Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

learn more… | top users | synonyms

2
votes
5answers
180 views

Does ssh send the password over the network?

Basically the entire question is in the headline: Does ssh send the password over the network? Presuming of course that login via username and password is used. I'm asking because if ssh doesn't send ...
3
votes
0answers
18 views

Can SSH public key authentication use pam_group?

I'm configuring some servers to use LDAP (via PAM) to authenticate users. Additionally, I use pam_group to add all users to some system groups like audio/video/vboxusers/.... My PAM configuration ...
0
votes
0answers
13 views

Unable to Authenticate PhPVirtualBox Remote host - Firewall off - Auth Off

I am trying to get the most very basic setup running that I can build upon for controlling a remote Virtualbox installation. The setup : Server A : 192.168.1.10 Oracle VM VirtualBox web service ...
0
votes
0answers
24 views

proxy authentication failed but for selected packages only

I have recently installed Ubuntu 14.0.1 version on my machine. I use a proxy server to access internet and for this I have to provide the necessary IP address of the proxy server, port number and my ...
1
vote
0answers
29 views

Encrypt directory on Linux

I need to create an encrypted directory (to be then filled with files and subdirectories) in a Linux ext4 filesystem, accessible to just one user. It should be: visible (just the root) from the non-...
0
votes
2answers
28 views

Is there any way to impose user validation with yum?

I am trying to set up a package distribution via yum. Is there any way to restrict who can install the package from the server side (running RHEL 7.1)? I imagine that it is possible by whitelisting ...
1
vote
0answers
52 views

postgresql auth against samba active directory

I've recently set up a new Samba4 Active Directory to handle centralized authentication for my small office network. On this server is also a postgresql-9.5 instance, and I'm trying to have it ...
3
votes
1answer
72 views

PAM failing to authenticate sudo, after successfully contacting ssh-agent

Setting up PAM sudo authentication, using ssh-agent, on 14.04.1-Ubuntu server LTS. I'm still unable to successfully authenticate sudo, via the ssh-agent, using PAM. Here are my relevant /var/log/...
0
votes
0answers
26 views

FTP user home directory for LDAP group

My company uses LDAP server for users authentication. We are now planning to add FTP server. The complicated thing is - we need several users belonging to the one group in LDAP have same home (chroot) ...
3
votes
0answers
43 views

How to pass private ssh key via string, not a file?

I have a text of a private key file. I want to connect via ssh to other node, yet the gateway I am in does not provide me with file system access. How to pass a text representation of key and not a ...
0
votes
0answers
15 views

VNC client with possibility to specify username, and encryption keys

My KVMoIP from ADDER requires connection with username and encryption. The telnet prompt mentions RFB 4.0. None of my Linux clients can do that? I tried vncviewer, xvnc4viewer, and vinaigre, each the ...
0
votes
0answers
16 views

Git + Nginx - Is it safe to have https auth for cloning and pushing to repo, while remove any auth from gitweb block?

I have following nginx configuration on Ubuntu 14.04 to use together with git httpd backend and gitweb to anonymous browse of repo and push/clone with authentication. Is it safe to use such or I ...
1
vote
1answer
57 views

2 Factor Authentication - ask about token only at first login

I've set up google OTP authentication and RSA key authentication on my server but it's very anoing, after some time, to type OTP from phone every time. I would like to know if there is any possibility ...
0
votes
1answer
20 views

Add a second authentication to user log in

trap '' 2 code=`oathtool --base32 --totp "xxxxxxxxxxxx"` echo -n Enter Code: read -s password echo "" if [ "$password" == "$code" ]; then echo "You are allowed in" else exit fi trap ...
1
vote
0answers
39 views

pam su authentication with RSA token [closed]

We are implementing RSA token authentication in our company and management decide su - should ask for RSA token passcode for individual (listed users) user. So no-one is going to get root password: it'...
2
votes
0answers
19 views

Might any damage have been caused when cancelling the update manager in Linux Mint during an update?

My Linux Mint Update Manager was running an update - a very big one. It was in the middle of downloading package files, and it was taking way too long and I had to stop it, so I clicked Cancel. When I ...
1
vote
2answers
92 views

“SSH Virtual Kiosk”. Does “PermitEmptyPasswords yes” work? - How to make ssh user with empty password, so random users can use it?

