Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

learn more… | top users | synonyms

2
votes
1answer
106 views

iptables, what is truly open?

We have an RSA appliance, I've reviewed the firewall rules on this appliance to determine what ports are enabled. To me, it looks like its wide open; but the vendor states that I am wrong about this, ...
2
votes
1answer
52 views

Externally authenticate user within PAM session/PAM session within PAM session

Is there a way of properly authenticating a user from within a custom PAM session? I am currently writing my own PAM authentication module which allows the user to login via an external token. This ...
2
votes
1answer
270 views

public key authentication without authorized_keys file

I have a lot of ssh public key logins on a Linux server, e.g.: Jul 25 11:41:01 host sshd[24594]: Accepted publickey for root from xxx.xxx.xx.xx port 33374 ssh2 This is strange for me since there's ...
2
votes
1answer
127 views

Obtain pop-id or IP address when client logs into Dovecot server

Background I have been doing some research on the Dovecot mail server documentation on ways to get client information when a client connects to the server. I am interested in using these to program an ...
2
votes
3answers
6k views

CentOS use .pac file as proxy

I have to use a proxy with authentication to connect to the Internet. But I can't find any solution for this. I have modify my yum.conf, with a lot of possibilities: ...
2
votes
1answer
347 views

Restrict two way SSH and Apache authentication to non-local networks

I am using Google's open-source PAM module for two-way authentication for SSH logins and certain Apache directives. It works great, however I would like to use this only when trying to log in from an ...
2
votes
1answer
3k views

User authentication over Dante proxy server

Below is my Dante SOCKS Proxy server configuration that I connect to without any authentication: internal: eth0 port = 53200 internal: 127.0.0.1 port = 53200 external: eth0 clientmethod: none ...
2
votes
2answers
1k views

How to send mail from a remote SMTP host?

I have Postfix suite installed locally on Ubuntu 10.10. I can send/receive mail to my local address, e.g. user@local.com. I'm given credentials to a remote mail server mailbox, e.g. ...
2
votes
0answers
107 views

Wifi with WPA2-EAP MS-CHAPv2 authentication (username and password) during Debian installation

I am currently attempting to install Debian on my laptop computer. During the network configuration stage, I am prompted to "enter a passphrase for WPA/WPA2 PSK authentication". Unfortunately, I am on ...
2
votes
1answer
429 views

LDAP Authentication on OpenBSD

I'm trying to get an OpenBSD server to authenticate users using the same LDAP server the rest of my home network uses. While 'getent password' lists the users from the LDAP server as expected, I ...
2
votes
0answers
123 views

Login to Linux using a trusted Active Directory

I'm having trouble to log in to Linux using a trusted Active Directory. The machine is connected to an Active Directory that we are responsible for in the project, but most of the users who will use ...
2
votes
1answer
330 views

DSA/RSA keys work with Linux but not HP-UX

I have an NFS mount that I use to log into many Linux/Unix servers. I created a passphraseless RSA and DSA key from with I copied the id_rsa.pub and id_dsa.pub files over to authorized_keys. total 9 ...
2
votes
1answer
2k views

A messagebox keeping popping up in my centos VNC server asking to change proxy settings?

I have included a screenshot of what it looks like. It keeps appearing and in the morning you to close it 50 times. Could you please help me identify where the problem lies? NOTE: It's CentOs 6 ...
2
votes
0answers
995 views

Enter user authentication details for a printer?

I have a printer which is configured using the correct drivers. However, the printer requires user authentication (i.e. a username and password) to print. Where are authentication details usually ...
2
votes
0answers
578 views

Is there an alternative to OpenLDAP / Kerberos? [closed]

Are there ways to do centralized secure network-based authentication & authorization and user management that aren't OpenLDAP and Kerberos? Frankly, Kerberos is a nightmare to configure, leaving ...
2
votes
0answers
233 views

SSH login from external authentication

Here is what I try to accomplish: I have a server with a git repository. I use ISPConfig as control panel for our websites and I want to integrate the ISPConfig API for email authentication as second ...
2
votes
0answers
3k views

