Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

learn more… | top users | synonyms

3
votes
1answer
808 views

Firefox error message when adding client certificate signed by CA

I'm getting this message when I'm trying to add a certificate to Firefox's "your certificate tab". I generated and signed it before by a server which also is a CA. Failed to decode the file. ...
3
votes
1answer
439 views

Multiple PCs network centralized system authentication

(I couldn't really choose an accurate title as I don't know exactly what the feature I'm looking for is called. Sorry about that. I hope that the following lines may clear this aspect.) I own a dozen ...
3
votes
1answer
3k views

Where to supply authentication details to the Network Proxy (Central Proxy) on Fedora?

My system is running Fedora 16 and I live in a campus where we use LAN to connect to the Internet. And for this, we use an http proxy with authentication (username & password). I tried putting the ...
3
votes
1answer
425 views

What's the best way to install a system-wide certificate from a website?

I want to use the Cisco Easy VPN to connect to the OpSource cloud machines. When I open the app, it directly shows a certificate error message, I suspect that the certificate is not trusted from their ...
3
votes
1answer
213 views

Invoking PolicyKit/polkit via xinit/startx?

I recently upgraded a minimal installation of Ubuntu (with no full-fledged DE) from precise to saucy and since doing so I'm no longer able to mount removable drives as a normal user. I googled a bit ...
3
votes
0answers
110 views

WGET - Authenticating root AND all children folders

Before I start the question off, I want to say that a similar question helped me get past the initial login. My issue is as stated below. There's a website that I'm trying to mirror. It is something ...
3
votes
1answer
267 views

Configure applications to ask for a user:pass behind a proxy

Here's the deal: I'm trying to set up a SQL server with Debian Linux, I managed to install Debian - but I can't get apt-get to work, since I'm behind a proxy. I already managed to setup Iceweasel to ...
2
votes
3answers
157 views

Can sudo replace su?

There is much duplication of functionality on Linux-based systems, for example these do the same thing: sudo --login --user <user> sudo su - <user> The sudo-only approach looks more ...
2
votes
3answers
753 views

rsync server/daemon security

I have a NAS (Netgear Readynas NV+) at home and a linux (Arch) box at work that is always on. The linux box is already running an ssh server/daemon and the NAS is already running an rsync ...
2
votes
2answers
2k views

How to get hashed password in /etc/shadow using getpwnam()?

Apparently there is a function (getpwnam) that given a username, will return the appropriate entry in /etc/passwd with the other details for that user (shell, uid, gid, etc.). However, I have no idea ...
2
votes
2answers
648 views

ssh login in Bash script

I've been working on a series of scripts to perform tasks on my remote server, but have gotten stuck at how to log in via ssh mid script, as I cannot enter the password automatically. Is there a way ...
2
votes
1answer
55 views

Does root not require a password to log in as a user?

Does root not require a password to log in as a user even though a password has been set for that user? When I am logged in as "root", su user logs me in as "user". There is no prompt for a password. ...
2
votes
2answers
4k views

su - user doesn't work for users without a password

I've created a user on CentOS with useradd -M username. Now, I want to become that user just like su - username. It asks me for a password for that user but I didn't set a password for that user. As ...
2
votes
1answer
1k views

Script to get file from SFTP and run it

We have 5 servers running our code: A, B , C, D and E. From a local machine, we sftp the file to A. Then ssh id@A su - applicationname sftp id@A get <file> bye tar -xzf <file> logout ...
2
votes
4answers
14k views

vsftpd fails pam authentication

Moving a tried-and-true vsftpd configuration onto a new server with Fedora 16, I ran into a problem. All seems to go as it should, but user authentication fails. I cannot find any entry in any log ...
2
votes
1answer
369 views

How do I reset RHEL6 to autocreate home directory upon login?

I am using a RHEL6 host that is set up using LDAP for authenication. Upon first login it is supposed to create the home directory for the user (e.g. /home/gisle where gisle is my login username). I ...
2
votes
2answers
230 views

How do I switch from /etc/shadow back to /etc/passwd?

I'm playing with a rather old, heavily customized Linux installation (based on Debian etch, running on a Netgear ReadyNAS device). Recently I've switched from /etc/passwd to /etc/shadow via pwconv. ...
2
votes
1answer
5k views

How to setup proxy authentication in the Debian shell?