How to make properly secure ssh account with empty password for running trusted binary? I'd like to make a kind of "virtual ssh Kiosk" for random users, while limiting "demo app" behind ssh "pseudo-...
3
votes
2answers
162 views

WPA supplicant dropping/disconnecting NIC in hotel wifi

TL;DR WPA Supplicant intermittently fails on my Raspberry Pi 3 when using a USB Wifi dongle. It appears to do this when "reconnecting" to or changing access points in the hotel. WPA GUI states: "...
-2
votes
2answers
39 views

linux + ssh login took time from one server to another

I have a central Linux server (Red Hat version 6.5), and from this server I establish SSH sessions to other servers. To one server the SSH login took around 5 seconds, while to all others it took ...
1
vote
2answers
132 views

mounting a CIFS filesystem directly or via fstab

I am encountering a problem in which mounting a remote CIFS server without an fstab entry works, but mounting through fstab does not. The following command works: $ sudo mount -t cifs //w.x.y.z/Home$...
0
votes
0answers
53 views

Authentication required to edit Sudoers - User not listed

I made a small typo in my sudoers file, nothing a simple pkexec can't fix. The problem is that when I added my user with "adduser name" and added "name" to visudo, as well as the root and sudo groups:...
1
vote
1answer
53 views

The most secure Alpine SSHD Configuration

I'm experimenting with Docker's alpine image and OpenSSH. The sshd_config file that ships with alpine has everything commented out by default. I only uncomment Port 22. I assume this is the most ...
0
votes
1answer
62 views

Connect to a wireless network as standard user without administrator authentication Linux Mint 17.3

I'm trying to get a standard user on my laptop installed with Linux Mint 17.3 on the wireless. I can get to the internet just fine logged in with an administrator but as soon as i log in with a ...
0
votes
0answers
27 views

Email user temporary code access code when using ssh

I am looking for a way to create my own two factor authentication for ssh. After the user enters the correct login info I would like the terminal to send an email to the user that contains a code ...
2
votes
1answer
64 views

How to restrict su from root to nis clients

We are using NIS services for users login for Unix accounts. We have test machines where users themselves install OS and they get root access. Users are using su from root account to NIS user accounts ...
1
vote
0answers
31 views

Openvpn authentication fail caused by wrong system date time

I have a remote linux device connected as an openvpn client to an openvpn server over TCP, with standard certificate authentication. Unfortunately this device has lost the current system Date Time, ...
1
vote
0answers
107 views

how to download a private google spreadsheet from linux command-line?

I have a Google Sheets spreadsheet associated to a Google account, which is private and cannot be made public. I would like to know how to download a private google spreadsheet from the command-line ...
0
votes
1answer
125 views

Timeouts with authd on CentOS 7

I am currently trying to augment my mailsystem by allowing servers that received mails from me within the last ten seconds to perform ident lookups. While the needed iptables rules are working ...
3
votes
2answers
136 views

How can I CTRL^C out of a password prompt?

Say I started a su command, and I want to cancel it. Control+C doesn't work for su like it does for sudo... I have to finish the prompt (either by getting the password wrong enough times or by ...
3
votes
0answers
138 views

Linux Authentication Flow (NSS -> PAM -> AD)

I am a new system administrator at an organization looking to understand the process flow of authentication in regards to how NSS, PAM and WINBIND work together. We've been having winbind related ...
1
vote
1answer
150 views

debian 8.2 can no longer su to root

If I try to "su root" with an incorrect password, I get the expected 'authentication failure'. If I try to with the correct password, I get 'setgid: Operation not permitted" I have tried the usual '...
1
vote
1answer
169 views

MongoDB authentication failed?

I'm currently trying to set up a secure MongoDB database for my various applications, but whenever I try to login with a username and password, but the shell always replies with Error: Authentication ...
1
vote
1answer
17 views

Red Hat 7 GDM + NIS Only Validates First 7 Characters of Password

I've come across an interesting issue this morning. We have noticed that GDM on RHEL 7 is allowing us to log-in with only the first 7 characters of password. We can enter anything or nothing from ...
1
vote
1answer
64 views

Can a Linux server that authenticates against an Active Directory accept public/private keys for passwordless login?

