Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

learn more… | top users | synonyms

1
vote
1answer
66 views

Connecting to Github from server

I am trying to connect to Github from a server running Jenkins. To do this, I'm copying my public key from another server, into the authorized_keys on the new server. All I'm getting is the ...
1
vote
1answer
633 views

How to sign into an open Wireless Network?

I'm running Arch Linux on my netbook. My school have an open Access Point and we must sign into the network via a page which we are redirected to when we try to open whatever website if we are not ...
1
vote
1answer
114 views

SSH Authentication Mechanism

Doing a personal research project and I'm wondering: Why does SSH do its own mechanism negotiation rather than use SASL? At first I thought it might be to ensure confidentiality of the whole session, ...
1
vote
1answer
2k views

How to authenticate a user with PAM, that is not the user that started the application

I'm currently developing an authentication module for an application. The decision was made to do this by using PAM. I have made this work but it can only authenticate the user that started the ...
1
vote
2answers
264 views

Command-line web browser with Kerberos authentication?

QUESTION: Is there a Kerberos-friendly web browser usable via an SSH console? I have tried links but it does not seem to work with Kerberos (the webapp asks me for login/password even though I have a ...
1
vote
1answer
18 views

How to disallow usage of an LDAP root account

I am responsible for a couple of servers at my university. All of these machines are configured to talk to the LDAP server of my departement to allow centralised user logins. On this LDAP server there ...
1
vote
1answer
26 views

Replacing graphical sudo prompts with sudo command

I'm trying to replace gksudo, pkexec and its ilk with sudo. However, I'm told that using sudo <graphical_program> is a bad idea. Would the following work as a decent replacement? sudo -H ...
1
vote
2answers
139 views

Is there any shared filesystem based on public key authentication?

I normally use NFS, however I am not so comfortable with the security as basically a root user can just change his UID to an arbitrarily one in order to obtain access to a shared folder. Moreover, ...
1
vote
1answer
240 views

How do I impersonate a windows domain account user from a linux process?

I'm running a process on a Unix box (I think it's a recent version of Red Hat, I can check for more detailed info if relevant), under a local user. I would like to access some network resources, via ...
1
vote
1answer
350 views

Can't su root after editing PAM confiugration on Rackspace Linux box

I've just hosed a system. Working on pam-ldap on an Ubuntu box, I've run pam-auth-update and told it to override local modifications (which had previously allowed for sudo su, but I was having issues ...
1
vote
2answers
999 views

SSH on my local network - problem with login

I'm having problem with logging into my local-network-linux (server) ssh with Putty (and with Linux terminal, too) When my server shows me request to insert username, I insert "root" and I do press ...
1
vote
2answers
177 views

Setting up Samba to use AD server for authentication?

I am looking for howtos or instructions on setting up Samba to use an AD server for authentication instead of using a Samba password file. Pointers to documentation helpful, especially the right ...
1
vote
2answers
188 views

ssh fails for an unix server due to dual layer of authentication

I have a server which has dual authentication layer. Meaning first a user has to login to the box using his userid and then use a group id to access the development folder (say). Now I have a script ...
1
vote
1answer
1k views

What strings should I look for in /var/log/auth.log?

I wrote a bash command to scan /var/log/auth.log for messages occurring on the current day indicating unauthorised access. Currently it just fetches messages matching BREAK-IN and unauthorized. What ...
1
vote
1answer
57 views

Cannot login for one user, changing password have no effect

I have change the user's (user1) password using root passwd user1 but when i tried to ssh user@localhost or through gdm or tty it always failed the journalctl log shows Failed password for user1 ...
1
vote
1answer
30 views

Apache authentication mutiple domain but same subdirectory

I've got several sites: example.com, example1.com, and example2.com in my wordpress. All of them point to my server's /public_html folder, which is my Apache root folder. What do I need to add to my ...
1
vote
1answer
415 views

PPTP VPN error: LCP terminated by peer

I cannot connect to my PPTP VPN server, even though the CHAP authentication succeeds. This is from /var/log/syslog: Jun 11 07:27:22 aspire pppd[32221]: CHAP authentication succeeded Jun 11 07:27:22 ...
1
vote
1answer
46 views

