Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

learn more… | top users | synonyms

3
votes
2answers
8k views

su - user doesn't work for users without a password

I've created a user on CentOS with useradd -M username. Now, I want to become that user just like su - username. It asks me for a password for that user but I didn't set a password for that user. As ...
3
votes
2answers
476 views

How do you automatically elevate an automatic task to root privileges or is there an alternative approach?

I'm trying to write, in essence, an automatic deployment script for use by our development team and I know I can set up SSH to use keys so that I can automatically authenticate via key instead of ...
3
votes
1answer
5k views

Can't login as root even after resetting the password

We're running a small Centos 5 server in a virtual machine for a class assignment. For reasons unknown, starting about a week ago a number of services started failing. When we tried to investigate we ...
3
votes
1answer
15k views

How to enable remote login?

Currently I can only login to my remote linux via the "ubuntu" user account, without a password (via SSH authentication). I have another user configured on the machine, and if I try to login with its ...
3
votes
1answer
1k views

mod_authnz_ldap bind as authenticating user instead of anonymously

I'm attempting to move as close to single credential as possible. We have a web application that has a fairly limited set of available authentication mechanisms but will (luckily) allow admins to tell ...
3
votes
1answer
193 views

How are loaded SSH keys referenced by name?

I'm using chef's knife ec2 tool which requires the name of a loaded SSH key (that was created in the Amazon EC2 control panel) It seems strange to me that it uses a name to reference the keypair - ...
3
votes
1answer
70 views

Use ssh without trying ssh-keys

If I try to connect to a certain server with ssh example.com ssh aborts with Too many authentication failures because I have more than 5 ssh keys in my .ssh folder and it loops through all those ...
3
votes
2answers
14k views

Using curl to access basic auth protected website via proxy (polipo)

I am trying to download a file protected via basic auth: curl "http://User:Pass@example.com/blub/bla.bin" This is working fine. As soon as I tell curl to use my locally installed polipo it fails: ...
3
votes
1answer
507 views

How to set an expired authentication in Apache?

Using a simple virtual host, I've to set a timeout after X minutes (same of set an expired authentication) to force the user to re-insert its credentials. [...] <Directory /home/user1/> ...
3
votes
1answer
1k views

Firefox error message when adding client certificate signed by CA

I'm getting this message when I'm trying to add a certificate to Firefox's "your certificate tab". I generated and signed it before by a server which also is a CA. Failed to decode the file. ...
3
votes
1answer
376 views

Invoking PolicyKit/polkit via xinit/startx?

I recently upgraded a minimal installation of Ubuntu (with no full-fledged DE) from precise to saucy and since doing so I'm no longer able to mount removable drives as a normal user. I googled a bit ...
3
votes
1answer
521 views

Multiple PCs network centralized system authentication

(I couldn't really choose an accurate title as I don't know exactly what the feature I'm looking for is called. Sorry about that. I hope that the following lines may clear this aspect.) I own a dozen ...
3
votes
1answer
4k views

Where to supply authentication details to the Network Proxy (Central Proxy) on Fedora?

My system is running Fedora 16 and I live in a campus where we use LAN to connect to the Internet. And for this, we use an http proxy with authentication (username & password). I tried putting the ...
3
votes
1answer
523 views

What's the best way to install a system-wide certificate from a website?

I want to use the Cisco Easy VPN to connect to the OpSource cloud machines. When I open the app, it directly shows a certificate error message, I suspect that the certificate is not trusted from their ...
3
votes
0answers
58 views

Why is my SSH authentication socket different from the man pages?

