Displaying 20 results from an estimated 2000 matches similar to: "OpenSSH, Radius, PAM & NOUSER issue"
2006 Jan 20
1
openssh-4.2p1 + Pam question !
Hi there !
I have an issue with my OpenSSH + PAM configuration on a RedHat Advanced server 2..1
I want to authenticate users connecting to a server using ssh against a radius server. The radius client/server part works ok when I test it with some utilities.
I think I have a problem with my ssh which does not pass the username/password to my pam sshd module.
I have upgraded to openssh-4.2p1.
2002 Apr 16
5
[Bug 117] OpenSSH second-guesses PAM
http://bugzilla.mindrot.org/show_bug.cgi?id=117
------- Additional Comments From fcusack at fcusack.com 2002-04-16 23:27 -------
sshd should definitely not be using 'NOUSER'. The correct thing is to use
the username, regardless of whether (pw) exists. I can't understand why
you would substitute the value 'NOUSER'.
------- You are receiving this mail because: -------
2006 Jul 05
1
Could not get shadow information for NOUSER
Hello all,
I have a CentOS 4.2 server that gives me these error messages in my
/var/log/secure file, I realise that these are SSH attacks, but where does
the extra line "Could not get shadow information for NOUSER" come from?
This doesn't make any sense. I have many servers running CentOS 4.2, but
don't get this error message on any others. I hate junk in my logs. Is
there
2003 May 12
10
[Bug 559] PAM fixes
http://bugzilla.mindrot.org/show_bug.cgi?id=559
Summary: PAM fixes
Product: Portable OpenSSH
Version: 3.6.1p2
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: P3
Component: sshd
AssignedTo: openssh-unix-dev at mindrot.org
ReportedBy: fcusack at fcusack.com
- start PAM
2004 Nov 05
1
Using winbind authentication with Windows 2003 AD - SSH login failures
Hi all,
I have been trying to setup authentication of users on a Linux server
against Windows server 2003 using winbind.
I am at the point where an
su - ADUSERNAME
works, but sshing as that user still doesn't work.
When I try to ssh as an AD user as follows:
ssh -l "RILINUX+testuser" server.domain.com
I get the following output in /var/log/messages:
server pam_winbind[5906]:
2003 May 30
4
[Bug 580] disable kbdint if host key mismatch
http://bugzilla.mindrot.org/show_bug.cgi?id=580
Summary: disable kbdint if host key mismatch
Product: Portable OpenSSH
Version: -current
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: P2
Component: ssh
AssignedTo: openssh-bugs at mindrot.org
ReportedBy: fcusack at
2006 Sep 19
1
CryptoCard - PAM or RADIUS?
Greetings all,
I'm working on attempting to get SAMBA to work with a product line
called CryptoCard. I *should* be able to get it to work one of two ways,
either through the use of CryptoCard's provided PAM module, or through
RADIUS authentication.
Currently, I cannot seem to get PAM authentication to work at all. This
is what is in the 'samba' file for PAM:
auth
2006 Jan 30
2
badpw = "\b\n\r\177INCORRECT"
Hi !
I'm trying to authenticate users on a Linux Red hat AS 2.1 against a radius server.
I have upgraded my OpenSSHd to :
OpenSSH_4.2p1, OpenSSL 0.9.6b [engine] 9 Jul 2001
The users accounts are NOT stored locally on the sever (no accounts in /etc/passwd ). Users ssh to the box : ssh test at testserver.com passwd: test
I'm usign PAM to direct the authentication request to the radius
2004 Jul 14
0
winbind flaky authentication..
I've got weird things happening with winbind authentication - sometimes
it works, sometimes it doesn't.
Sometimes it works for one username, and not for the other, sometimes it
works for both, sometimes neither...
I'm a departmental admin trying to authenticate against our central
windows domain - so I've no control of the windows side. The client
machine is a fresh redhat
2019 Nov 29
2
security = ads parameter not working in samba 4.9.5
Hi Rowland,
Exactly. I commented the same line that you mentioned, but the same error
persists.
Regards
Sachin Kumar
On Fri, Nov 29, 2019 at 5:43 PM Rowland penny via samba <
samba at lists.samba.org> wrote:
> On 29/11/2019 11:58, Sac Isilia wrote:
> > Hi Rowland,
> >
> > The line 60 contains "{" in the script. The exit 1 statement is on
> > line
2019 Nov 29
5
security = ads parameter not working in samba 4.9.5
Hi Rowland,
Below is the output that is produced.
