Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

learn more… | top users | synonyms

1
vote
0answers
179 views

Captive portal detection, popup implementation?

Based on hostapd, I m building a captive portal. - My Linux Machine provides a Wifi access. - iPad's and Android clients-tablets connect this Wifi. Generally, any client OS check if a url is ...
0
votes
1answer
169 views

Open a webpage and enter a username and password via CLI

Ultimately, I want to use a bash script to automatically open and log into a website. I was wondering if I could use the curl or elinks commands to log in to a website and then somehow export that ...
0
votes
1answer
30 views

Install script - sudo authorisation compatibility?

I am currently updating a few scripts, and am planning on releasing some useful ones so others can use them (so they need to work across a wide range of machines without crashing, and without breaking ...
2
votes
2answers
87 views

Add a user wthout password but with SSH and public key

I want to add a user to Red Hat Linux that will not use a password for logging in, but instead use a public key for ssh. This would be on the command line.
0
votes
3answers
326 views

Get MAC of a client request?

I have a network with 20 raspberries (clients) and 1 server. I'd like to check MAC of client request, is that possible ? Further, possible without being known (nor visible) by the client ? NB : I ...
0
votes
2answers
122 views

Unable to login with SSH-RSA key

This post is following this question : Authentication refused: bad ownership or modes for file /var/git/.ssh/authorized_keys . The issue as exposed there is solved (about files modes of the ...
4
votes
3answers
5k views

Authentication refused: bad ownership or modes for file /var/git/.ssh/authorized_keys [duplicate]

EDIT The issue as exposed here is solved (about files modes of the .ssh folder. But an other issue persists so I create a new question : > Unable to login with SSH-RSA key I can no longer ...
2
votes
0answers
262 views

Wifi with WPA2-EAP MS-CHAPv2 authentication (username and password) during Debian installation

I am currently attempting to install Debian on my laptop computer. During the network configuration stage, I am prompted to "enter a passphrase for WPA/WPA2 PSK authentication". Unfortunately, I am on ...
0
votes
1answer
454 views

is iptables broken on my raspberry-pi? how to fix?

I am getting some person(s) trying to brute force my ssh, from multiple ip addresses (small sample) : May 22 19:50:02 rpi sshd[1272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
2
votes
1answer
55 views

Configure OpenSSH server not to require password *or* key for a particular user

For the purpose of a training session, I'd like to make it possible for a particular user to connect without requiring a password or key-based authentication. I do not know the IPs or other data of ...
-1
votes
1answer
96 views

How can i get out of the authentication screen and shutdown? [closed]

I decided to install linux ,dualbooted, on my laptop but ran in some issues . I installed several corrupt installs causing me to allocate most of my harddrive ,at least the parts that do not contain ...
1
vote
1answer
432 views

Simple Radius authentication

I'm looking into using Radius as an authentication server for a few Ubuntu servers when accessing through SSH. I have tried using libpam-radius-auth but it doesn't work quite as I need. My goal is to ...
0
votes
1answer
418 views

what does pam_env.so really do?

Having the following line: auth required pam_env.so Documentation happily says "This module is required—it must run successfully for authentication to proceed." ...
0
votes
0answers
184 views

ldap user on samba share

I have two servers: one is ldap and the other is samba. I have an existing user on the ldap server for an ldap client. Now I want to use this user account with samba to give share access permissions ...
1
vote
3answers
413 views

Why is gksu asking me for root password and not my password?

On one of my systems, I'm running Gentoo Linux and I've installed x11-libs/gksu-2.0.2-r1. I've disabled the root account using sudo passwd -dl root and I want to be able to run GUI apps which need ...
0
votes
0answers
208 views

Configure ldap client without yast

I'm configuring an LDAP client in a large number of Suse servers. The only way that I know to do this is using Yast, and this way is slow. I can't find another way. Anyone know another way to do ...
2
votes
1answer
836 views

CUPS not working correctly after Debian Wheezy -> Jessie upgrade because of a faulty libpam

I just upgraded a Debian Wheezy to Jessie, by changing the /etc/apt/sources.lst. If important: I pinned systemd to stay with sysvinit, and after the upgrade I removed the pin. If I now do apt-get ...
0
votes
1answer
85 views

