Your suggested change has been received. Thank you.

close
Thales Logo

All

  • All
  • CipherTrust Manager
  • CipherTrust Application Data Protection (CADP)
  • CipherTrust Application Key Management (CAKM)
  • CipherTrust Batch Data Transformation (BDT)
  • CipherTrust Cloud Key Management (CCKM)
  • CipherTrust Data Discovery and Classification (DDC)
  • CipherTrust Data Protection Gateway (DPG)
  • CipherTrust Database Protection (CDP)
  • CipherTrust Intelligent Protection (CIP)
  • CipherTrust Integrations
  • CipherTrust Migrations
  • CipherTrust RESTful Data Protection (CRDP)
  • CipherTrust Transparent Encryption (CTE)
  • CipherTrust Transparent Encryption Userspace (CTE-U)
  • CipherTrust Secrets Management (CSM)
  • CipherTrust Vaulted Tokenization (CT-V)
  • CipherTrust Vaultless Tokenization (CT-VL)
  • CTE-Linux
  • CTE-Windows
  • CTE-AIX
  • CTE-K8s
  • CTE-U
  • Crypto Command Center
  • Data Protection on Demand
  • Luna Cloud HSM
  • Luna Network HSM
  • Luna PCIe HSM
  • Luna USB HSM
  • OneWelcome Identity Platform
  • ProtectApp LUKS
  • ProtectServer 2 HSM
  • ProtectServer 3 HSM
  • SafeNet Trusted Access (STA)
  • SafeNet MobilePASS+
  • SafeNet MobilePASS+ for Android
  • SafeNet MobilePASS+ for Chrome
  • SafeNet MobilePASS+ for macOS
  • SafeNet MobilePASS+ for iOS
  • SafeNet MobilePASS+ for WatchOS
  • SafeNet MobilePASS+ for Windows
  • SafeNet Synchronization Agent
  • SafeNet Logging Agent
  • SafeNet Agent for FreeRADIUS
  • SafeNet Agent for NPS
  • SafeNet Agent for Windows Logon
  • SafeNet Authentication Service Private Cloud Edition (SAS PCE)
  • SafeNet Remote Logging Agent
  • SafeNet Keycloak Agent
  • SafeNet IDPrime Virtual (IDPV)
  • SafeNet FIDO Key Manager
  • SafeNet FIDO Key Manager for Android
  • SafeNet FIDO Key Manager for iOS
  • SafeNet FIDO Key Manager for Windows
back

SafeNet Agent for Pluggable Authentication Module CRN v1.3.0

search

Please Note:

printsuggest an edit

SafeNet Agent for Pluggable Authentication Module CRN v1.3.0

copy link to clipboardProduct Description

The SafeNet Agent for Pluggable Authentication Module (PAM) is a Two-Factor Authentication (2FA) solution to authenticate Linux users before granting system access. The SafeNet Agent for PAM can be easily configured for any number of Linux systems to provide a secure mechanism for protecting console or remote (SSH) login sessions.

By taking advantage of our industry-leading authentication solution, coupled with the flexibility of PAM, organizations can prevent their Linux systems from unauthorized access. Requiring a second factor of authentication, in addition to a valid username and password, is a critical measure for information security.

copy link to clipboardResolved and Known Issues

copy link to clipboardIssue Severity and Classification

The following table serves as a key to the severity and classification of the issues listed in the Resolved Issues table and the Known Issues table, which can be found in the sections that follow.

Severity Classification Definition
C Critical No reasonable workaround exists
H High Reasonable workaround exists
M Medium Medium-level priority problems
L Low Low-level priority problems

copy link to clipboardRelease Description

copy link to clipboardRelease Summary – SafeNet Agent for Pluggable Authentication Module 1.3.0

The SafeNet Agent for Pluggable Authentication Module v1.3.0 release introduces the following features and a security improvement.

copy link to clipboardSystem Security Services Daemon

The agent now supports System Security Services Daemon (SSSD), allowing the Active Directory (AD) domain users to log in to their PAM-protected machine. The domain users can now log in using either UPN (username@domain.com) or SID (domainname\username) username format, for example, alice@contoso.com or contoso/alice.

copy link to clipboardSecurity Improvement

This release introduces a security improvement for the most secure version of SafeNet Agent for Pluggable Authentication Module.

copy link to clipboardAdded Operating System Support

SafeNet Agent for PAM is now compatible with Ubuntu 24.04.

note

Note

With this release, the default OpenSSL version applies to all the supported Operating Systems. For more details on the supported OS, refer here.

copy link to clipboardThalesdocs

The agent documentation is now online at https://www.thalesdocs.com/sas/latest/agents/plug_auth/index.html. In future versions, the documentation will only be available on Thalesdocs. PDFs will no longer be a part of the subsequent releases.

copy link to clipboardRelease Summary – SafeNet Agent for Pluggable Authentication Module 1.2.0

The SafeNet Agent for Pluggable Authentication Module v1.2.0 release introduces the following significant features.

note

Note

Due to a known UI discrepancy in Ubuntu 22.04, we recommend to enable SSH for Ubuntu 22.04.

copy link to clipboardAdded Operating System Support

SafeNet Agent for PAM is now compatible with Ubuntu 22.04, RHEL 8.10 and RHEL 9.4.

note

Note

For now, RHEL 9.4 is compatible with OpenSSL-1.1.1. For more details, refer to the SafeNet Agent for Pluggable Authentication Module 1.2.0: Installation and Configuration Guide here.

copy link to clipboardNumber Matching

The agent now supports MobilePASS+ push with number matching feature, which secures push authentications to protect against MFA fatigue or push bombing attacks.

