Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

learn more… | top users | synonyms

0
votes
0answers
26 views

Adding CentOS 7 to Active Directory

I am having a hard time adding a CentOS 7 machine to my domain (Active Directory 2012 running in Windows 2008 mode). I am using realmd to join the machine to the domain. Here is what I have checked so ...
2
votes
2answers
54 views

Why user without any PASSWD entry in sudo config has to authenticate every time?

Consider this sudo config for two users: mary ALL = (ALL) NOPASSWD: /bin/ls, /bin/cat bob ALL = (ALL) PASSWD: /bin/sort Now, when user mary executes any command not in the list she has to ...
0
votes
1answer
16 views

persisting multi-factor user data for custom pam authentication in CentOS 7

I am designing n-factor authentication for CentOS 7 using a custom PAM module. When the user tries to SSH, they will be texted a pin code, and be prompted to enter the pin. Where should I store the ...
3
votes
2answers
37 views

How to stop sudo PAM messages in auth.log for a specific user?

I am using Zabbix for monitoring my environment and zabbix_agentd executes as user zabbix one custom script every 60 seconds; it uses sudo to run this script as root. In /var/log/auth.log I see every ...
1
vote
1answer
77 views

Installing Kali 2.0 on virtual box failled

I'm using VirtualBox 4.3.22 and I'm trying to install Kali 2.0. After the installation progress is complete and I reboot, I have to enter my username and password as usual, e.g username newbie; ...
2
votes
1answer
59 views

n-factor SSH authentication for CentOS 7

How can I enable (and require) n-factor authentication for all SSH connections to a CentOS 7 server? I have read about Google Authenticator, which provides two factor authentication. But that is ...
8
votes
1answer
102 views

How to add additional steps to login?

What I would like to achieve is an interactive program that runs either before or after asking the user for the password, but won't handle over the access to the computer unless it exited with ...
1
vote
1answer
26 views

Mutt authentication fails because username string is malformed

I'm trying to set up mutt to work with our internal email server. Our user names have the form user@domain.lan But when mutt tries to authenticate, it appends the mail server's url to the username ...
-1
votes
1answer
52 views

Apache behind proxy: bypass Auth Basic for some ip

I need bypass basic auth to some ip, Apache is 2.4 and is behind haproxy, i have inserti this into Document Root section: <Directory /path/to/webroot> AuthUserFile /etc/apache2/.htpasswd ...
0
votes
0answers
14 views

Polkit Accepting Nothing

Today I switched from Windows to Fedora 21--Fermi Linux using KDE specifically--and I have a fair knowledge of how to do navigate my way around and install things via command line, but when it's ...
0
votes
0answers
19 views

Webmin: Cannot login through nginx reverse proxy

I've created a reverse proxy for webmin through nginx to run webmin at [site domain]/webmin instead of port 10000 ([site domain]:10000). When I go to [site domain]/webmin, the login page shows up as ...
3
votes
1answer
41 views

Disabling ssh password authentication does not work on my debian VPS

I have a Debian 7 VPS setup. I just enabled SSH Key authentication and disabled password authentication but the disabling did not work. When I attempt to SSH into my VPS, it prompts me for my SSH Key ...
1
vote
1answer
66 views

Cent OS 6.6 enable Plaintext authentication on dovecot and postfix

A customer of mine wants to use gmail as their default mail client but I have rolled forward to a new CENTOS server version (6.6, ok it's not "new" new) and the dovecot and postfix settings are ...
1
vote
0answers
15 views

Authentication shared over multiple systems [closed]

TL;DR I'm looking for a software that allows authentication shared over multiple systems to be used for authorizing access to all devices connected to a network. Any advice, recommendation inclusive ...
0
votes
1answer
14 views

ssh-copy-id doesn't copy to non-default location

Does ssh-copy-id recognize if the authorized_keys file is not in ~/.ssh? I am storing my authorized keys file in a different folder, which I have configured as: AuthorizedKeysFile ...
0
votes
1answer
219 views

Setting up connection to WPA2 Enterprise (PEAP/MSCHAPv2) with two-level certificate

For a long time, I have been able to use NetworkManager + wpa_supplicant as configured in Debian 7 to connect to a secure wireless at work (which is WPA2 Enterprise, with PEAP + MSCHAPv2 ...
0
votes
0answers
71 views

firefox 38 hanging with corporate proxy and winbind?

