Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

learn more… | top users | synonyms

0
votes
1answer
19 views

Add a second authentication to user log in

trap '' 2 code=`oathtool --base32 --totp "xxxxxxxxxxxx"` echo -n Enter Code: read -s password echo "" if [ "$password" == "$code" ]; then echo "You are allowed in" else exit fi trap ...
1
vote
0answers
31 views

pam su authentication with RSA token [closed]

We are implementing RSA token authentication in our company and management decide su - should ask for RSA token passcode for individual (listed users) user. So no-one is going to get root password: ...
2
votes
0answers
16 views

Might any damage have been caused when cancelling the update manager in Linux Mint during an update?

My Linux Mint Update Manager was running an update - a very big one. It was in the middle of downloading package files, and it was taking way too long and I had to stop it, so I clicked Cancel. When I ...
1
vote
2answers
70 views

“SSH Virtual Kiosk”. Does “PermitEmptyPasswords yes” work? - How to make ssh user with empty password, so random users can use it?

How to make properly secure ssh account with empty password for running trusted binary? I'd like to make a kind of "virtual ssh Kiosk" for random users, while limiting "demo app" behind ssh ...
3
votes
2answers
107 views

WPA supplicant dropping/disconnecting NIC in hotel wifi

TL;DR WPA Supplicant intermittently fails on my Raspberry Pi 3 when using a USB Wifi dongle. It appears to do this when "reconnecting" to or changing access points in the hotel. WPA GUI states: ...
-2
votes
2answers
38 views

linux + ssh login took time from one server to another

I have a central Linux server (Red Hat version 6.5), and from this server I establish SSH sessions to other servers. To one server the SSH login took around 5 seconds, while to all others it took ...
1
vote
2answers
84 views

mounting a CIFS filesystem directly or via fstab

I am encountering a problem in which mounting a remote CIFS server without an fstab entry works, but mounting through fstab does not. The following command works: $ sudo mount -t cifs ...
0
votes
0answers
44 views

Authentication required to edit Sudoers - User not listed

I made a small typo in my sudoers file, nothing a simple pkexec can't fix. The problem is that when I added my user with "adduser name" and added "name" to visudo, as well as the root and sudo ...
1
vote
1answer
33 views

The most secure Alpine SSHD Configuration

I'm experimenting with Docker's alpine image and OpenSSH. The sshd_config file that ships with alpine has everything commented out by default. I only uncomment Port 22. I assume this is the most ...
0
votes
1answer
41 views

Connect to a wireless network as standard user without administrator authentication Linux Mint 17.3

I'm trying to get a standard user on my laptop installed with Linux Mint 17.3 on the wireless. I can get to the internet just fine logged in with an administrator but as soon as i log in with a ...
0
votes
0answers
26 views

Email user temporary code access code when using ssh

I am looking for a way to create my own two factor authentication for ssh. After the user enters the correct login info I would like the terminal to send an email to the user that contains a code ...
1
vote
0answers
41 views

How to restrict su from root to nis clients

We are using NIS services for users login for Unix accounts. We have test machines where users themselves install OS and they get root access. Users are using su from root account to NIS user accounts ...
1
vote
0answers
30 views

Openvpn authentication fail caused by wrong system date time

I have a remote linux device connected as an openvpn client to an openvpn server over TCP, with standard certificate authentication. Unfortunately this device has lost the current system Date Time, ...
1
vote
0answers
68 views

how to download a private google spreadsheet from linux command-line?

I have a Google Sheets spreadsheet associated to a Google account, which is private and cannot be made public. I would like to know how to download a private google spreadsheet from the command-line ...
0
votes
1answer
95 views

Timeouts with authd on CentOS 7

I am currently trying to augment my mailsystem by allowing servers that received mails from me within the last ten seconds to perform ident lookups. While the needed iptables rules are working ...
3
votes
2answers
96 views

How can I CTRL^C out of a password prompt?