I think that once I used export http_proxy=http://user:password@address:port/ successfully. But now when I use wget it shows Error parsing proxy URL http://user:passwordaddress:port/: Bad port ...
2
votes
2answers
1k views

setting up ssh public key

Okay, so I'm trying to setup a login for logging in with ssh, using a public key. First, I am using puttygen to generate a rsa-ssh2 public key using a passphrase. I followed the directions and ...
2
votes
2answers
72 views

Making su ask for password multiple times

Is there some way to make su ask for the password again in case of a wrong password (just as sudo does)? Initially I thought of this: while ! su -c foo; do read -n 1 -p "Retry(y/n)?" ch if [[ ...
2
votes
1answer
116 views

login 'authentication failure' by non-root user, can login only by root [closed]

In my CentOS 6.0 system, working since months, suddenly stop authenticating non-root users, in graphical mode. I have checked necessary /etc/pam.d/* files, but those are unchanged. SELinux is ...
2
votes
2answers
3k views

Using curl to access basic auth protected website via proxy (polipo)

I am trying to download a file protected via basic auth: curl "http://User:Pass@example.com/blub/bla.bin" This is working fine. As soon as I tell curl to use my locally installed polipo it fails: ...
2
votes
1answer
336 views

Gnome-shell authentication dialogue fails, how to debug which app is using it?

I am using ubuntu 13.10 with gnome shell 3.8.4. I used to use gnome online accounts for empathy and other things, but then I stopped using them. And then gnome shell started to show authentication ...
2
votes
1answer
3k views

Authenticating with x11vnc: what's the difference between -auth and -rfbauth?

I'm on xubuntu 11.10 trying to setup x11vnc server. I followed instructions here and I can connect to VNC server - but it never asks me for password! Is there a difference between these 2 options: ...
2
votes
1answer
18 views

xscreensaver sometimes unlocks locked screen automatically, after returning from monitor standby mode

I am using xscreensaver to lock my screen. Additionally to that, my monitor goes to "standby" , i.e turn display off, after 30 minutes of inactivity. It has happened to me twice now, that I have ...
2
votes
1answer
178 views

SSH: public key authentication without authorized_keys file

I have a lot of ssh public key logins on a Linux server, e.g.: Jul 25 11:41:01 host sshd[24594]: Accepted publickey for root from xxx.xxx.xx.xx port 33374 ssh2 This is strange for me since there's ...
2
votes
1answer
73 views

Obtain pop-id or IP address when client logs into Dovecot server

Background I have been doing some research on the Dovecot mail server documentation on ways to get client information when a client connects to the server. I am interested in using these to program an ...
2
votes
1answer
805 views

tinyproxy with user authentification

Does anybody have a solution that'll make tinyproxy work with user authentification like pam_auth at the squid proxy? I don't want to create a SSH-Tunnel and allow only localhost.
2
votes
1answer
6k views

Meaning of “Connection closed by xxx [preauth]” in sshd logs

We have a Windows batch script, which connects automatically to a linux server via PLINK (putty). There is NO public private key authentication, the user and the password are in the script. On our ...
2
votes
1answer
605 views

Where does Samba 4 store user passwords?

Where does Samba 4 store user passwords? How can I import my password hashes from Samba 3 in Samba 4? I am using my own LDAP server with samba 3, and the password hash is stored within the ...
2
votes
1answer
245 views

Restrict two way SSH and Apache authentication to non-local networks

I am using Google's open-source PAM module for two-way authentication for SSH logins and certain Apache directives. It works great, however I would like to use this only when trying to log in from an ...
2
votes
1answer
2k views

User authentication over Dante proxy server

Below is my Dante SOCKS Proxy server configuration that I connect to without any authentication: internal: eth0 port = 53200 internal: 127.0.0.1 port = 53200 external: eth0 clientmethod: none ...
2
votes
2answers
1k views

How to send mail from a remote SMTP host?