Mixing authentication types in Apache

Currently, I'm using Apache to host my project repos (mercurial) and use Kerberos auth for users to push. The same Kerberos password is used to log in through SSH and there is a LDAP backend for user ...
10
votes
1answer
1k views

D-Bus authentication and authorization

I'm trying to set up remote access to D-Bus, and I don't understand how authentication and authorization are (not) working. I have a D-Bus server listening on an abstract socket. $ echo ...
2
votes
1answer
43 views

Directory Server doing lookups on one ldap server and authintication on another ldap server

I have an old Centos Directory Server and a new 389 Directory Server. I don't want to use sssd at the moment so lets keep that suggestion off the table. I do the following my RHEL 6.4 servers: ...
3
votes
2answers
258 views

Why does my SD card need authentication to access?

I'm running Ubuntu 14.04 on a Toshiba Chromebook 2 via crouton. I recently reformatted a 256GB SD card that I keep in my chromebook at all times. My problem is that every time I try to access my SD ...
0
votes
0answers
136 views

Authentication error with apt-get

I am trying to install CppCMS (A C++ network library) on my Debian computer. I have added the repository sources to sources.list file. When I run: $ sudo apt-get source cppcms I get the warning ...
2
votes
2answers
6k views

What is difference between pbrun and sudo command?

What is difference between pbrun and sudo command? I have seen people executing pbrun sudo su - what this means? I know su -, it will try to switch to root user. What speciality pbrun gives to sudo ...
5
votes
1answer
817 views

Adding a system user to an LDAP group with SSSD

Our LDAP server is running RFC 2307 groups (memberuid contains a username, not a DN). With our old nscd/nss_ldap/pam_ldap setup, you could list a non-LDAP user (a system user from /etc/passwd) in an ...
1
vote
1answer
102 views

Throttle accounts after failed SSH login attempts

I have to set up a server that will allow remote logins. Obviously security is an issue. In this first pass we are discussing:- Locking a person for 15 minutes if they fail to login correctly three ...
1
vote
1answer
386 views

Locally deny login to users authenticated via LDAP

I have a RedHat Linux server that are is use for more than 1000 users Users names are coming to the server via LDAP protocol, so login authentication is from the LDAP My question: is it possible to ...
0
votes
1answer
114 views

authenicate OpenSUSE 10.2 client to CentOS 6.6 LDAP server

In our company, we have a network where I installed a working LDAP server for our CentOS 6 servers (FTP/WEB/Pydio/VOD/etc servers) about 25 of them. All working perfectly with LDAP authentication. ...
0
votes
1answer
225 views

Putty not asking for Two Factor Authentication Code

I'm running a CentOS 7 server. So I've installed Two Factor Authentication with Google Authenticator a while back and all was well. However I can't access my server at the moment over SSH. PuTTY and ...
-1
votes
1answer
61 views

Why isn't my apache authentication working?

I am trying to set up apache2 authentication for a given website which can be found locally on my webserver. When I try to open up the website it states Internal Server Error 500. Then I put the ...
0
votes
1answer
188 views

How to set password of cups 1.3.7 (/etc/cups/passwd.md5) without prompting?

My company is using CUPS v1.3.7, I would like to allow users to be authenticated only in the cups web interface and not via SSH. I imagine, i should use the authentication type BasicDigest in ...
0
votes
1answer
171 views

Please provide pptpd authentication methods other than chap secrets

I have setup VPN with pptpd service and authentication via CHAP secrets. What other methods are available with pptpd for authenticating users. Any scope of using public keys.
2
votes
1answer
2k views

how to pass a password with a cron job safely?

I have a site map generator script placed in this URL http://www.mydomain.com/admin/sitemapgen/ However this URL is protected with an username and a password in auth_type basic method. I need to ...
1
vote
1answer
190 views

/private/var socket not created with postfix/dovecot sasl

I'm currently running into a problem I have with my email server. I try to setup Postfix and Dovecot with SASL authentication but I get the following error when I connect with telnet (port 25) to the ...
3
votes
0answers
159 views

Why is my SSH authentication socket different from the man pages?

