Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

learn more… | top users | synonyms

1
vote
2answers
420 views

Command-line web browser with Kerberos authentication?

QUESTION: Is there a Kerberos-friendly web browser usable via an SSH console? I have tried links but it does not seem to work with Kerberos (the webapp asks me for login/password even though I have a ...
1
vote
1answer
25 views

Debian package's files authentication

I know that dpkg keeps md5sums of configuration files for each package installed, so it can tell whether they are changed or not when upgrading. Does it keep md5sums for regular (non-configuration) ...
1
vote
1answer
32 views

Apache 2.4 basic auth don't work

i have a problem with basic auth to apache 2.4, i have this line: <VirtualHost *:80> ServerAdmin email@email.com DocumentRoot /var/www/html/foo ServerName my.domain.com ...
1
vote
1answer
103 views

Throttle accounts after failed SSH login attempts

I have to set up a server that will allow remote logins. Obviously security is an issue. In this first pass we are discussing:- Locking a person for 15 minutes if they fail to login correctly three ...
1
vote
1answer
395 views

Locally deny login to users authenticated via LDAP

I have a RedHat Linux server that are is use for more than 1000 users Users names are coming to the server via LDAP protocol, so login authentication is from the LDAP My question: is it possible to ...
1
vote
1answer
86 views

Allow a python application to run if the user's password is wrong

Is it possible to let a python program execute only if a wrong password is given at the login screen of my raspberry pi?
1
vote
1answer
661 views

How to disallow usage of an LDAP root account

I am responsible for a couple of servers at my university. All of these machines are configured to talk to the LDAP server of my departement to allow centralised user logins. On this LDAP server there ...
1
vote
1answer
32 views

Replacing graphical sudo prompts with sudo command

I'm trying to replace gksudo, pkexec and its ilk with sudo. However, I'm told that using sudo <graphical_program> is a bad idea. Would the following work as a decent replacement? sudo -H ...
1
vote
2answers
451 views

Is there any shared filesystem based on public key authentication?

I normally use NFS, however I am not so comfortable with the security as basically a root user can just change his UID to an arbitrarily one in order to obtain access to a shared folder. Moreover, ...
1
vote
1answer
444 views

How do I impersonate a windows domain account user from a linux process?

I'm running a process on a Unix box (I think it's a recent version of Red Hat, I can check for more detailed info if relevant), under a local user. I would like to access some network resources, via ...
1
vote
1answer
416 views

Can't su root after editing PAM confiugration on Rackspace Linux box

I've just hosed a system. Working on pam-ldap on an Ubuntu box, I've run pam-auth-update and told it to override local modifications (which had previously allowed for sudo su, but I was having issues ...
1
vote
2answers
193 views

Setting up Samba to use AD server for authentication?

I am looking for howtos or instructions on setting up Samba to use an AD server for authentication instead of using a Samba password file. Pointers to documentation helpful, especially the right ...
1
vote
2answers
197 views

ssh fails for an unix server due to dual layer of authentication

I have a server which has dual authentication layer. Meaning first a user has to login to the box using his userid and then use a group id to access the development folder (say). Now I have a script ...
1
vote
1answer
2k views

What strings should I look for in /var/log/auth.log?

I wrote a bash command to scan /var/log/auth.log for messages occurring on the current day indicating unauthorised access. Currently it just fetches messages matching BREAK-IN and unauthorized. What ...
1
vote
1answer
30 views

MongoDB authentication failed?

I'm currently trying to set up a secure MongoDB database for my various applications, but whenever I try to login with a username and password, but the shell always replies with Error: Authentication ...
1
vote
1answer
9 views

Red Hat 7 GDM + NIS Only Validates First 7 Characters of Password

I've come across an interesting issue this morning. We have noticed that GDM on RHEL 7 is allowing us to log-in with only the first 7 characters of password. We can enter anything or nothing from ...
1
vote
1answer
116 views

Dogtag CA after installation

After Dogtag 10 installation(step by step by https://www.youtube.com/watch?v=C3eElJAz7lU) when I open Admin (https://localhost.localdomain:8443/ca/agent/ca/) I get following error Problem ...
1
vote
1answer
29 views

persisting multi-factor user data for custom pam authentication in CentOS 7

I am designing n-factor authentication for CentOS 7 using a custom PAM module. When the user tries to SSH, they will be texted a pin code, and be prompted to enter the pin. Where should I store the ...
1
vote
1answer
42 views