I have Postfix suite installed locally on Ubuntu 10.10. I can send/receive mail to my local address, e.g. user@local.com. I'm given credentials to a remote mail server mailbox, e.g. ...
2
votes
1answer
44 views

DSA/RSA keys work with Linux but not HP-UX

I have an NFS mount that I use to log into many Linux/Unix servers. I created a passphraseless RSA and DSA key from with I copied the id_rsa.pub and id_dsa.pub files over to authorized_keys. total 9 ...
2
votes
0answers
398 views

Setup LDAP client on RHEL 6.5

I am preparing for RHCSA exams and trying to setup LDAP client on my RHEL 6.5 box I am connecting to the online testing LDAP server Here I don't understand the relationship among following 3 files, ...
2
votes
0answers
204 views

recover email from imap account using mailx

I am having problems fetching emails with mailx. My imap account uses ssl/tls connection with normal password authentication on port 993. I don't have any problems sending through smtp though. Here is ...
2
votes
0answers
593 views

Enter user authentication details for a printer?

I have a printer which is configured using the correct drivers. However, the printer requires user authentication (i.e. a username and password) to print. Where are authentication details usually ...
2
votes
0answers
259 views

Is there an alternative to OpenLDAP / Kerberos? [closed]

Are there ways to do centralized secure network-based authentication & authorization and user management that aren't OpenLDAP and Kerberos? Frankly, Kerberos is a nightmare to configure, leaving ...
2
votes
0answers
181 views

SSH login from external authentication

Here is what I try to accomplish: I have a server with a git repository. I use ISPConfig as control panel for our websites and I want to integrate the ISPConfig API for email authentication as second ...
2
votes
0answers
1k views

WBC_ERR_DOMAIN_NOT_FOUND only for a specific account

Platform: RHEL 5.10 Version: Samba 3.6.6-0.136 Only on a single VM, one of my co-workers is able to log into the VM using his AD credentials without issue, whereas my account appears to have trouble ...
2
votes
3answers
285 views

OpenAM to OpenLDAP to SysAID (LDAP) Authentication

We just began using a new software called SysAid which uses LDAP to authenticate users. We have a client, which uses OpenAM to authenticate their users for a proprietary web application. Our goal, ...
2
votes
0answers
65 views

luks single signon

I've got LUKS (Linux Unified Key Setup) running on a couple of my Linux boxes. I've looked online but haven't seen anyone document how to make it work in a single signon option, but was hoping ...
2
votes
0answers
165 views

SSL Configurations for Intermediate certificate

I had implement a mutual certificate authentication and it worked successfully for following steps : create root ca (self-signed) create server certificate and sign it with ca private key create ...
2
votes
1answer
222 views

Configure SSL Mutual (Two-way) Authentication

I was asked to do it "Configure SSL Mutual (Two-way) Authentication" and I don't know where to start or how to test it . server and many clients . they can access code on server only if they have a ...
2
votes
0answers
1k views

nsswitch cache and nscd

I have an LDAP directory server installed that stores all the user data in one server and I have an ongoing authentication mechanism using pam to request user information from it. This works very ...
2
votes
3answers
803 views

How to do svn update without password on crontab [closed]

I'm new to svn and ssh. I'm trying to do svn update of 5 repositories in my local system every 3 hours on crontab. So, to achieve this I have setup ssh passwordless login using the below steps: ...
1
vote
5answers
2k views

How to securely automate running commands as root with “sudo su -”?

hint (on client side, how to encrypt files/pwd's): # encrypt pwd with ssh key: openssl rsa -in ~/.ssh/id_rsa -outform pem > ~/.ssh/TEMP-id_rsa.pem 2>/dev/null openssl rsa -in ~/.ssh/id_rsa ...
1
vote
2answers
552 views

Why do my sshd logs show many trys on invalid ports?

My ssh daemon is setup to listen on port 2221. I have also disabled root login from ssh. I don't understand why in auth.log I have attempts to log on other ports (example with 4627 here). May 17 ...
1
vote
2answers
140 views

How to control authentication attempts in PAM?

I would like to configure the no. of times user will be prompted for password(authentication attempts) for login, before dropping the session. Does PAM support this case, if so can you help me out ...
1
vote
1answer
8k views

Execute a script automatically through pbrun?

There is a Unix environment named sftwrk01, uatwrk01, intwrk01 and some more I need to check the logs in each environment everyday by login in as below (through pbsu which is a wrapper for pbrun): ...