Arch Linux

MisterChoc

Member

Registered: 2013-02-17

Posts: 74

[Solved]PAM: Running a script after failed login

So I'm just trying to run a script if a user enters a wrong password.

This is my /etc/pam.d/system-login

#%PAM-1.0

auth       required   pam_tally.so         onerr=succeed file=/var/log/faillog
auth       required   pam_exec.so        /home/unkn0wn/myscript.sh
auth       required   pam_shells.so
auth       requisite  pam_nologin.so
auth       include    system-auth

account    required   pam_access.so
account    required   pam_nologin.so
account    include    system-auth

password   include    system-auth

session    optional   pam_loginuid.so
session    include    system-auth
session    optional   pam_motd.so          motd=/etc/motd
session    optional   pam_mail.so          dir=/var/spool/mail standard quiet
-session   optional   pam_systemd.so
session    required   pam_env.so

So I just added the second line. See anything wrong with that?
I created another user and tried it but it's never fired.

solved:

#%PAM-1.0

# Jump two rules if login succeeds.
auth    [success=2 default=ignore]      pam_unix.so nullok_secure
auth    optional                        pam_exec.so /home/unkn0wn/code/tmp/pamcam.sh
auth    requisite                       pam_deny.so
# User gets here if authentication is successful. No denying, no cam module.

auth      required  pam_unix.so     try_first_pass nullok
auth      optional  pam_permit.so
auth      required  pam_env.so

account   required  pam_unix.so
account   optional  pam_permit.so
account   required  pam_time.so

password  required  pam_unix.so     try_first_pass nullok sha512 shadow

password  optional  pam_permit.so

session   required  pam_limits.so
session   required  pam_unix.so
session   optional  pam_permit.so

Last edited by MisterChoc (2016-12-09 18:24:48)

Raymo111

Member

Registered: 2019-08-27

Posts: 28

Re: [Solved]PAM: Running a script after failed login

How come it doesn't work for me?

V1del

Forum Moderator

Registered: 2012-10-16

Posts: 25,416

Re: [Solved]PAM: Running a script after failed login

Don't necrobump three year old threads, if you have an actual issue post configurations, adjustments and relevant files from your own system.

Closing.