These two entries of man ssh-agent describe the SSH authentication socket: $TMPDIR/ssh-XXXXXXXXXX/agent.<ppid> UNIX-domain sockets used to contain the connection to the authentication ...
3
votes
0answers
1k views

Setup LDAP client on RHEL 6.5

I am preparing for RHCSA exams and trying to setup LDAP client on my RHEL 6.5 box I am connecting to the online testing LDAP server Here I don't understand the relationship among following 3 files, ...
3
votes
1answer
381 views

recover email from imap account using mailx

I am having problems fetching emails with mailx. My imap account uses ssl/tls connection with normal password authentication on port 993. I don't have any problems sending through smtp though. Here is ...
3
votes
0answers
148 views

WGET - Authenticating root AND all children folders

Before I start the question off, I want to say that a similar question helped me get past the initial login. My issue is as stated below. There's a website that I'm trying to mirror. It is something ...
3
votes
1answer
353 views

Configure applications to ask for a user:pass behind a proxy

Here's the deal: I'm trying to set up a SQL server with Debian Linux, I managed to install Debian - but I can't get apt-get to work, since I'm behind a proxy. I already managed to setup Iceweasel to ...
2
votes
3answers
196 views

Can sudo replace su?

There is much duplication of functionality on Linux-based systems, for example these do the same thing: sudo --login --user <user> sudo su - <user> The sudo-only approach looks more ...
2
votes
2answers
2k views

How to get hashed password in /etc/shadow using getpwnam()?

Apparently there is a function (getpwnam) that given a username, will return the appropriate entry in /etc/passwd with the other details for that user (shell, uid, gid, etc.). However, I have no idea ...
2
votes
2answers
794 views

ssh login in Bash script

I've been working on a series of scripts to perform tasks on my remote server, but have gotten stuck at how to log in via ssh mid script, as I cannot enter the password automatically. Is there a way ...
2
votes
5answers
133 views

Simulate the remote host identification warning

I need to simulate the warning: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT IS POSSIBLE THAT SOMEONE IS DOING ...
2
votes
1answer
2k views

Script to get file from SFTP and run it

We have 5 servers running our code: A, B , C, D and E. From a local machine, we sftp the file to A. Then ssh id@A su - applicationname sftp id@A get <file> bye tar -xzf <file> logout ...
2
votes
2answers
118 views

temporarily disable login using one specific ssh key

On my server, I have several public SSH keys in ~/.ssh/authorized_keys. I would like to temporarily block/disallow/deactivate one key. I want to prevent the user to log in using this key now. but I ...
2
votes
1answer
621 views

How do I reset RHEL6 to autocreate home directory upon login?

I am using a RHEL6 host that is set up using LDAP for authenication. Upon first login it is supposed to create the home directory for the user (e.g. /home/gisle where gisle is my login username). I ...
2
votes
2answers
316 views

How do I switch from /etc/shadow back to /etc/passwd?

I'm playing with a rather old, heavily customized Linux installation (based on Debian etch, running on a Netgear ReadyNAS device). Recently I've switched from /etc/passwd to /etc/shadow via pwconv. ...
2
votes
2answers
1k views

How to sign into an open Wireless Network?

I'm running Arch Linux on my netbook. My school have an open Access Point and we must sign into the network via a page which we are redirected to when we try to open whatever website if we are not ...
2
votes
1answer
6k views

How to setup proxy authentication in the Debian shell?

I think that once I used export http_proxy=http://user:password@address:port/ successfully. But now when I use wget it shows Error parsing proxy URL http://user:passwordaddress:port/: Bad port ...
2
votes
2answers
1k views

setting up ssh public key

Okay, so I'm trying to setup a login for logging in with ssh, using a public key. First, I am using puttygen to generate a rsa-ssh2 public key using a passphrase. I followed the directions and ...
2
votes
1answer
71 views

Locally deny login to users authenticated via LDAP

I have a RedHat Linux server that are is use for more than 1000 users Users names are coming to the server via LDAP protocol, so login authentication is from the LDAP My question: is it possible to ...
2
votes
1answer
92 views

What's the correct way to authenticate a user without PAM?

as my related question doesn't seem to get much love, here another one: What's the proper way to authenticate a user via username/password prompt in Linux nowadays? In principle, I suppose I would ...
2
votes
2answers
105 views

Making su ask for password multiple times

Is there some way to make su ask for the password again in case of a wrong password (just as sudo does)? Initially I thought of this: while ! su -c foo; do read -n 1 -p "Retry(y/n)?" ch if [[ ...
2
votes
1answer
2k views

PPTP VPN error: LCP terminated by peer

I cannot connect to my PPTP VPN server, even though the CHAP authentication succeeds. This is from /var/log/syslog: Jun 11 07:27:22 aspire pppd[32221]: CHAP authentication succeeded Jun 11 07:27:22 ...
2
votes
1answer
320 views

login 'authentication failure' by non-root user, can login only by root [closed]

In my CentOS 6.0 system, working since months, suddenly stop authenticating non-root users, in graphical mode. I have checked necessary /etc/pam.d/* files, but those are unchanged. SELinux is ...
2
votes
1answer
545 views

Gnome-shell authentication dialogue fails, how to debug which app is using it?

