search

nuvious / pam-duress

A Pluggable Authentication Module (PAM) which allows the establishment of alternate passwords that can be used to perform actions to clear sensitive data, notify IT/Security staff, close off sensitive network connections, etc if a user is coerced into giving a threat actor a password.
GNU Lesser General Public License v3.0
1.33k stars 39 forks source link

How can I get it working on gentoo? #32

Closed ghost closed 1 year ago

ghost commented 2 years ago

Hello, first of all can I just say thank you for this project as it has worked well on other systems. However, on my gentoo install I am running into a few problems. Firstly, the system-auth vs common-auth issue, I followed the guidance for arch users however I do not know if it has worked for reasons I will state later Next, the library was placed in /lib/security and was not being detected. I moved it to /lib64/security and su stopped spitting out an error saying it could not find the library However, it still did not work. I attempted to log the PAM while ssh'ing in with and without my duress password. The only difference between the two was this line: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=::1 user=max This suggests pam_duress.so is not even being loaded so that's why I believe that the system-auth might not be valid I am not knowledgeable at all with PAM so im sure there is an easy answer that I am just missing. Any help is appreciated! Max

nuvious commented 2 years ago

I may be able to pick this up in the near future and see if I can get it working in a VM I'll do a pull request similar to the one I did for an issue with Arch. If you have it figured out on your end before then let me know in this thread and I'll still take your feedback into a Gentoo specific PR.

nuvious commented 1 year ago

Closing this issue as it's out of scope for the project. Trying to focus more on bugs related to the module code itself and less about different OS flavor PAM configurations. Still welcome pull requests to create walkthroughs of how to install on various flavors of Linux but only really have the bandwidth to test in Arch and Debian variants at the moment and will only be maintaining installation guides for Debian variants.