WBC_ERR_DOMAIN_NOT_FOUND only for a specific account

Platform: RHEL 5.10 Version: Samba 3.6.6-0.136 Only on a single VM, one of my co-workers is able to log into the VM using his AD credentials without issue, whereas my account appears to have trouble ...
2
votes
3answers
506 views

OpenAM to OpenLDAP to SysAID (LDAP) Authentication

We just began using a new software called SysAid which uses LDAP to authenticate users. We have a client, which uses OpenAM to authenticate their users for a proprietary web application. Our goal, ...
2
votes
0answers
95 views

luks single signon

I've got LUKS (Linux Unified Key Setup) running on a couple of my Linux boxes. I've looked online but haven't seen anyone document how to make it work in a single signon option, but was hoping ...
2
votes
0answers
283 views

SSL Configurations for Intermediate certificate

I had implement a mutual certificate authentication and it worked successfully for following steps : create root ca (self-signed) create server certificate and sign it with ca private key create ...
2
votes
1answer
363 views

Configure SSL Mutual (Two-way) Authentication

I was asked to do it "Configure SSL Mutual (Two-way) Authentication" and I don't know where to start or how to test it . server and many clients . they can access code on server only if they have a ...
2
votes
0answers
3k views

SMTP Auth - SASL on Dovecot, Postfix and CentOS 6.2 (and Open-Xchange)

I am trying to get open SASL to work on CentOS 6.2. I followed this tutorial: http://wiki.centos.org/HowTos/postfix_sasl I suspect it works perfectly for CentOS 5.x so all I really need is an update ...
2
votes
0answers
1k views

nsswitch cache and nscd

I have an LDAP directory server installed that stores all the user data in one server and I have an ongoing authentication mechanism using pam to request user information from it. This works very ...
2
votes
3answers
2k views

How to do svn update without password on crontab [closed]

I'm new to svn and ssh. I'm trying to do svn update of 5 repositories in my local system every 3 hours on crontab. So, to achieve this I have setup ssh passwordless login using the below steps: ...
1
vote
5answers
3k views

How to securely automate running commands as root with “sudo su -”?

hint (on client side, how to encrypt files/pwd's): # encrypt pwd with ssh key: openssl rsa -in ~/.ssh/id_rsa -outform pem > ~/.ssh/TEMP-id_rsa.pem 2>/dev/null openssl rsa -in ~/.ssh/id_rsa ...
1
vote
2answers
2k views

Why do my sshd logs show many trys on invalid ports?

My ssh daemon is setup to listen on port 2221. I have also disabled root login from ssh. I don't understand why in auth.log I have attempts to log on other ports (example with 4627 here). May 17 ...
1
vote
1answer
192 views

basic explanation on NSS , LDAP and PAM

can anyone give me a basic explanation on what are NSS , LDAP and PAM and what they used for and what is their relationship/differences ?
1
vote
2answers
231 views

How to control authentication attempts in PAM?

I would like to configure the no. of times user will be prompted for password(authentication attempts) for login, before dropping the session. Does PAM support this case, if so can you help me out ...
1
vote
1answer
10k views

Execute a script automatically through pbrun?

There is a Unix environment named sftwrk01, uatwrk01, intwrk01 and some more I need to check the logs in each environment everyday by login in as below (through pbsu which is a wrapper for pbrun): ...
1
vote
1answer
129 views

Dynamic password authentication

I would like to know how can I (and if it's possible) create a dynamic authentication for a user in linux. The server would change the user password periodically and the user would use a program ...
1
vote
1answer
228 views

Connecting to Github from server

I am trying to connect to Github from a server running Jenkins. To do this, I'm copying my public key from another server, into the authorized_keys on the new server. All I'm getting is the ...
1
vote
1answer
194 views

SSH Authentication Mechanism

Doing a personal research project and I'm wondering: Why does SSH do its own mechanism negotiation rather than use SASL? At first I thought it might be to ensure confidentiality of the whole session, ...
1
vote
1answer
4k views

How to authenticate a user with PAM, that is not the user that started the application

I'm currently developing an authentication module for an application. The decision was made to do this by using PAM. I have made this work but it can only authenticate the user that started the ...
1
vote
2answers
368 views

Command-line web browser with Kerberos authentication?