I seem to have broken firefox 38 and it is unusable. It just hangs and freezes for long periods of time ranging from a few seconds up to infinity - usually in steps at the authentication prompt for ...
0
votes
1answer
47 views

Linux Mint, is there a captive-portal software for?

Does Linux Mint 17+ has a software for doing captive portal? Amongst the provided list here, it seems none is mint-compatible.
0
votes
0answers
40 views

When connecting my Wifi, open browser automatically. How?

I made my linux computer providing a wifi access. This is only to browse its local website. As one does for captive portal, i aim to force the browser display and direct to my homepage : - you choose ...
1
vote
0answers
62 views

Captive portal detection, popup implementation?

Based on hostapd, I m building a captive portal. - My Linux Machine provides a Wifi access. - iPad's and Android clients-tablets connect this Wifi. Generally, any client OS check if a url is ...
0
votes
1answer
76 views

Open a webpage and enter a username and password via CLI

Ultimately, I want to use a bash script to automatically open and log into a website. I was wondering if I could use the curl or elinks commands to log in to a website and then somehow export that ...
0
votes
1answer
25 views

Install script - sudo authorisation compatibility?

I am currently updating a few scripts, and am planning on releasing some useful ones so others can use them (so they need to work across a wide range of machines without crashing, and without breaking ...
2
votes
2answers
63 views

Add a user wthout password but with SSH and public key

I want to add a user to Red Hat Linux that will not use a password for logging in, but instead use a public key for ssh. This would be on the command line.
0
votes
3answers
151 views

Get MAC of a client request?

I have a network with 20 raspberries (clients) and 1 server. I'd like to check MAC of client request, is that possible ? Further, possible without being known (nor visible) by the client ? NB : I ...
0
votes
1answer
59 views

Unable to login with SSH-RSA key

This post is following this question : Authentication refused: bad ownership or modes for file /var/git/.ssh/authorized_keys . The issue as exposed there is solved (about files modes of the ...
3
votes
3answers
927 views

Authentication refused: bad ownership or modes for file /var/git/.ssh/authorized_keys [duplicate]

EDIT The issue as exposed here is solved (about files modes of the .ssh folder. But an other issue persists so I create a new question : > Unable to login with SSH-RSA key I can no longer ...
2
votes
0answers
103 views

Wifi with WPA2-EAP MS-CHAPv2 authentication (username and password) during Debian installation

I am currently attempting to install Debian on my laptop computer. During the network configuration stage, I am prompted to "enter a passphrase for WPA/WPA2 PSK authentication". Unfortunately, I am on ...
0
votes
1answer
184 views

is iptables broken on my raspberry-pi? how to fix?

I am getting some person(s) trying to brute force my ssh, from multiple ip addresses (small sample) : May 22 19:50:02 rpi sshd[1272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
2
votes
1answer
48 views

Configure OpenSSH server not to require password *or* key for a particular user

For the purpose of a training session, I'd like to make it possible for a particular user to connect without requiring a password or key-based authentication. I do not know the IPs or other data of ...
-1
votes
1answer
46 views

How can i get out of the authentication screen and shutdown? [closed]

I decided to install linux ,dualbooted, on my laptop but ran in some issues . I installed several corrupt installs causing me to allocate most of my harddrive ,at least the parts that do not contain ...
1
vote
1answer
138 views

Simple Radius authentication

I'm looking into using Radius as an authentication server for a few Ubuntu servers when accessing through SSH. I have tried using libpam-radius-auth but it doesn't work quite as I need. My goal is to ...
0
votes
1answer
134 views

what does pam_env.so really do?

Having the following line: auth required pam_env.so Documentation happily says "This module is required—it must run successfully for authentication to proceed." ...
0
votes
0answers
118 views

ldap user on samba share

I have two servers: one is ldap and the other is samba. I have an existing user on the ldap server for an ldap client. Now I want to use this user account with samba to give share access permissions ...
1
vote
3answers
138 views

Why is gksu asking me for root password and not my password?

