Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

learn more… | top users | synonyms

1
vote
1answer
1k views

Cannot login for one user, changing password have no effect

I have change the user's (user1) password using root passwd user1 but when i tried to ssh user@localhost or through gdm or tty it always failed the journalctl log shows Failed password for user1 ...
1
vote
2answers
2k views

Authentication very slow (both with ssh and su)

I'm having a problem on one of our production servers where the login attempts become progressively slower as time passes. After roughly 5 days it becomes so slow that some critical processes/cron ...
1
vote
1answer
73 views

How does the authentication process with the salted hash in shadow work

Does the supplied password during login get converted to a salted hash and then compared to the one in /etc/shadow? /what if the user is in LDAP but not in the shadow file? Would it use kerberos?
1
vote
2answers
366 views

Reset password for regular user who is locked out

I'm a complete noob in Linux and I'm stuck in a situation where I'm logged in an Linux box from putty but on of my colleague, who was trying to login on same machine from his machine blocked my user ...
1
vote
1answer
78 views

How to get the authentication status from the last PAM module run

If I have the following PAM stack: auth required default_pam.so auth requisite my_custom_pam.so .... How do you obtain the authentication status from the last/previous PAM module run for use in ...
1
vote
1answer
4k views

How to configure Samba to use Windows's login ID?

I'm trying to access the Linux share folder from Windows using Windows's domain authentication. I come across the integration of Windows Active Directory into Samba on a Linux box, thus I have this ...
1
vote
1answer
297 views

Mount home partition on user login

I got a VPS with a user dedicated to store my files. As i am aware of the current situation with the NSA and many other governments, and my VPS is hosted on a doubtful country i would like to ensure ...
1
vote
1answer
555 views

Where would I find where an .htaccess file is located and being used on a Mac OS X Lion server that sets Basic Auth on an Apache server?

I've installed some software, namely, a continuous integration (CI) server (Jenkins) on a Mac Mini running Lion Server. The server, by default, runs from port 8080 on local host via the url: ...
1
vote
1answer
942 views

Certificate extensions in generating and signing certificartes using openssl

References: SSL Configurations for Intermediate certificate How to add my own created certificate authority to system trusted repositories Why I can't find a page which tell me what's the kind of ...
1
vote
1answer
1k views

Failed to sign CSR with the CA root key

I'm trying to implement Mutual Certificate Authentication , I have to be the CA and server at the same time , generate certificates and sign them for users. and I'm following this tutorial which is a ...
1
vote
1answer
1k views

Session terminates immediately after authentication

I have a RedHat 5.3 server with several regular users created. Since last Friday the user "xpto" is getting "Authentication failed" error messages. Tha account isn't locked out. I have reset the ...
1
vote
1answer
98 views

keeping keys on an auxiliary removable drive

It seems that servers are only as secure as the machine that holds the keys and that in turn means the desktop/screensaver password is the line of defence for not only the desktop itself but any ...
1
vote
1answer
253 views

How do I restore authentication for Debian Lenny synaptic package manager?

My neighbor calls me to fix things when his cats walk on his keyboard and cause problems that he can't fix. This time it happened while he was running synaptic package manager. After the reload, ...
1
vote
2answers
992 views

LDAP on openSUSE

I'm trying to run an LDAP server on a openSUSE 12. But I have a couple of doubts. What I whant is this: testing.com with 2 OU (Info and People ). So the right way would be ou=Info,dc=testing,dc=com. ...
1
vote
1answer
531 views

How to protect my anonymity and authenticity in Irc?

I use irssi for playing multiplayer/programming game with random people. Some people take the game a bit too seriously so I want to protect my identity in it. I do not want that someone misuses my ...
1
vote
1answer
87 views

Installing Kali 2.0 on virtual box failled

I'm using VirtualBox 4.3.22 and I'm trying to install Kali 2.0. After the installation progress is complete and I reboot, I have to enter my username and password as usual, e.g username newbie; ...
1
vote
1answer
75 views

Cent OS 6.6 enable Plaintext authentication on dovecot and postfix

A customer of mine wants to use gmail as their default mail client but I have rolled forward to a new CENTOS server version (6.6, ok it's not "new" new) and the dovecot and postfix settings are ...
1
vote
0answers
16 views

Authentication shared over multiple systems [closed]

TL;DR I'm looking for a software that allows authentication shared over multiple systems to be used for authorizing access to all devices connected to a network. Any advice, recommendation inclusive ...
1
vote
0answers
64 views

Captive portal detection, popup implementation?