How does the authentication process with the salted hash in shadow work

Does the supplied password during login get converted to a salted hash and then compared to the one in /etc/shadow? /what if the user is in LDAP but not in the shadow file? Would it use kerberos?
1
vote
2answers
95 views

Reset password for regular user who is locked out

I'm a complete noob in Linux and I'm stuck in a situation where I'm logged in an Linux box from putty but on of my colleague, who was trying to login on same machine from his machine blocked my user ...
1
vote
1answer
183 views

Mount home partition on user login

I got a VPS with a user dedicated to store my files. As i am aware of the current situation with the NSA and many other governments, and my VPS is hosted on a doubtful country i would like to ensure ...
1
vote
3answers
3k views

CentOS use .pac file as proxy

I have to use a proxy with authentication to connect to the Internet. But I can't find any solution for this. I have modify my yum.conf, with a lot of possibilities: ...
1
vote
1answer
171 views

Where would I find where an .htaccess file is located and being used on a Mac OS X Lion server that sets Basic Auth on an Apache server?

I've installed some software, namely, a continuous integration (CI) server (Jenkins) on a Mac Mini running Lion Server. The server, by default, runs from port 8080 on local host via the url: ...
1
vote
1answer
696 views

Failed to sign CSR with the CA root key

I'm trying to implement Mutual Certificate Authentication , I have to be the CA and server at the same time , generate certificates and sign them for users. and I'm following this tutorial which is a ...
1
vote
1answer
696 views

Session terminates immediately after authentication

I have a RedHat 5.3 server with several regular users created. Since last Friday the user "xpto" is getting "Authentication failed" error messages. Tha account isn't locked out. I have reset the ...
1
vote
1answer
82 views

keeping keys on an auxiliary removable drive

It seems that servers are only as secure as the machine that holds the keys and that in turn means the desktop/screensaver password is the line of defence for not only the desktop itself but any ...
1
vote
1answer
213 views

How do I restore authentication for Debian Lenny synaptic package manager?

My neighbor calls me to fix things when his cats walk on his keyboard and cause problems that he can't fix. This time it happened while he was running synaptic package manager. After the reload, ...
1
vote
2answers
859 views

LDAP on openSUSE

I'm trying to run an LDAP server on a openSUSE 12. But I have a couple of doubts. What I whant is this: testing.com with 2 OU (Info and People ). So the right way would be ou=Info,dc=testing,dc=com. ...
1
vote
1answer
482 views

How to protect my anonymity and authenticity in Irc?

I use irssi for playing multiplayer/programming game with random people. Some people take the game a bit too seriously so I want to protect my identity in it. I do not want that someone misuses my ...
1
vote
0answers
7 views

Externally authenticate user within PAM session/PAM session within PAM session

Is there a way of properly authenticating a user from within a custom PAM session? I am currently writing my own PAM authentication module which allows the user to login via an external token. This ...
1
vote
1answer
28 views

What prevents RHEL7 default PAM config's “nullok” option from allowing empty passwords?

The config /etc/pam.d/password-auth is included by several PAM services including sshd. This is its auth stanza: auth required pam_env.so auth sufficient pam_unix.so nullok ...
1
vote
0answers
28 views

Cannot login to svn server

I have a SVN server on my Raspberry Pi (Raspbian). It has a project under the directory /welcome, I want to add users to it. My users would be admin with password admin and user2 with password ...
1
vote
0answers
173 views

Samba prompts for a password twice

I have a relatively new samba install configured to give Windows users access to some log files on a syslog server ("littleEngineer"). However it's prompting for a password to just get a share listing ...
1
vote
0answers
123 views

Fedora 20. Authentication requires a different password from su

In Fedora 20 (using Mate desktop) I have tried to change the default keyboard layout from US English to UK English, but am asked for "Authentication". The password I have for su is not accepted, and I ...
1
vote
1answer
188 views

A messagebox keeping popping up in my centos VNC server asking to change proxy settings?