Say I started a su command, and I want to cancel it. Control+C doesn't work for su like it does for sudo... I have to finish the prompt (either by getting the password wrong enough times or by ...
2
votes
0answers
92 views

Linux Authentication Flow (NSS -> PAM -> AD)

I am a new system administrator at an organization looking to understand the process flow of authentication in regards to how NSS, PAM and WINBIND work together. We've been having winbind related ...
1
vote
1answer
103 views

debian 8.2 can no longer su to root

If I try to "su root" with an incorrect password, I get the expected 'authentication failure'. If I try to with the correct password, I get 'setgid: Operation not permitted" I have tried the usual ...
1
vote
1answer
114 views

MongoDB authentication failed?

I'm currently trying to set up a secure MongoDB database for my various applications, but whenever I try to login with a username and password, but the shell always replies with Error: Authentication ...
1
vote
1answer
14 views

Red Hat 7 GDM + NIS Only Validates First 7 Characters of Password

I've come across an interesting issue this morning. We have noticed that GDM on RHEL 7 is allowing us to log-in with only the first 7 characters of password. We can enter anything or nothing from ...
0
votes
0answers
48 views

Can a Linux server that authenticates against an Active Directory accept public/private keys for passwordless login?

I have a Linux server that authenticates users against an Active Directory. Now interactive logins require username and password and automatic login requires a keytab (Kerberos) for passwordless ...
0
votes
0answers
22 views

Async or Parallel PAM Authentication

I did a long google search on PAM authentication. From various sources what i learned is There is a PAM Call stack, which loads config files from different sources. Based on order of modules,its ...
1
vote
1answer
27 views

Debian package's files authentication

I know that dpkg keeps md5sums of configuration files for each package installed, so it can tell whether they are changed or not when upgrading. Does it keep md5sums for regular (non-configuration) ...
3
votes
0answers
34 views

Changing LDAP server preference on Solaris 10

I've recently inherited a new environment running Solaris 10 and I was looking for information on how to change the LDAP server preference on an LDAP client, namely through modifying the ...
2
votes
1answer
75 views

SSH: display warning when using (deprecated) ssh-dss key

With the 7.0 release, OpenSSH disabled ssh-dss keys. The not-so-recommended workaround is to explicitly re-add DSA key support to .ssh/config, which will eventually be dropped by a later OpenSSH ...
0
votes
1answer
78 views

ssh authentication and remote command output's redirection

I need to run a remote capture on a host via ssh and to authenticate twice, but the second prompt is being redirected. ssh -t user@host "sudo tcpdump -s 0 -n -w - -U -i eth0 not port 22" > ...
0
votes
0answers
16 views

Can Linux ldap users still available if ldap server is unlinked?

I have a Linux with some users have their password in /etc/shadow and other authenticate through LDAP. Is there a way to make user that have their password stored on ldap continuing to be available ...
-1
votes
1answer
28 views

Ask password in window mode after sudo or other command line operations?

Was seen in movies, that after command line operations, the password was asked in separate GUI window. From my (small) experience, password, required from command line, was always asked in command ...
3
votes
0answers
35 views

exists a “two-factor authentication” for sudo, if not how to make one anyway?

tl;dr normaly to gain root priviledges via sudo requires a special user account and the use of its passphrase as means to authetication. Due to keylogging/replay (in X.org session) attacks, I would ...
-1
votes
1answer
35 views

Linux + LDAP/ActiveDirectory: Can't create a private group for the user like “username:username”

My apologies first for not phrasing this question very well, because it's difficult to Google. (Try finding a Google answer with the terms "self user group" in it.) Normally, with PAM in Linux, when ...
-1
votes
2answers
137 views

MariaDB: Create and grant a new user using unix sockets plugin (passwordless)

I just installed MariaDB on Kubuntu 15.10. I am able to log in with the root user via the plugin that authenticates the user from the operating system. (This is new to me, so I am learning about it ...
2
votes
1answer
48 views

Is it possible to have a daemon run a process as another user WITHOUT having a superuser daemon?

I'm working on a project at the moment where I have a daemon that needs to run a process as another user. I would like the daemon to not run as root if possible. However, i'm struggling to figure out ...
2
votes
1answer
86 views

How to allow unauthenticated logins over ssh on FreeBSD?

