google / google/google-authenticator-libpam

Authentication failed of new users

Open
#217 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
2k
Forks
305
PR merge metrics
No merged PRs in 30d

Description

Hi,
We are using libpam google authenticator to authenticate openvpn users on a Ubuntu 18.04 server. Since last month while creating new users they were not able to authenticate via MFA code. All the existing users are not affected only new users are affected. The gauth user password was found expired last month, I think the issue started after that. Tested authentication with Pamtester and getting the same for new users. Any solution to this problem.

I'm attaching the audit log

pam_unix(su:session): session opened for user gauth by root(uid=0)
bastion su[30012]: pam_sss(su:session): Request to sssd failed. Connection refused
pam_systemd(su:session): Cannot create session: Already running in a session
bastion su[30012]: pam_unix(su:session): session closed for user gauth
bastion su[30012]: pam_sss(su:session): Request to sssd failed. Connection refused

bastion openvpn(pam_google_authenticator)[30089]: Invalid verification code for new_user
bastion pamtester[30089]: pam_unix(openvpn:auth): auth could not identify password for [new_user]

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.