Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

learn more… | top users | synonyms

1
vote
1answer
9 views

Red Hat 7 GDM + NIS Only Validates First 7 Characters of Password

I've come across an interesting issue this morning. We have noticed that GDM on RHEL 7 is allowing us to log-in with only the first 7 characters of password. We can enter anything or nothing from ...
0
votes
0answers
20 views

Can a Linux server that authenticates against an Active Directory accept public/private keys for passwordless login?

I have a Linux server that authenticates users against an Active Directory. Now interactive logins require username and password and automatic login requires a keytab (Kerberos) for passwordless ...
0
votes
0answers
12 views

Async or Parallel PAM Authentication

I did a long google search on PAM authentication. From various sources what i learned is There is a PAM Call stack, which loads config files from different sources. Based on order of modules,its ...
1
vote
1answer
25 views

Debian package's files authentication

I know that dpkg keeps md5sums of configuration files for each package installed, so it can tell whether they are changed or not when upgrading. Does it keep md5sums for regular (non-configuration) ...
3
votes
0answers
13 views

Changing LDAP server preference on Solaris 10

I've recently inherited a new environment running Solaris 10 and I was looking for information on how to change the LDAP server preference on an LDAP client, namely through modifying the ...
2
votes
1answer
39 views

SSH: display warning when using (deprecated) ssh-dss key

With the 7.0 release, OpenSSH disabled ssh-dss keys. The not-so-recommended workaround is to explicitly re-add DSA key support to .ssh/config, which will eventually be dropped by a later OpenSSH ...
0
votes
1answer
53 views

ssh authentication and remote command output's redirection

I need to run a remote capture on a host via ssh and to authenticate twice, but the second prompt is being redirected. ssh -t user@host "sudo tcpdump -s 0 -n -w - -U -i eth0 not port 22" > ...
0
votes
0answers
12 views

Can Linux ldap users still available if ldap server is unlinked?

I have a Linux with some users have their password in /etc/shadow and other authenticate through LDAP. Is there a way to make user that have their password stored on ldap continuing to be available ...
-1
votes
1answer
20 views

Ask password in window mode after sudo or other command line operations?

Was seen in movies, that after command line operations, the password was asked in separate GUI window. From my (small) experience, password, required from command line, was always asked in command ...
3
votes
0answers
26 views

exists a “two-factor authentication” for sudo, if not how to make one anyway?

tl;dr normaly to gain root priviledges via sudo requires a special user account and the use of its passphrase as means to authetication. Due to keylogging/replay (in X.org session) attacks, I would ...
-1
votes
1answer
25 views

Linux + LDAP/ActiveDirectory: Can't create a private group for the user like “username:username”

My apologies first for not phrasing this question very well, because it's difficult to Google. (Try finding a Google answer with the terms "self user group" in it.) Normally, with PAM in Linux, when ...
-1
votes
2answers
32 views

MariaDB: Create and grant a new user using unix sockets plugin (passwordless)

I just installed MariaDB on Kubuntu 15.10. I am able to log in with the root user via the plugin that authenticates the user from the operating system. (This is new to me, so I am learning about it ...
2
votes
1answer
34 views

Is it possible to have a daemon run a process as another user WITHOUT having a superuser daemon?

I'm working on a project at the moment where I have a daemon that needs to run a process as another user. I would like the daemon to not run as root if possible. However, i'm struggling to figure out ...
2
votes
1answer
54 views

How to allow unauthenticated logins over ssh on FreeBSD?

I created an account ckurs on my FreeBSD 10 workstation. This account uses a custom shell-script as a login-shell that attaches the user to a tmux-session in read-only mode. I have sufficiently ...
1
vote
1answer
32 views

Apache 2.4 basic auth don't work

i have a problem with basic auth to apache 2.4, i have this line: <VirtualHost *:80> ServerAdmin email@email.com DocumentRoot /var/www/html/foo ServerName my.domain.com ...
3
votes
1answer
242 views

SSH keeps skipping my pubkey and asking for a password

Everytime I ssh onto my remote server I need to provide the password. I copied my public key (id_dsa.pub) to the remote server using: ssh-copy-id -i id_dsa.pub user@server I checked it was ...
2
votes
1answer
92 views

