully understand them (need to read more about this), but
I have a 4~5MB logwatch like this every day!
Hello. I was able to adjust automatically mount at login.But after logging out encrypted /home/k4misiek is still mounted.I forgot about something?
Running Ubuntu 9.10
So I installed libpam-fprint, fprint-demo, libfprint-dev, etc..
Enrolled fingerprint..
Added the following 2 lines to /etc/pam.d/common-auth
Code:
auth sufficient pam_fprint.so
Followed this tutorial on rackspace.com exactly, but I am not able to start Dovecot.
# service dovecot restart
Stopping Dovecot Imap: [FAILED]
Starting Dovecot Imap: Fatal: service(auth) User doesn't exist: postfix
(See service auth { unix_listener /var/spool/postfix/private/auth { user } }
setting) [FAILED]
I replaced rather than merged and it would have been helpful if the last pam update had come with a little hint about the changes. The old /etc/pam.d/login was something like (from a backup)#%PAM-1.0
auth required pam_securetty.so
auth requisite pam_nologin.so
auth required pam_unix.so nullok
auth required pam_tally.so on
I'm getting the following errors in /var/log/auth.log
Aug 26 07:09:01 helpdesk CRON[23142]: PAM unable to dlopen(/lib/security/pam_unix_session.so): /lib/security/pam_unix_session.so: cannot open shared object file: No such file or directory
Aug 26 07:09:01 helpdesk CRON[23142]: PAM adding faulty module: /lib/security/pam_unix_session.so
Based on the the Securing Debian article on debian.org, I
/etc/pam.d/lightdm-autologin#%PAM-1.0
auth requisite pam_nologin.so
auth required pam_env.so readenv=1
auth required pam_env.so readenv=1 envfile=/etc/default/locale
auth required pam_succeed_if.so user != root quiet_success
auth required pam_permit.so
@include common-account
session required pam_limits.so
@include common-session
@include common-passwordhttp://siripong-computer-tips.blogspot.
Email this page