I am using ubuntu 13.10 with gnome shell 3.8.4. I used to use gnome online accounts for empathy and other things, but then I stopped using them. And then gnome shell started to show authentication ...
2
votes
1answer
3k views

Authenticating with x11vnc: what's the difference between -auth and -rfbauth?

I'm on xubuntu 11.10 trying to setup x11vnc server. I followed instructions here and I can connect to VNC server - but it never asks me for password! Is there a difference between these 2 options: ...
2
votes
2answers
1k views

SSH on my local network - problem with login

I'm having problem with logging into my local-network-linux (server) ssh with Putty (and with Linux terminal, too) When my server shows me request to insert username, I insert "root" and I do press ...
2
votes
1answer
44 views

Configure OpenSSH server not to require password *or* key for a particular user

For the purpose of a training session, I'd like to make it possible for a particular user to connect without requiring a password or key-based authentication. I do not know the IPs or other data of ...
2
votes
1answer
82 views

iptables, what is truly open?

We have an RSA appliance, I've reviewed the firewall rules on this appliance to determine what ports are enabled. To me, it looks like its wide open; but the vendor states that I am wrong about this, ...
2
votes
1answer
253 views

public key authentication without authorized_keys file

I have a lot of ssh public key logins on a Linux server, e.g.: Jul 25 11:41:01 host sshd[24594]: Accepted publickey for root from xxx.xxx.xx.xx port 33374 ssh2 This is strange for me since there's ...
2
votes
1answer
100 views

Obtain pop-id or IP address when client logs into Dovecot server

Background I have been doing some research on the Dovecot mail server documentation on ways to get client information when a client connects to the server. I am interested in using these to program an ...
2
votes
1answer
1k views

tinyproxy with user authentification

Does anybody have a solution that'll make tinyproxy work with user authentification like pam_auth at the squid proxy? I don't want to create a SSH-Tunnel and allow only localhost.
2
votes
3answers
5k views

CentOS use .pac file as proxy

I have to use a proxy with authentication to connect to the Internet. But I can't find any solution for this. I have modify my yum.conf, with a lot of possibilities: ...
2
votes
1answer
745 views

Where does Samba 4 store user passwords?

Where does Samba 4 store user passwords? How can I import my password hashes from Samba 3 in Samba 4? I am using my own LDAP server with samba 3, and the password hash is stored within the ...
2
votes
1answer
283 views

Restrict two way SSH and Apache authentication to non-local networks

I am using Google's open-source PAM module for two-way authentication for SSH logins and certain Apache directives. It works great, however I would like to use this only when trying to log in from an ...
2
votes
1answer
2k views

User authentication over Dante proxy server

Below is my Dante SOCKS Proxy server configuration that I connect to without any authentication: internal: eth0 port = 53200 internal: 127.0.0.1 port = 53200 external: eth0 clientmethod: none ...
2
votes
2answers
1k views

How to send mail from a remote SMTP host?

I have Postfix suite installed locally on Ubuntu 10.10. I can send/receive mail to my local address, e.g. user@local.com. I'm given credentials to a remote mail server mailbox, e.g. ...
2
votes
0answers
34 views

Wifi with WPA2-EAP MS-CHAPv2 authentication (username and password) during Debian installation

I am currently attempting to install Debian on my laptop computer. During the network configuration stage, I am prompted to "enter a passphrase for WPA/WPA2 PSK authentication". Unfortunately, I am on ...
2
votes
1answer
220 views

LDAP Authentication on OpenBSD

I'm trying to get an OpenBSD server to authenticate users using the same LDAP server the rest of my home network uses. While 'getent password' lists the users from the LDAP server as expected, I ...