Unknown Authz provider with Shibboleth on Apache 2.4

Currently I am dealing with the migration of a PHP web application from Apache 2.2 to Apache 2.4. This application is SSO-enabled, by using Shibboleth in order to manage the authentication process. ...
1
vote
0answers
23 views

Samba Share to Require Password Debugging

I've recently set up Samba on one of my CentOS 7 servers and it works fine, it allows anyone to access it as long as they are on the LAN. Now I need to set up a second share that can only be accessed ...
0
votes
2answers
47 views

apache basic authenticaion

I have enabled basic authentication for one of the directories on website. The code has been added in the httpd.conf file. The user and passwords have been added in the /etc/passwd file. The same ...
2
votes
1answer
35 views

manually redirecting X output through ssh

I have a remote server, on which I am able to log in with ssh. However there is no home directory for my user. When I try to ssh -X to that server, ssh tries to put a cookie into ~/.Xauthority which ...
0
votes
2answers
125 views

How can I set up centralized home directories and user authentication using LDAP and NFS?

I am trying to configure my server to authenticate users using LDAP and save their home directories on a NFS-Directory, also located on the server. i.e.: I share a directory on my server: /nfsexport ...
1
vote
0answers
38 views

User creation during authentication

I'm working with OpenBSD 5.6 and the goal is that I need to create user when he or she tries to authenticate with specific password. I've written a script for this purpose and everything goes ok but ...
1
vote
1answer
51 views

telnet accessing website with authentication

I am trying to access httpbin.org with basic authentication. I must enter a username and a password. Using telnet in the command terminal(linux) I execute at least : telnet httpbin.org 80 HEAD ...
0
votes
1answer
68 views

Enable sssd caching and linux to honor that cache on CentOS 5

I wanted to enable sssd caching on CentOs and not to use nscd caching, because sssd itself is giving that option. However, authconfig is not giving the option for --enablecachecreds even on the ...
4
votes
2answers
38 views

Understand the PasswordAuthentication in sshd configuration

I have an OpenSSH server which supports only password authentication: [martin@ ~]$ ssh -v 10.10.1.183 -l root OpenSSH_5.2p1 FreeBSD-20090522, OpenSSL 0.9.8k 25 Mar 2009 debug1: Reading configuration ...
3
votes
1answer
35 views

How to log messages from a pam module?

The problem I am trying to solve is that I want to know if a certain PAM config file is being used or not. The latest version of IBM MQ (V8) provides a PAM file /etc/pam.d/ibmmq. We're ...
0
votes
0answers
26 views

GUI Authentication Requiring a Different User Auth

A few weeks ago a colleague signed into my Fedora 22 workstation. He too is a group admin. Ever since then whenever I attempt to install or unlock the "Authentication Required" modal requires his ...
1
vote
1answer
126 views

Valid root/user passwords not working on EC2

There is an authentication failure when I'm trying to enter password for any of my accounts after an update using yum. My authentication got broken, while everything else works. The updates were ...
4
votes
4answers
707 views

Is the username in Unix case sensitive?

Is ssh abc@servername different from ssh Abc@servername? Does the case of the username matter in Unix? My user authenticates via LDAP.
2
votes
4answers
152 views

Authentication failure on Amazon Linux

There is an authentication failure when I'm trying to enter password for any of my accounts. I am logged in using ssh to my AWS EC2 instance. After a while I checked the privileges to files that ...
1
vote
1answer
114 views

Dogtag CA after installation

After Dogtag 10 installation(step by step by https://www.youtube.com/watch?v=C3eElJAz7lU) when I open Admin (https://localhost.localdomain:8443/ca/agent/ca/) I get following error Problem ...
1
vote
1answer
105 views

Sendmail issues “530 Authentication required” error message when authinfo is supplied

sender_email - email address that does not exist, but must be used as FROM address, because receiver host rejects emails from other emails. receiver_email - email that is supposed to receive the sent ...
0
votes
1answer
58 views

Linux: root filesystem via network (with authentication)

I try to create a linux computer which loads its root filesystem from the network. This currently works with NFS, but unfortunately it is not very secure. The network is just a home network, which ...
1
vote
0answers
1k views

Adding CentOS 7 to Active Directory

I am having a hard time adding a CentOS 7 machine to my domain (Active Directory 2012 running in Windows 2008 mode). I am using realmd to join the machine to the domain. Here is what I have checked so ...
3
votes
2answers
96 views

Why user without any PASSWD entry in sudo config has to authenticate every time?