Number matching gives control to the user for every login request, because they must select the number in the push notification on their MobilePASS+ application as is displayed on the login screen.

For more details, refer to Running the Agent section in SafeNet Agent for Pluggable Authentication Module: Installation and Configuration Guide.

note

Note

This feature is available on SAS PCE/SPE 3.20 (and above).

copy link to clipboardRelease Summary – SafeNet Agent for Pluggable Authentication Module 1.1.0

The SafeNet Agent for Pluggable Authentication Module v1.1.0 release introduces the following OS support, enhancement, and resolves a customer-reported issue. The support for Cent OS is deprecated in this release and onwards.

copy link to clipboardAdded Operating System Support

SafeNet Agent for PAM is now compatible with the RHEL 8.6 version.

copy link to clipboardEnhancements

SafeNet Agent for Pluggable Authentication Module (PAM) is re-designed with Thales branding. For more details, refer to SafeNet Agent for Pluggable Authentication Module: Installation and Configuration Guide here.

copy link to clipboardResolved Issues

This release resolves a customer-reported issue. Please find below the details of the issues fixed in this release.

Severity Issue Synopsis
H SASNOI-16182 Summary: The agent is not able to authenticate with the PUSH OTP on Ubuntu. This issue is now fixed.

copy link to clipboardRelease Summary – SafeNet Agent for Pluggable Authentication Module 1.0.2

The upgrade from any earlier release is not supported officially in this release. The earlier version, v1.0.1 was released using RPM (RedHat Linux and CentOS) and DEB (Ubuntu) files. The following issue was resolved in this release.

copy link to clipboardResolved Issues

This release resolves some customer-reported issues. Please find below the details of the issues fixed in this release.

Severity Issue Synopsis
H SASNOI-10451 Summary: The SafeNet Agent for PAM cannot authenticate successfully with the PUSH OTP on RHEL.

copy link to clipboardRelease Summary – SafeNet Agent for Pluggable Authentication Module 1.0.1

For better package management, the SafeNet Agent for PAM v1.0.1 is now released using RPM (RedHat Linux and CentOS) and DEB (Ubuntu) files. The earlier version, v1.0.0 was released using a TAR file. In addition, the following issues were resolved in this release.

copy link to clipboardResolved Issues

This release resolves some customer-reported issues. Please find below the details of the issues fixed in this release.

Severity Issue Synopsis
H SASNOI-9762 Summary: The SafeNet Agent for PAM cannot authenticate successfully with PUSH OTP.
SASNOI-9683 Summary: Spelling error in the logs.

copy link to clipboardRelease Summary – SafeNet Agent for Pluggable Authentication Module 1.0.0

The SafeNet Agent for Pluggable Authentication Module 1.0.0 is a new, scalable authentication solution with native support for GrIDSure, PUSH and SMS tokens. The agent solution delivers the following additional features:

copy link to clipboardEnhanced Security

The AES-GCM encryption algorithm is used to provide faster and a more secure way to protect data exchange between the SafeNet Agent for Pluggable Authentication Module and the SAS solution. Enabled by enhanced security, the agent delivers a robust, and dependable authentication experience. A secure key standard, like AES-GCM, can also help you comply with your organization's security policy requirements.

copy link to clipboardSupport for Transport Layer Security v1.2

Support for Transport Layer Security (TLS) v1.2 protocol is added.

Note

The following features of the SafeNet authentication will be supported with future releases:

  • Password Reset on First Use
  • Password Reset

copy link to clipboardException

If AutoLogin feature is enabled on a Linux system for a user, the SafeNet OTP functionality will not be invoked.

copy link to clipboardSystem Requirements

Environment Description
Tokens All tokens supported by the SafeNet server.
SAS Releases - SAS PCE/SPE 3.16 (and above)
- SAS Cloud Edition
Operating Systems - RHEL 8.10 and 9.4
- Ubuntu 22.04 and 24.04
OpenSSL Version - Default OpenSSL versions of the supported Operating Systems.

copy link to clipboardProduct Documentation

The following documentation is available:

We have attempted to make these documents complete, accurate, and useful, but we cannot guarantee them to be perfect. When we discover errors or omissions, or they are brought to our attention, we endeavor to correct them in succeeding releases of the product.

copy link to clipboardSupport Contacts

For more information see Support Contacts.

On this page