Based on hostapd, I m building a captive portal. - My Linux Machine provides a Wifi access. - iPad's and Android clients-tablets connect this Wifi. Generally, any client OS check if a url is ...
1
vote
0answers
131 views

/private/var socket not created with postfix/dovecot sasl

I'm currently running into a problem I have with my email server. I try to setup Postfix and Dovecot with SASL authentication but I get the following error when I connect with telnet (port 25) to the ...
1
vote
1answer
261 views

Fetch, authenticate, and download a post-install script on FreeBSD

I'm on a fresh FreeBSD install and want to download and run a post-install script from a private BitBucket repo. My fetch attempt returns an authentication error: ~# fetch ...
1
vote
0answers
118 views

Why on my Linux PPPoE connection displays sometimes authentication failure?

Here is my log: Oct 18 09:51:52 -desktop pppd[2764]: Plugin rp-pppoe.so loaded. Oct 18 09:51:52 -desktop pppd[2766]: pppd 2.4.5 started by root, uid 0 Oct 18 09:51:52 -desktop pppd[2766]: PPP session ...
1
vote
1answer
240 views

What prevents RHEL7 default PAM config's “nullok” option from allowing empty passwords?

The config /etc/pam.d/password-auth is included by several PAM services including sshd. This is its auth stanza: auth required pam_env.so auth sufficient pam_unix.so nullok ...
1
vote
0answers
62 views

Cannot login to svn server

I have a SVN server on my Raspberry Pi (Raspbian). It has a project under the directory /welcome, I want to add users to it. My users would be admin with password admin and user2 with password ...
1
vote
0answers
2k views

Samba prompts for a password twice

I have a relatively new samba install configured to give Windows users access to some log files on a syslog server ("littleEngineer"). However it's prompting for a password to just get a share listing ...
1
vote
0answers
259 views

Fedora 20. Authentication requires a different password from su

In Fedora 20 (using Mate desktop) I have tried to change the default keyboard layout from US English to UK English, but am asked for "Authentication". The password I have for su is not accepted, and I ...
1
vote
1answer
887 views

Apache mod_auth_kerb: “Key table entry not found”

I want to use the Apache Module "mod_auth_kerb" to implement SSO for a Webapplication. With the following config: <VirtualHost 10.5.3.200:443> #Proxy <Proxy *> Order deny,allow Allow ...
1
vote
1answer
154 views

How to recover from this NIS & NFS client error?

I have a centralized NIS and NFS server on my server. I use this server to control 100 Linux clients, /$home/ directory and authentication are served by the centralized server. The other day in one of ...
1
vote
0answers
99 views

How do I setup kerberos authetication in Fedora 19

I cannnot seem to find documentation on setting up Kerberos authentication on my Fedora 19 workstation. Which files and programs are involved? My Kerberos server is a corporate AD.
1
vote
2answers
132 views

FTP transfer: I can see files on remote machine, but remote user can't

I had to transfer a few videos and photoes on a FTP server. For that, the person on the remote machine gave me the IP address of that machine where I had to transfer. He told me to transfer by FTP. ...
1
vote
0answers
345 views

HTTPS Authentication problem : Polipo

I use internet behind http proxy, and that requires authentication. I tried using polipo to bypass the authenticated proxy to 127.0.0.1:9134. Applying these settings to my browser, works fine for ...
1
vote
0answers
160 views

Assigning an identity to an IPsec policy in Linux

Page 36 of RFC2367 (PF_KEYv2 Key Management API) states that when the kernel needs an IPsec security association for an outbound packet, but does not have one, it will ask the key management daemon ...
1
vote
1answer
132 views

kinit returns error salt type 3 unsupported on FreeBSD 9.1-RELEASE install

When attempting to run kinit to log into a Kerberos V5 realm I get the following error on a default install FreeBSD 9.1-RELEASE kinit: krb5_get_init_creds: salt type 3 not supported Any ideas?
1
vote
1answer
1k views

SSL handshake failure with Shibboleth [closed]

I am using Shibboleth for single user authentication and it needs a ssl configuration which facilitates the user authentication process. Before it was working fine but now I am facing a SSL handshake ...
1
vote
0answers
1k views

“No PostgreSQL user name specified” - possible concurrency issues?