QUESTION: Is there a Kerberos-friendly web browser usable via an SSH console? I have tried links but it does not seem to work with Kerberos (the webapp asks me for login/password even though I have a ...
1
vote
2answers
2k views

What is difference between pbrun and sudo command?

What is difference between pbrun and sudo command? I have seen people executing pbrun sudo su - what this means? I know su -, it will try to switch to root user. What speciality pbrun gives to sudo ...
1
vote
1answer
74 views

Throttle accounts after failed SSH login attempts

I have to set up a server that will allow remote logins. Obviously security is an issue. In this first pass we are discussing:- Locking a person for 15 minutes if they fail to login correctly three ...
1
vote
1answer
58 views

Allow a python application to run if the user's password is wrong

Is it possible to let a python program execute only if a wrong password is given at the login screen of my raspberry pi?
1
vote
1answer
353 views

How to disallow usage of an LDAP root account

I am responsible for a couple of servers at my university. All of these machines are configured to talk to the LDAP server of my departement to allow centralised user logins. On this LDAP server there ...
1
vote
1answer
30 views

Replacing graphical sudo prompts with sudo command

I'm trying to replace gksudo, pkexec and its ilk with sudo. However, I'm told that using sudo <graphical_program> is a bad idea. Would the following work as a decent replacement? sudo -H ...
1
vote
2answers
338 views

Is there any shared filesystem based on public key authentication?

I normally use NFS, however I am not so comfortable with the security as basically a root user can just change his UID to an arbitrarily one in order to obtain access to a shared folder. Moreover, ...
1
vote
1answer
369 views

How do I impersonate a windows domain account user from a linux process?

I'm running a process on a Unix box (I think it's a recent version of Red Hat, I can check for more detailed info if relevant), under a local user. I would like to access some network resources, via ...
1
vote
1answer
394 views

Can't su root after editing PAM confiugration on Rackspace Linux box

I've just hosed a system. Working on pam-ldap on an Ubuntu box, I've run pam-auth-update and told it to override local modifications (which had previously allowed for sudo su, but I was having issues ...
1
vote
2answers
186 views

Setting up Samba to use AD server for authentication?

I am looking for howtos or instructions on setting up Samba to use an AD server for authentication instead of using a Samba password file. Pointers to documentation helpful, especially the right ...
1
vote
2answers
196 views

ssh fails for an unix server due to dual layer of authentication

I have a server which has dual authentication layer. Meaning first a user has to login to the box using his userid and then use a group id to access the development folder (say). Now I have a script ...
1
vote
1answer
2k views

What strings should I look for in /var/log/auth.log?

I wrote a bash command to scan /var/log/auth.log for messages occurring on the current day indicating unauthorised access. Currently it just fetches messages matching BREAK-IN and unauthorized. What ...
1
vote
1answer
28 views

Mutt authentication fails because username string is malformed

I'm trying to set up mutt to work with our internal email server. Our user names have the form user@domain.lan But when mutt tries to authenticate, it appends the mail server's url to the username ...
1
vote
1answer
141 views

Simple Radius authentication

I'm looking into using Radius as an authentication server for a few Ubuntu servers when accessing through SSH. I have tried using libpam-radius-auth but it doesn't work quite as I need. My goal is to ...
1
vote
3answers
144 views

Why is gksu asking me for root password and not my password?

On one of my systems, I'm running Gentoo Linux and I've installed x11-libs/gksu-2.0.2-r1. I've disabled the root account using sudo passwd -dl root and I want to be able to run GUI apps which need ...
1
vote
1answer
471 views

CUPS not working correctly after Debian Wheezy -> Jessie upgrade because of a faulty libpam

I just upgraded a Debian Wheezy to Jessie, by changing the /etc/apt/sources.lst. If important: I pinned systemd to stay with sysvinit, and after the upgrade I removed the pin. If I now do apt-get ...
1
vote
1answer
833 views

how to pass a password with a cron job safely?

I have a site map generator script placed in this URL http://www.mydomain.com/admin/sitemapgen/ However this URL is protected with an username and a password in auth_type basic method. I need to ...