I have included a screenshot of what it looks like. It keeps appearing and in the morning you to close it 50 times. Could you please help me identify where the problem lies? NOTE: It's CentOs 6 ...
1
vote
0answers
39 views

How to get the authentication status from the last PAM module run

If I have the following PAM stack: auth required default_pam.so auth requisite my_custom_pam.so .... How do you obtain the authentication status from the last/previous PAM module run for use in ...
1
vote
1answer
112 views

How to recover from this NIS & NFS client error?

I have a centralized NIS and NFS server on my server. I use this server to control 100 Linux clients, /$home/ directory and authentication are served by the centralized server. The other day in one of ...
1
vote
0answers
78 views

How to setup SVN server securely? [closed]

I am a linux newbie but I need to setup a SVN server and have the following 2 requirements: 1) Users to be able to authenticate automatically (with ssh keys, with no password) 2) The repositories to ...
1
vote
0answers
80 views

How do I setup kerberos authetication in Fedora 19

I cannnot seem to find documentation on setting up Kerberos authentication on my Fedora 19 workstation. Which files and programs are involved? My Kerberos server is a corporate AD.
1
vote
2answers
75 views

FTP transfer: I can see files on remote machine, but remote user can't

I had to transfer a few videos and photoes on a FTP server. For that, the person on the remote machine gave me the IP address of that machine where I had to transfer. He told me to transfer by FTP. ...
1
vote
0answers
167 views

HTTPS Authentication problem : Polipo

I use internet behind http proxy, and that requires authentication. I tried using polipo to bypass the authenticated proxy to 127.0.0.1:9134. Applying these settings to my browser, works fine for ...
1
vote
1answer
86 views

Pamtester automate password testing

We have a system image which uses a default password for root. This should be changed, though I have a feeling not all users do this. I know I can test login with pamtester: # pamtester system-auth ...
1
vote
0answers
118 views

Assigning an identity to an IPsec policy in Linux

Page 36 of RFC2367 (PF_KEYv2 Key Management API) states that when the kernel needs an IPsec security association for an outbound packet, but does not have one, it will ask the key management daemon ...
1
vote
1answer
90 views

kinit returns error salt type 3 unsupported on FreeBSD 9.1-RELEASE install

When attempting to run kinit to log into a Kerberos V5 realm I get the following error on a default install FreeBSD 9.1-RELEASE kinit: krb5_get_init_creds: salt type 3 not supported Any ideas?
1
vote
1answer
798 views

SSL handshake failure with Shibboleth

I am using Shibboleth for single user authentication and it needs a ssl configuration which facilitates the user authentication process. Before it was working fine but now I am facing a SSL handshake ...
1
vote
0answers
3k views

SMTP Auth - SASL on Dovecot, Postfix and CentOS 6.2 (and Open-Xchange)

I am trying to get open SASL to work on CentOS 6.2. I followed this tutorial: http://wiki.centos.org/HowTos/postfix_sasl I suspect it works perfectly for CentOS 5.x so all I really need is an update ...
1
vote
0answers
742 views

“No PostgreSQL user name specified” - possible concurrency issues?

For my dissertation I'm running the same cronjob on around 300 machines, which is: 10,25,40,55 * * * * /path/to/db_script.sh 1>/dev/null This script gets some values from the system (whether ...
1
vote
0answers
245 views

How to obtain X.509 certificate on solaris based server? [closed]

I have a Solaris based T5220 server. I'd like to install an x.509 certificate. What is the procedure to install this certificat? Does that procedure differs from one server to another? i.e. is it ...
0
votes
3answers
790 views

What does sudo su work but su does not? [duplicate]

I have tried this on Fedora and on Ubuntu. kshitiz@kshitiz:~$su su: Authentication failure kshitiz@kshitiz:~$sudo su root@kshitiz:/home/kshitiz# I am entering the same password in both the cases. ...
0
votes
2answers
10k views

SSH authentication using gssapi-keyex or gssapi-with-mic (publickey not permitted)

My company has disabled SSH public key authentication, therefore I have to manually enter each time my password (I am not suppose to change /etc/ssh/sshd_config). However gssapi-keyex and ...
0
votes
2answers
129 views

Ssh 'access denied' from one host but not the other

Consider the following scenario: I have a Debian-ssh-server setup and exposed it to the internet for some time for testing. Also I have an account which is basically configured as root in the sudoers ...