For my dissertation I'm running the same cronjob on around 300 machines, which is: 10,25,40,55 * * * * /path/to/db_script.sh 1>/dev/null This script gets some values from the system (whether ...
1
vote
2answers
204 views

Pamtester automate password testing

We have a system image which uses a default password for root. This should be changed, though I have a feeling not all users do this. I know I can test login with pamtester: # pamtester system-auth ...
0
votes
3answers
1k views

What does sudo su work but su does not? [duplicate]

I have tried this on Fedora and on Ubuntu. kshitiz@kshitiz:~$su su: Authentication failure kshitiz@kshitiz:~$sudo su root@kshitiz:/home/kshitiz# I am entering the same password in both the cases. ...
0
votes
3answers
174 views

Get MAC of a client request?

I have a network with 20 raspberries (clients) and 1 server. I'd like to check MAC of client request, is that possible ? Further, possible without being known (nor visible) by the client ? NB : I ...
0
votes
2answers
19k views

SSH authentication using gssapi-keyex or gssapi-with-mic (publickey not permitted)

My company has disabled SSH public key authentication, therefore I have to manually enter each time my password (I am not suppose to change /etc/ssh/sshd_config). However gssapi-keyex and ...
0
votes
3answers
2k views

SSH public key authentication works on LAN and not from WAN

I've setup my SSH server to use public key authentication. When I connect to my server on local network, it authenticates. But it doesn't when I connect over the internet. I don't think the problem ...
0
votes
2answers
965 views

Ssh 'access denied' from one host but not the other

Consider the following scenario: I have a Debian-ssh-server setup and exposed it to the internet for some time for testing. Also I have an account which is basically configured as root in the sudoers ...
0
votes
1answer
25 views

Install script - sudo authorisation compatibility?

I am currently updating a few scripts, and am planning on releasing some useful ones so others can use them (so they need to work across a wide range of machines without crashing, and without breaking ...
0
votes
1answer
144 views

what does pam_env.so really do?

Having the following line: auth required pam_env.so Documentation happily says "This module is required—it must run successfully for authentication to proceed." ...
0
votes
2answers
87 views

How to set Linux to ask for authentication when running potentially dangerous commands?

I've faced times when I accidentally ran dangerous commands and lost all my data. How do I set Linux to ask for current user password or root user password when running potentially dangerous commands ...
0
votes
1answer
169 views

apt-get update and package authentication

Sometimes when you try to apt-get install a program, you get a warning message about how some packages couldn't be authenticated. Doing an apt-get update will sometimes fix the problem, but sometimes ...
0
votes
1answer
17 views

persisting multi-factor user data for custom pam authentication in CentOS 7

I am designing n-factor authentication for CentOS 7 using a custom PAM module. When the user tries to SSH, they will be texted a pin code, and be prompted to enter the pin. Where should I store the ...
0
votes
1answer
14 views

ssh-copy-id doesn't copy to non-default location

Does ssh-copy-id recognize if the authorized_keys file is not in ~/.ssh? I am storing my authorized keys file in a different folder, which I have configured as: AuthorizedKeysFile ...
0
votes
1answer
78 views

Open a webpage and enter a username and password via CLI

Ultimately, I want to use a bash script to automatically open and log into a website. I was wondering if I could use the curl or elinks commands to log in to a website and then somehow export that ...
0
votes
1answer
122 views

How to set password of cups 1.3.7 (/etc/cups/passwd.md5) without prompting?

My company is using CUPS v1.3.7, I would like to allow users to be authenticated only in the cups web interface and not via SSH. I imagine, i should use the authentication type BasicDigest in ...
0
votes
1answer
28 views

Smart Card local authentication

Is it possible to use smartCard for local authentication ? So that, rather userID/password combination, an user can authenticate himself by inserting card and by providing it's PIN number. RDesktop, ...