Consider this sudo config for two users: mary ALL = (ALL) NOPASSWD: /bin/ls, /bin/cat bob ALL = (ALL) PASSWD: /bin/sort Now, when user mary executes any command not in the list she has to ...
1
vote
1answer
29 views

persisting multi-factor user data for custom pam authentication in CentOS 7

I am designing n-factor authentication for CentOS 7 using a custom PAM module. When the user tries to SSH, they will be texted a pin code, and be prompted to enter the pin. Where should I store the ...
3
votes
1answer
564 views

How to stop sudo PAM messages in auth.log for a specific user?

I am using Zabbix for monitoring my environment and zabbix_agentd executes as user zabbix one custom script every 60 seconds; it uses sudo to run this script as root. In /var/log/auth.log I see every ...
1
vote
1answer
193 views

Installing Kali 2.0 on virtual box failled

I'm using VirtualBox 4.3.22 and I'm trying to install Kali 2.0. After the installation progress is complete and I reboot, I have to enter my username and password as usual, e.g username newbie; ...
2
votes
1answer
230 views

n-factor SSH authentication for CentOS 7

How can I enable (and require) n-factor authentication for all SSH connections to a CentOS 7 server? I have read about Google Authenticator, which provides two factor authentication. But that is ...
8
votes
1answer
120 views

How to add additional steps to login?

What I would like to achieve is an interactive program that runs either before or after asking the user for the password, but won't handle over the access to the computer unless it exited with ...
1
vote
1answer
42 views

Mutt authentication fails because username string is malformed

I'm trying to set up mutt to work with our internal email server. Our user names have the form user@domain.lan But when mutt tries to authenticate, it appends the mail server's url to the username ...
-1
votes
1answer
351 views

Apache behind proxy: bypass Auth Basic for some ip

I need bypass basic auth to some ip, Apache is 2.4 and is behind haproxy, i have inserti this into Document Root section: <Directory /path/to/webroot> AuthUserFile /etc/apache2/.htpasswd ...
0
votes
0answers
29 views

Polkit Accepting Nothing

Today I switched from Windows to Fedora 21--Fermi Linux using KDE specifically--and I have a fair knowledge of how to do navigate my way around and install things via command line, but when it's ...
0
votes
0answers
78 views

Webmin: Cannot login through nginx reverse proxy

I've created a reverse proxy for webmin through nginx to run webmin at [site domain]/webmin instead of port 10000 ([site domain]:10000). When I go to [site domain]/webmin, the login page shows up as ...
3
votes
1answer
248 views

Disabling ssh password authentication does not work on my debian VPS

I have a Debian 7 VPS setup. I just enabled SSH Key authentication and disabled password authentication but the disabling did not work. When I attempt to SSH into my VPS, it prompts me for my SSH Key ...
1
vote
1answer
566 views

Cent OS 6.6 enable Plaintext authentication on dovecot and postfix

A customer of mine wants to use gmail as their default mail client but I have rolled forward to a new CENTOS server version (6.6, ok it's not "new" new) and the dovecot and postfix settings are ...
1
vote
0answers
23 views

Authentication shared over multiple systems [closed]

TL;DR I'm looking for a software that allows authentication shared over multiple systems to be used for authorizing access to all devices connected to a network. Any advice, recommendation inclusive ...
0
votes
1answer
37 views

ssh-copy-id doesn't copy to non-default location

Does ssh-copy-id recognize if the authorized_keys file is not in ~/.ssh? I am storing my authorized keys file in a different folder, which I have configured as: AuthorizedKeysFile ...
1
vote
1answer
2k views

Setting up connection to WPA2 Enterprise (PEAP/MSCHAPv2) with two-level certificate

For a long time, I have been able to use NetworkManager + wpa_supplicant as configured in Debian 7 to connect to a secure wireless at work (which is WPA2 Enterprise, with PEAP + MSCHAPv2 ...
1
vote
0answers
118 views

firefox 38 hanging with corporate proxy and winbind?

I seem to have broken firefox 38 and it is unusable. It just hangs and freezes for long periods of time ranging from a few seconds up to infinity - usually in steps at the authentication prompt for ...