I have a Linux server that authenticates users against an Active Directory. Now interactive logins require username and password and automatic login requires a keytab (Kerberos) for passwordless ...
0
votes
0answers
30 views

Async or Parallel PAM Authentication

I did a long google search on PAM authentication. From various sources what i learned is There is a PAM Call stack, which loads config files from different sources. Based on order of modules,its ...
1
vote
1answer
28 views

Debian package's files authentication

I know that dpkg keeps md5sums of configuration files for each package installed, so it can tell whether they are changed or not when upgrading. Does it keep md5sums for regular (non-configuration) ...
3
votes
0answers
48 views

Changing LDAP server preference on Solaris 10

I've recently inherited a new environment running Solaris 10 and I was looking for information on how to change the LDAP server preference on an LDAP client, namely through modifying the ...
2
votes
1answer
89 views

SSH: display warning when using (deprecated) ssh-dss key

With the 7.0 release, OpenSSH disabled ssh-dss keys. The not-so-recommended workaround is to explicitly re-add DSA key support to .ssh/config, which will eventually be dropped by a later OpenSSH ...
0
votes
1answer
84 views

ssh authentication and remote command output's redirection

I need to run a remote capture on a host via ssh and to authenticate twice, but the second prompt is being redirected. ssh -t user@host "sudo tcpdump -s 0 -n -w - -U -i eth0 not port 22" > /tmp/...
0
votes
0answers
16 views

Can Linux ldap users still available if ldap server is unlinked?

I have a Linux with some users have their password in /etc/shadow and other authenticate through LDAP. Is there a way to make user that have their password stored on ldap continuing to be available (...
-1
votes
1answer
32 views

Ask password in window mode after sudo or other command line operations?

Was seen in movies, that after command line operations, the password was asked in separate GUI window. From my (small) experience, password, required from command line, was always asked in command ...
3
votes
0answers
40 views

exists a “two-factor authentication” for sudo, if not how to make one anyway?

tl;dr normaly to gain root priviledges via sudo requires a special user account and the use of its passphrase as means to authetication. Due to keylogging/replay (in X.org session) attacks, I would ...
-1
votes
1answer
43 views

Linux + LDAP/ActiveDirectory: Can't create a private group for the user like “username:username”

My apologies first for not phrasing this question very well, because it's difficult to Google. (Try finding a Google answer with the terms "self user group" in it.) Normally, with PAM in Linux, when ...
-1
votes
2answers
204 views

MariaDB: Create and grant a new user using unix sockets plugin (passwordless)

I just installed MariaDB on Kubuntu 15.10. I am able to log in with the root user via the plugin that authenticates the user from the operating system. (This is new to me, so I am learning about it ...
2
votes
1answer
58 views

Is it possible to have a daemon run a process as another user WITHOUT having a superuser daemon?

I'm working on a project at the moment where I have a daemon that needs to run a process as another user. I would like the daemon to not run as root if possible. However, i'm struggling to figure out ...
2
votes
1answer
100 views

How to allow unauthenticated logins over ssh on FreeBSD?

I created an account ckurs on my FreeBSD 10 workstation. This account uses a custom shell-script as a login-shell that attaches the user to a tmux-session in read-only mode. I have sufficiently ...
1
vote
1answer
72 views

Apache 2.4 basic auth don't work

I have a problem with basic auth in apache 2.4. I have these lines: <VirtualHost *:80> ServerAdmin email@email.com DocumentRoot /var/www/html/foo ServerName my.domain.com <...
9
votes
1answer
2k views

SSH keeps skipping my pubkey and asking for a password

Everytime I ssh onto my remote server I need to provide the password. I copied my public key (id_dsa.pub) to the remote server using: ssh-copy-id -i id_dsa.pub user@server I checked it was ...
1
vote
1answer
415 views

Unknown Authz provider with Shibboleth on Apache 2.4

Currently I am dealing with the migration of a PHP web application from Apache 2.2 to Apache 2.4. This application is SSO-enabled, by using Shibboleth in order to manage the authentication process. ...
1
vote
0answers
30 views

Samba Share to Require Password Debugging

I've recently set up Samba on one of my CentOS 7 servers and it works fine, it allows anyone to access it as long as they are on the LAN. Now I need to set up a second share that can only be accessed ...