I created an account ckurs on my FreeBSD 10 workstation. This account uses a custom shell-script as a login-shell that attaches the user to a tmux-session in read-only mode. I have sufficiently ...
1
vote
1answer
54 views

Apache 2.4 basic auth don't work

i have a problem with basic auth to apache 2.4, i have this line: <VirtualHost *:80> ServerAdmin email@email.com DocumentRoot /var/www/html/foo ServerName my.domain.com ...
7
votes
1answer
1k views

SSH keeps skipping my pubkey and asking for a password

Everytime I ssh onto my remote server I need to provide the password. I copied my public key (id_dsa.pub) to the remote server using: ssh-copy-id -i id_dsa.pub user@server I checked it was ...
1
vote
1answer
322 views

Unknown Authz provider with Shibboleth on Apache 2.4

Currently I am dealing with the migration of a PHP web application from Apache 2.2 to Apache 2.4. This application is SSO-enabled, by using Shibboleth in order to manage the authentication process. ...
1
vote
0answers
27 views

Samba Share to Require Password Debugging

I've recently set up Samba on one of my CentOS 7 servers and it works fine, it allows anyone to access it as long as they are on the LAN. Now I need to set up a second share that can only be accessed ...
0
votes
2answers
75 views

apache basic authenticaion

I have enabled basic authentication for one of the directories on website. The code has been added in the httpd.conf file. The user and passwords have been added in the /etc/passwd file. The same ...
2
votes
1answer
41 views

manually redirecting X output through ssh

I have a remote server, on which I am able to log in with ssh. However there is no home directory for my user. When I try to ssh -X to that server, ssh tries to put a cookie into ~/.Xauthority which ...
2
votes
2answers
307 views

How can I set up centralized home directories and user authentication using LDAP and NFS?

I am trying to configure my server to authenticate users using LDAP and save their home directories on a NFS-Directory, also located on the server. i.e.: I share a directory on my server: /nfsexport ...
1
vote
0answers
40 views

User creation during authentication

I'm working with OpenBSD 5.6 and the goal is that I need to create user when he or she tries to authenticate with specific password. I've written a script for this purpose and everything goes ok but ...
1
vote
1answer
145 views

telnet accessing website with authentication

I am trying to access httpbin.org with basic authentication. I must enter a username and a password. Using telnet in the command terminal(linux) I execute at least : telnet httpbin.org 80 HEAD ...
0
votes
1answer
137 views

Enable sssd caching and linux to honor that cache on CentOS 5

I wanted to enable sssd caching on CentOs and not to use nscd caching, because sssd itself is giving that option. However, authconfig is not giving the option for --enablecachecreds even on the ...
4
votes
2answers
53 views

Understand the PasswordAuthentication in sshd configuration

I have an OpenSSH server which supports only password authentication: [martin@ ~]$ ssh -v 10.10.1.183 -l root OpenSSH_5.2p1 FreeBSD-20090522, OpenSSL 0.9.8k 25 Mar 2009 debug1: Reading configuration ...
3
votes
1answer
74 views

How to log messages from a pam module?

The problem I am trying to solve is that I want to know if a certain PAM config file is being used or not. The latest version of IBM MQ (V8) provides a PAM file /etc/pam.d/ibmmq. We're ...
0
votes
0answers
33 views

GUI Authentication Requiring a Different User Auth

A few weeks ago a colleague signed into my Fedora 22 workstation. He too is a group admin. Ever since then whenever I attempt to install or unlock the "Authentication Required" modal requires his ...
0
votes
1answer
197 views

Valid root/user passwords not working on EC2

There is an authentication failure when I'm trying to enter password for any of my accounts after an update using yum. My authentication got broken, while everything else works. The updates were ...
6
votes
4answers
2k views

Is the username in Unix case sensitive?

Is ssh abc@servername different from ssh Abc@servername? Does the case of the username matter in Unix? My user authenticates via LDAP.
2
votes
4answers
189 views

Authentication failure on Amazon Linux

There is an authentication failure when I'm trying to enter password for any of my accounts. I am logged in using ssh to my AWS EC2 instance. After a while I checked the privileges to files that ...
1
vote
1answer
192 views

Dogtag CA after installation

After Dogtag 10 installation(step by step by https://www.youtube.com/watch?v=C3eElJAz7lU) when I open Admin (https://localhost.localdomain:8443/ca/agent/ca/) I get following error Problem ...