Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

learn more… | top users | synonyms

0
votes
1answer
101 views

apt-get update and package authentication

Sometimes when you try to apt-get install a program, you get a warning message about how some packages couldn't be authenticated. Doing an apt-get update will sometimes fix the problem, but sometimes ...
11
votes
4answers
699 views

Groups differ from the local ones when logging in remotely

We store our users in LDAP, alongside some groups that have meaning across different systems (organizational roles including wheel). There are also groups local to workstations, e.g. audio or video ...
1
vote
1answer
86 views

keeping keys on an auxiliary removable drive

It seems that servers are only as secure as the machine that holds the keys and that in turn means the desktop/screensaver password is the line of defence for not only the desktop itself but any ...
2
votes
1answer
1k views

Script to get file from SFTP and run it

We have 5 servers running our code: A, B , C, D and E. From a local machine, we sftp the file to A. Then ssh id@A su - applicationname sftp id@A get <file> bye tar -xzf <file> logout ...
4
votes
1answer
172 views

Easiest way to manage users for two machines

I'm administrating two ubuntu desktops and one debian server. There are abount ~20 active users on the desktops. A few (5-10) user accounts are added each year and about the same amount become ...
1
vote
1answer
226 views

How do I restore authentication for Debian Lenny synaptic package manager?

My neighbor calls me to fix things when his cats walk on his keyboard and cause problems that he can't fix. This time it happened while he was running synaptic package manager. After the reload, ...
3
votes
3answers
862 views

rsync server/daemon security

I have a NAS (Netgear Readynas NV+) at home and a linux (Arch) box at work that is always on. The linux box is already running an ssh server/daemon and the NAS is already running an rsync ...
3
votes
2answers
423 views

How do you automatically elevate an automatic task to root privileges or is there an alternative approach?

I'm trying to write, in essence, an automatic deployment script for use by our development team and I know I can set up SSH to use keys so that I can automatically authenticate via key instead of ...
3
votes
1answer
462 views

Multiple PCs network centralized system authentication

(I couldn't really choose an accurate title as I don't know exactly what the feature I'm looking for is called. Sorry about that. I hope that the following lines may clear this aspect.) I own a dozen ...
1
vote
1answer
895 views

SSL handshake failure with Shibboleth [closed]

I am using Shibboleth for single user authentication and it needs a ssl configuration which facilitates the user authentication process. Before it was working fine but now I am facing a SSL handshake ...
4
votes
1answer
1k views

Does the SFTP server accept passwords at all?

I'm trying to connect to a sftp server via sftp USERNAME@SERVERNAME. Whatever I do, I get "Permission denied (publickey)." Googling doesn't help as everybody recommends switching to key-based ...
7
votes
2answers
4k views

How can I set up SSH on Linux to log in password-less?

My Raspberry Pi is running the default Debian image and has SSH enabled. I log into my Pi as follows: ssh pi@<IP-address-of-my-Pi> I have to enter my password every time. Can I somehow make ...
6
votes
4answers
2k views

Is it possible to change password database file(/etc/passwd) in linux?

Is it possible to change password database file(/etc/passwd) to some other file. How does this authentication mechanism work internally ? Does it depend on pam ?
1
vote
2answers
282 views

Command-line web browser with Kerberos authentication?

QUESTION: Is there a Kerberos-friendly web browser usable via an SSH console? I have tried links but it does not seem to work with Kerberos (the webapp asks me for login/password even though I have a ...
2
votes
0answers
3k views

SMTP Auth - SASL on Dovecot, Postfix and CentOS 6.2 (and Open-Xchange)

I am trying to get open SASL to work on CentOS 6.2. I followed this tutorial: http://wiki.centos.org/HowTos/postfix_sasl I suspect it works perfectly for CentOS 5.x so all I really need is an update ...
2
votes
1answer
2k views

User authentication over Dante proxy server

Below is my Dante SOCKS Proxy server configuration that I connect to without any authentication: internal: eth0 port = 53200 internal: 127.0.0.1 port = 53200 external: eth0 clientmethod: none ...
2
votes
5answers
16k views

vsftpd fails pam authentication

Moving a tried-and-true vsftpd configuration onto a new server with Fedora 16, I ran into a problem. All seems to go as it should, but user authentication fails. I cannot find any entry in any log ...
7
votes
2answers
17k views

How to telnet via proxy authentication?

