I searched is Pam unamerican and got this result. with that said I meet this guy in Columbus last October who said he was giving a talk about PAM. After watching this I am going to make a breath analyzer for the server.
Why I could not find that when searching "Linux PAM" and only when I used "pam_userdb" in YT search? This should be default result for "Linux PAM"! Wonderful explanation!
Excellent vid 👍 1:25:32 --- Regarding the future of PAM (2016 onwards) . . . "Whatever new authentication method comes up will almost certainly be configured through the existing PAM infrastructure." Physical access to workstation stuff (54:58) was good to hear 👍 If it is good enough for MWL, then . . . For the curious, the humourous Unamerican references are at 1:01:52 and 33:14. As an aside, the three slides at 16:12, 16:31 and 18:30 could have been condensed; e.g., 16:31 slide could have column headings to match with slide 16:12. Kindest regards, neighbours and friends. Happy turkey day 2022.
Great talk! I suddenly want to change some things on the company remote boxes... My team has both the allowed ip-address and ssh-key, why should we need an extra password? Anyways, the devio.us talk, would you terrible mind linking to it, youtube/google isn't to accommodating to searching for anything "devious". I found ua-cam.com/video/T8oKsmhwvL8/v-deo.html but I don't think that qualifies as your "stories of miscreant shell users"
i have a question in the Alternate Authentication you said either he must pass A or B&C at 30:30 but C is sufficient if he passes b and he does not pass C wouldn't he be allowed ?
"Windows uses MD5(and is highly insecure)" "(You change the password algorithm) - Don't do that, the people who set up your distribution have a lot more crypto knowlege" Also - Many a distro's system-auth: "password sufficient pam_unix.so md5" lol
We'd love to, unfortunately the way the video was uploaded it doesn't give us the option to generate these. If the option becomes available we'd be happy to turn them on. Alternately, if someone would provide subtitles we'll be glad to add them to the video.
This was fantastic!!! So much better than any other resource I've ever found!! Well done sir, and thank you!
An older talk, but still a great one. It made me buy his book!
I searched is Pam unamerican and got this result. with that said I meet this guy in Columbus last October who said he was giving a talk about PAM. After watching this I am going to make a breath analyzer for the server.
Hosted on git? :}
Why I could not find that when searching "Linux PAM" and only when I used "pam_userdb" in YT search? This should be default result for "Linux PAM"!
Wonderful explanation!
Excellent vid 👍 1:25:32 --- Regarding the future of PAM (2016 onwards) . . . "Whatever new authentication method comes up will almost certainly be configured through the existing PAM infrastructure."
Physical access to workstation stuff (54:58) was good to hear 👍 If it is good enough for MWL, then . . .
For the curious, the humourous Unamerican references are at 1:01:52 and 33:14.
As an aside, the three slides at 16:12, 16:31 and 18:30 could have been condensed; e.g., 16:31 slide could have column headings to match with slide 16:12.
Kindest regards, neighbours and friends. Happy turkey day 2022.
Great talk! I suddenly want to change some things on the company remote boxes... My team has both the allowed ip-address and ssh-key, why should we need an extra password?
Anyways, the devio.us talk, would you terrible mind linking to it, youtube/google isn't to accommodating to searching for anything "devious".
I found ua-cam.com/video/T8oKsmhwvL8/v-deo.html but I don't think that qualifies as your "stories of miscreant shell users"
Thank you so much. This tutorial was just what I needed.
One of the best in depth explanation I've ever seen! thanks!
i have a question in the Alternate Authentication you said either he must pass A or B&C at 30:30 but C is sufficient if he passes b and he does not pass C wouldn't he be allowed ?
@@ziadkiwan7894 I saw this too. Sufficient never rejects, so I think you are correct.
"Windows uses MD5(and is highly insecure)"
"(You change the password algorithm) - Don't do that, the people who set up your distribution have a lot more crypto knowlege"
Also - Many a distro's system-auth: "password sufficient pam_unix.so md5" lol
Could you please enable automatic subtitles?
We'd love to, unfortunately the way the video was uploaded it doesn't give us the option to generate these. If the option becomes available we'd be happy to turn them on. Alternately, if someone would provide subtitles we'll be glad to add them to the video.
30:20 Could that also read as sufficient / required / required ?