These two entries of man ssh-agent describe the SSH authentication socket: $TMPDIR/ssh-XXXXXXXXXX/agent.<ppid> UNIX-domain sockets used to contain the connection to the authentication ...
2
votes
1answer
771 views

LDAP Authentication on OpenBSD

I'm trying to get an OpenBSD server to authenticate users using the same LDAP server the rest of my home network uses. While 'getent password' lists the users from the LDAP server as expected, I ...
0
votes
1answer
78 views

SASL authentication fails when called from crontab

When I run mbsync from the command line it works fine. But if mbsync is run from the crontab, mbsync fails with this error "Error: SASL(-1): generic failure:". My guess is that mbsync's SASL ...
14
votes
5answers
6k views

Gmail blocking mutt

When I try to log in to gmail with mutt, it flashes a quick Webalert with a url, something like accounts.gmail.com or something. It's too quick for me to see or copy it. Then it says Login failed. ...
1
vote
1answer
360 views

Fetch, authenticate, and download a post-install script on FreeBSD

I'm on a fresh FreeBSD install and want to download and run a post-install script from a private BitBucket repo. My fetch attempt returns an authentication error: ~# fetch ...
0
votes
0answers
147 views

Ubuntu remote desktop user using a key-based login

I have an Ubuntu 14.04 LTS set up and I have a which authenticates using a private key to connect via PuTTY. Is it possible to use remote desktop from windows 7 (xrdp) with key-based login?
2
votes
2answers
299 views

temporarily disable login using one specific ssh key

On my server, I have several public SSH keys in ~/.ssh/authorized_keys. I would like to temporarily block/disallow/deactivate one key. I want to prevent the user to log in using this key now. but I ...
2
votes
1answer
281 views

What's the correct way to authenticate a user without PAM?

as my related question doesn't seem to get much love, here another one: What's the proper way to authenticate a user via username/password prompt in Linux nowadays? In principle, I suppose I would ...
2
votes
0answers
148 views

Login to Linux using a trusted Active Directory

I'm having trouble to log in to Linux using a trusted Active Directory. The machine is connected to an Active Directory that we are responsible for in the project, but most of the users who will use ...
0
votes
1answer
286 views

Authconfig doesn't find all ldap groups

My (soon to be) admin account is in two groups: # ldapsearch \ > -v \ > -H ldaps://localhost:636 \ > -D "${l_dirmgr}" \ > -w $(cat ${f_dirmgr_passphrase}) \ > -b ...
2
votes
1answer
144 views

iptables, what is truly open?

We have an RSA appliance, I've reviewed the firewall rules on this appliance to determine what ports are enabled. To me, it looks like its wide open; but the vendor states that I am wrong about this, ...
0
votes
1answer
33 views

Smart Card local authentication

Is it possible to use smartCard for local authentication ? So that, rather userID/password combination, an user can authenticate himself by inserting card and by providing it's PIN number. RDesktop, ...
1
vote
1answer
381 views

basic explanation on NSS , LDAP and PAM

can anyone give me a basic explanation on what are NSS , LDAP and PAM and what they used for and what is their relationship/differences ?
2
votes
5answers
263 views

Simulate the remote host identification warning

I need to simulate the warning: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT IS POSSIBLE THAT SOMEONE IS DOING ...
1
vote
1answer
85 views

Allow a python application to run if the user's password is wrong

Is it possible to let a python program execute only if a wrong password is given at the login screen of my raspberry pi?
0
votes
0answers
1k views

While trying to ssh, pam_ldap always sends the password “INCORRECT” causing bind to fail

I installed ldap-auth-client nscd ldap-utils on lubuntu 14.04 running on a banana pi. I can successfully bind as the user using ldapwhoami, but I cannot log in via ssh: Auth.log: Oct 21 02:12:05 ...
0
votes
1answer
119 views

xscreensaver sometimes unlocks locked screen automatically, after returning from monitor standby mode

I am using xscreensaver to lock my screen. Additionally to that, my monitor goes to "standby" , i.e turn display off, after 30 minutes of inactivity. It has happened to me twice now, that I have ...