I am behind a proxy server in my college. It uses a simple username and password authentication. And i connect to the proxy server to port 3128. now i want to telnet simply to say any website on the ...
5
votes
2answers
1k views

How to check for empty passwords?

Looking at all the ssh-login attempts by script-kiddies I assume that there are messed up systems connected to the internet that have password-less accounts set up. But how to check a Linux/Unix ...
3
votes
1answer
3k views

Where to supply authentication details to the Network Proxy (Central Proxy) on Fedora?

My system is running Fedora 16 and I live in a campus where we use LAN to connect to the Internet. And for this, we use an http proxy with authentication (username & password). I tried putting the ...
3
votes
1answer
189 views

How are loaded SSH keys referenced by name?

I'm using chef's knife ec2 tool which requires the name of a loaded SSH key (that was created in the Amazon EC2 control panel) It seems strange to me that it uses a name to reference the keypair - ...
4
votes
2answers
1k views

Git-SVN Not Allowing Me to Authenticate

Git 1.7.9.1 on Arch Linux: git svn init -s https://app.svn.beanstalk.com/repo Initialized empty Git repository in /path/to/repo/.git/ Authentication realm: ...
1
vote
2answers
908 views

LDAP on openSUSE

I'm trying to run an LDAP server on a openSUSE 12. But I have a couple of doubts. What I whant is this: testing.com with 2 OU (Info and People ). So the right way would be ou=Info,dc=testing,dc=com. ...
1
vote
1answer
362 views

Can't su root after editing PAM confiugration on Rackspace Linux box

I've just hosed a system. Working on pam-ldap on an Ubuntu box, I've run pam-auth-update and told it to override local modifications (which had previously allowed for sudo su, but I was having issues ...
1
vote
0answers
819 views

“No PostgreSQL user name specified” - possible concurrency issues?

For my dissertation I'm running the same cronjob on around 300 machines, which is: 10,25,40,55 * * * * /path/to/db_script.sh 1>/dev/null This script gets some values from the system (whether ...
6
votes
4answers
2k views

SSH authentication: either SSH keys or one time password

I have an Ubuntu 10.04 Linux server that I normally ssh into (from my home machine) using ssh key authentication. However, sometimes I need to ssh remotely from potentially insecure machines (like ...
3
votes
1answer
301 views

Configure applications to ask for a user:pass behind a proxy

Here's the deal: I'm trying to set up a SQL server with Debian Linux, I managed to install Debian - but I can't get apt-get to work, since I'm behind a proxy. I already managed to setup Iceweasel to ...
5
votes
1answer
3k views

Preventing `passwd` for asking for the local password

I have setup the sever to only use LDAP for authentication by using authconfig-tui. Everything works well but, when I run passwd, I get two prompts for a password: [beamin@rhel6-test-server1 ~]$ ...
1
vote
0answers
250 views

How to obtain X.509 certificate on solaris based server? [closed]

I have a Solaris based T5220 server. I'd like to install an x.509 certificate. What is the procedure to install this certificat? Does that procedure differs from one server to another? i.e. is it ...
3
votes
1answer
4k views

Can't login as root even after resetting the password

We're running a small Centos 5 server in a virtual machine for a class assignment. For reasons unknown, starting about a week ago a number of services started failing. When we tried to investigate we ...
2
votes
1answer
3k views

Authenticating with x11vnc: what's the difference between -auth and -rfbauth?

I'm on xubuntu 11.10 trying to setup x11vnc server. I followed instructions here and I can connect to VNC server - but it never asks me for password! Is there a difference between these 2 options: ...
2
votes
0answers
1k views

nsswitch cache and nscd

I have an LDAP directory server installed that stores all the user data in one server and I have an ongoing authentication mechanism using pam to request user information from it. This works very ...
7
votes
2answers
460 views

iPhone type login screen?