On one of my systems, I'm running Gentoo Linux and I've installed x11-libs/gksu-2.0.2-r1. I've disabled the root account using sudo passwd -dl root and I want to be able to run GUI apps which need ...
0
votes
0answers
95 views

Configure ldap client without yast

I'm configuring an LDAP client in a large number of Suse servers. The only way that I know to do this is using Yast, and this way is slow. I can't find another way. Anyone know another way to do ...
1
vote
1answer
455 views

CUPS not working correctly after Debian Wheezy -> Jessie upgrade because of a faulty libpam

I just upgraded a Debian Wheezy to Jessie, by changing the /etc/apt/sources.lst. If important: I pinned systemd to stay with sysvinit, and after the upgrade I removed the pin. If I now do apt-get ...
0
votes
1answer
49 views

Mixing authentication types in Apache

Currently, I'm using Apache to host my project repos (mercurial) and use Kerberos auth for users to push. The same Kerberos password is used to log in through SSH and there is a LDAP backend for user ...
10
votes
1answer
487 views

D-Bus authentication and authorization

I'm trying to set up remote access to D-Bus, and I don't understand how authentication and authorization are (not) working. I have a D-Bus server listening on an abstract socket. $ echo ...
2
votes
1answer
33 views

Directory Server doing lookups on one ldap server and authintication on another ldap server

I have an old Centos Directory Server and a new 389 Directory Server. I don't want to use sssd at the moment so lets keep that suggestion off the table. I do the following my RHEL 6.4 servers: ...
0
votes
1answer
124 views

Why does my SD card need authentication to access?

I'm running Ubuntu 14.04 on a Toshiba Chromebook 2 via crouton. I recently reformatted a 256GB SD card that I keep in my chromebook at all times. My problem is that every time I try to access my SD ...
0
votes
0answers
109 views

Authentication error with apt-get

I am trying to install CppCMS (A C++ network library) on my Debian computer. I have added the repository sources to sources.list file. When I run: $ sudo apt-get source cppcms I get the warning ...
1
vote
2answers
2k views

What is difference between pbrun and sudo command?

What is difference between pbrun and sudo command? I have seen people executing pbrun sudo su - what this means? I know su -, it will try to switch to root user. What speciality pbrun gives to sudo ...
4
votes
1answer
365 views

Adding a system user to an LDAP group with SSSD

Our LDAP server is running RFC 2307 groups (memberuid contains a username, not a DN). With our old nscd/nss_ldap/pam_ldap setup, you could list a non-LDAP user (a system user from /etc/passwd) in an ...
1
vote
1answer
74 views

Throttle accounts after failed SSH login attempts

I have to set up a server that will allow remote logins. Obviously security is an issue. In this first pass we are discussing:- Locking a person for 15 minutes if they fail to login correctly three ...
2
votes
1answer
179 views

Locally deny login to users authenticated via LDAP

I have a RedHat Linux server that are is use for more than 1000 users Users names are coming to the server via LDAP protocol, so login authentication is from the LDAP My question: is it possible to ...
0
votes
0answers
65 views

Authenticating a virtual machine against a git server

I have a CentOS 7 VM hosted on a Scientific Linux machine (Both branches are Red Hat). I'm using docker as the SW to emulate CentOS over SL. Communication between both is done through a bridge (a ...
0
votes
1answer
105 views

authenicate OpenSUSE 10.2 client to CentOS 6.6 LDAP server

In our company, we have a network where I installed a working LDAP server for our CentOS 6 servers (FTP/WEB/Pydio/VOD/etc servers) about 25 of them. All working perfectly with LDAP authentication. ...
0
votes
1answer
118 views

Putty not asking for Two Factor Authentication Code

I'm running a CentOS 7 server. So I've installed Two Factor Authentication with Google Authenticator a while back and all was well. However I can't access my server at the moment over SSH. PuTTY and ...
-1
votes
1answer
44 views

Why isn't my apache authentication working?

I am trying to set up apache2 authentication for a given website which can be found locally on my webserver. When I try to open up the website it states Internal Server Error 500. Then I put the ...
0
votes
1answer
116 views

How to set password of cups 1.3.7 (/etc/cups/passwd.md5) without prompting?

My company is using CUPS v1.3.7, I would like to allow users to be authenticated only in the cups web interface and not via SSH. I imagine, i should use the authentication type BasicDigest in ...