PAM permit works only when dummy suffix is added

Mohammed Noureldin

5/6/23, 11:05 PM

I am trying to use PAM to authenticate OpenVPN against 2FA (not important info). Here is my PAM configuration:

account required        pam_permit.so
auth    required        pam_google_authenticator.so secret=/etc/openvpn/google-authenticator/${USER} user=root forward_pass nullok debug authtok_prompt=pin

I have an issue in the first line (or wherever I put it). Using the line as shown causes the PAM configuration to break for some reason I don't understand:

/var/log/auth.log:

: No such file or directoryrary /lib/security/pam_permit.so PAM unable to dlopen(/lib/security/pam_permit.so
2022-01-06 23:02:53 err openvpn(pam_google_authenticato[9]: PAM adding faulty module: /lib/security/pam_permit.so

However, adding ANYTHING at the end of that line (even a space or any dummy text) causes my PAM configuration to work perfectly! So in other words having this account required pam_permit.so (notice the space at the end), or this account required pam_permit.so DUMMY works!

I don't understand what is the reason. Could anyone help me to understand what is the issue here?

I am in a Docker container (alpine image).

One other strange behavior I observed: putting nullok, or debug flags at the end of the second line causes the configuration to become invalid, but putting them in the middle fixes the issue. What is going on? T

0 + 0

linux

pam

google-authenticator

alpine

Score:0

Server

Mohammed Noureldin

5/7/23, 12:28 AM

Well, it turned out that the issue for both strange behaviors was the CRLF characters.

As soon as I used LF everything started working as expected.

0 + 0

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: PAM permit works only when dummy suffix is added

TH: ใบอนุญาต PAM จะทำงานเมื่อมีการเพิ่มส่วนต่อท้ายจำลองเท่านั้น

RO: Permisul PAM funcționează numai atunci când se adaugă sufixul fals

RU: Разрешение PAM работает только при добавлении фиктивного суффикса

VI: Giấy phép PAM chỉ hoạt động khi thêm hậu tố giả

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.