Collected config --- 2019-11-29-15:33 -----------
Hostname: esmad1apl01
DNS Domain: emea.media.global.loc
FQDN: esmad1apl01.emea.media.global.loc
ipaddress: 10.34.54.152
-----------
Kerberos SRV _kerberos._tcp.emea.media.global.loc record verified ok,
sample output:
;; Truncated, retrying in TCP mode.
Server: 10.10.136.85
Address:
2019 Dec 10
6
security = ads parameter not working in samba 4.9.5
I've re-read this thread but its a bit confusing due to 2 persons with the same probem in one thread.
Im thinking here, how is samba started, since winbind is not running.
Im suspecting samba-addc or samba is starting. Not smbd nmbd winbind.
I suggest to run this:
Disable that all again.
systemctl disable samba-addc samba smbd nmbd winbind
systemctl mask samba-addc samba smbd nmbd
2019 Dec 04
2
security = ads parameter not working in samba 4.9.5
Hi Rowland,
I have done the edits as you suggested and ran again the script that you
provided. Below is the output.
Collected config --- 2019-12-04-11:46 -----------
Hostname: esmad1apl01
DNS Domain: emea.media.global.loc
FQDN: esmad1apl01.emea.media.global.loc
ipaddress: 10.34.54.152
-----------
Kerberos SRV _kerberos._tcp.emea.media.global.loc record verified ok,
sample output:
;;
2013 Nov 04
1
is sssd *faster* than samba4's builtin winbind?
Using samba 4.0.9 as an AD DC (no other domain servers).
Since my UIDs and GIDs have changed, I was doing cleanup:
find /srv/svn/ -xdev '(' -nouser -o -nogroup ')' -ls
I noticed this was very slow -- iostat reported only about 2tps and
50kB/s to my disks. So I timed it with nsswitch.conf users & groups set
to "files" vs. "files winbind":
# with
2006 Jul 02
2
dovecot-lda, sieve, maildir
I'm unable to get dovecot-lda with sieve filtering to deliver into
maildir folders. The examples on the wiki explicitly say "mbox", so
I'm wondering, does the dovecot-lda sieve implementation not support
filtering into maildir folders?
-frank
2006 May 03
8
[Bug 1188] keyboard-interactive should not allow retry after pam_acct_mgmt fails
http://bugzilla.mindrot.org/show_bug.cgi?id=1188
Summary: keyboard-interactive should not allow retry after
pam_acct_mgmt fails
Product: Portable OpenSSH
Version: -current
Platform: Other
OS/Version: All
Status: NEW
Severity: normal
Priority: P2
Component: PAM support
2003 Aug 22
1
restriction on workgroup name length ?
Hi,
I have a Windows 2000 Domain Controller serving the domain
EMEA.CORPDIR.NET
smb.conf:
workgroup = emea.corpdir.net
security = domain
nmbd show the following errors:
register_name_response: Answer name EMEA.CORPDIR.NE<00> differs from question name EMEA.CORPDIR.NET<00>.
[2003/08/22 16:29:42, 0] nmbd/nmbd_nameregister.c:(73)
register_name_response: Answer name
2003 Jun 02
1
[Bug 582] Add 'KbdintXORPasswordAuthentication' option.
http://bugzilla.mindrot.org/show_bug.cgi?id=582
Summary: Add 'KbdintXORPasswordAuthentication' option.
Product: Portable OpenSSH
Version: -current
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: P2
Component: sshd
AssignedTo: openssh-bugs at mindrot.org
2001 Mar 06
1
Mapping SMB usernames to SCO users
I have about 40 SCO 5.0.5 servers on which I am installing samba (I've
tried 2.0.3 and 2.0.7, I'm having the same trouble with both).
For my example, assume the following:
NT domain: ORLANDO_ADMIN
NT PDC: ORLANDO_PDC
NT user: Administrator (I have tried other users as well)
samba server: CLASS
guest account (on UNIX server): nouser
A generic Unix account exists called samba.
My goal
2004 Dec 28
1
PAM sending wrong username to Winbind (fwd)
Hi All,
I have tried logging into ftp using my NT username and password and it
works. It is only SSH which has this problem.
http://216.109.117.135/search/cache?p=pam+NOUSER&ei=UTF-8&fl=0&u=www.publicsource.apple.com/darwinsource/10.0.4/OpenSSH-9/openssh/auth2.c&w=pam+nouser&d=E6EA31C37E&icp=1&.intl=us
The above link gave me this hint. Found it while looking for