The person that introduced me to Fedora had somehow made his login screen so that instead of typing in a password he used the "connect the dots" password that's popular on phones. Eg On my ...
1
vote
1answer
8k views

Execute a script automatically through pbrun?

There is a Unix environment named sftwrk01, uatwrk01, intwrk01 and some more I need to check the logs in each environment everyday by login in as below (through pbsu which is a wrapper for pbrun): ...
3
votes
1answer
476 views

What's the best way to install a system-wide certificate from a website?

I want to use the Cisco Easy VPN to connect to the OpSource cloud machines. When I open the app, it directly shows a certificate error message, I suspect that the certificate is not trusted from their ...
2
votes
2answers
1k views

SSH on my local network - problem with login

I'm having problem with logging into my local-network-linux (server) ssh with Putty (and with Linux terminal, too) When my server shows me request to insert username, I insert "root" and I do press ...
1
vote
1answer
501 views

How to protect my anonymity and authenticity in Irc?

I use irssi for playing multiplayer/programming game with random people. Some people take the game a bit too seriously so I want to protect my identity in it. I do not want that someone misuses my ...
26
votes
6answers
9k views

Can I find out which ssh key was used to access an account?

Is it possible to find out which ssh key was used to access an account? I have an account on a server that I let several (trusted!) people have access to via ssh. I'd find it useful to be able to ...
6
votes
3answers
390 views

login and su internals

I am trying to understand how user permissions work in Linux. The kernel boots and starts init as root, right? Init then runs startup scripts and runs getty (agetty), again as root. Agetty just reads ...
5
votes
1answer
713 views

Custom PAM modules and security considerations

I am writing my own PAM module that will be part of an application that I am developing, but I'm not sure exactly where to put it. My module basically does network-level authentication (with other ...
2
votes
1answer
5k views

How to setup proxy authentication in the Debian shell?

I think that once I used export http_proxy=http://user:password@address:port/ successfully. But now when I use wget it shows Error parsing proxy URL http://user:passwordaddress:port/: Bad port ...
10
votes
3answers
1k views

How can I lock my own account from remote ssh login with password?

I don't want to disable remote login with password altogether, but I want to make it so that my account is only accessible with key pair authentication (there are other users who wants to use ...
1
vote
2answers
181 views

Setting up Samba to use AD server for authentication?

I am looking for howtos or instructions on setting up Samba to use an AD server for authentication instead of using a Samba password file. Pointers to documentation helpful, especially the right ...
2
votes
2answers
1k views

setting up ssh public key

Okay, so I'm trying to setup a login for logging in with ssh, using a public key. First, I am using puttygen to generate a rsa-ssh2 public key using a passphrase. I followed the directions and ...
8
votes
3answers
12k views

ssh remote server on some port other than 22 without password

I am usually connecting to the remote server with ssh user@server.com -p 11000 and then giving the password each time for user. How should I avoid entering the password each time I connect ...
4
votes
1answer
951 views

Program to keep track number of login attempts

Is there any way to keep track of number of attempts made by a user to login into his system?
1
vote
2answers
191 views

ssh fails for an unix server due to dual layer of authentication

I have a server which has dual authentication layer. Meaning first a user has to login to the box using his userid and then use a group id to access the development folder (say). Now I have a script ...
7
votes
3answers
2k views

Why does my sudo ask for password only once but evaluate thrice?

$ sudo some_command Password: Sorry, try again. Sorry, try again. Sorry, try again. sudo: 3 incorrect password attempts $ This is what my shell prints when I enter a wrong password to a sudoed ...
7
votes
2answers
6k views

Not able to ssh in to remote machine using shell script in Crontab

Below is the script which i am trying to run, which runs without any issue for i in `seq 200 2100` do usr=(`ssh -t -t -o ConnectTimeout=60 machine$1 finger | tail -1 | awk '{print$1}'`) echo ...
2
votes
2answers
2k views

How to get hashed password in /etc/shadow using getpwnam()?

Apparently there is a function (getpwnam) that given a username, will return the appropriate entry in /etc/passwd with the other details for that user (shell, uid, gid, etc.). However, I have no idea ...