Mutt authentication fails because username string is malformed

I'm trying to set up mutt to work with our internal email server. Our user names have the form user@domain.lan But when mutt tries to authenticate, it appends the mail server's url to the username ...
1
vote
1answer
2k views

Setting up connection to WPA2 Enterprise (PEAP/MSCHAPv2) with two-level certificate

For a long time, I have been able to use NetworkManager + wpa_supplicant as configured in Debian 7 to connect to a secure wireless at work (which is WPA2 Enterprise, with PEAP + MSCHAPv2 ...
1
vote
1answer
451 views

Simple Radius authentication

I'm looking into using Radius as an authentication server for a few Ubuntu servers when accessing through SSH. I have tried using libpam-radius-auth but it doesn't work quite as I need. My goal is to ...
1
vote
3answers
424 views

Why is gksu asking me for root password and not my password?

On one of my systems, I'm running Gentoo Linux and I've installed x11-libs/gksu-2.0.2-r1. I've disabled the root account using sudo passwd -dl root and I want to be able to run GUI apps which need ...
1
vote
1answer
2k views

Cannot login for one user, changing password have no effect

I have change the user's (user1) password using root passwd user1 but when i tried to ssh user@localhost or through gdm or tty it always failed the journalctl log shows Failed password for user1 ...
1
vote
2answers
4k views

Authentication very slow (both with ssh and su)

I'm having a problem on one of our production servers where the login attempts become progressively slower as time passes. After roughly 5 days it becomes so slow that some critical processes/cron ...
1
vote
1answer
88 views

How does the authentication process with the salted hash in shadow work

Does the supplied password during login get converted to a salted hash and then compared to the one in /etc/shadow? /what if the user is in LDAP but not in the shadow file? Would it use kerberos?
1
vote
2answers
531 views

Reset password for regular user who is locked out

I'm a complete noob in Linux and I'm stuck in a situation where I'm logged in an Linux box from putty but on of my colleague, who was trying to login on same machine from his machine blocked my user ...
1
vote
1answer
129 views

How to get the authentication status from the last PAM module run

If I have the following PAM stack: auth required default_pam.so auth requisite my_custom_pam.so .... How do you obtain the authentication status from the last/previous PAM module run for use in ...
1
vote
1answer
5k views

How to configure Samba to use Windows's login ID?

I'm trying to access the Linux share folder from Windows using Windows's domain authentication. I come across the integration of Windows Active Directory into Samba on a Linux box, thus I have this ...
1
vote
1answer
362 views

Mount home partition on user login

I got a VPS with a user dedicated to store my files. As i am aware of the current situation with the NSA and many other governments, and my VPS is hosted on a doubtful country i would like to ensure ...
1
vote
1answer
162 views

How to recover from this NIS & NFS client error?

I have a centralized NIS and NFS server on my server. I use this server to control 100 Linux clients, /$home/ directory and authentication are served by the centralized server. The other day in one of ...
1
vote
1answer
675 views

Where would I find where an .htaccess file is located and being used on a Mac OS X Lion server that sets Basic Auth on an Apache server?

I've installed some software, namely, a continuous integration (CI) server (Jenkins) on a Mac Mini running Lion Server. The server, by default, runs from port 8080 on local host via the url: ...
1
vote
1answer
1k views

Certificate extensions in generating and signing certificartes using openssl

References: SSL Configurations for Intermediate certificate How to add my own created certificate authority to system trusted repositories Why I can't find a page which tell me what's the kind of ...
1
vote
1answer
2k views

Failed to sign CSR with the CA root key

I'm trying to implement Mutual Certificate Authentication , I have to be the CA and server at the same time , generate certificates and sign them for users. and I'm following this tutorial which is a ...
1
vote
1answer
2k views

Session terminates immediately after authentication

I have a RedHat 5.3 server with several regular users created. Since last Friday the user "xpto" is getting "Authentication failed" error messages. Tha account isn't locked out. I have reset the ...
1
vote
1answer
107 views

keeping keys on an auxiliary removable drive

It seems that servers are only as secure as the machine that holds the keys and that in turn means the desktop/screensaver password is the line of defence for not only the desktop itself but any ...
1
vote
1answer
277 views

How do I restore authentication for Debian Lenny synaptic package manager?

My neighbor calls me to fix things when his cats walk on his keyboard and cause problems that he can't fix. This time it happened while he was running synaptic package manager. After the reload, ...
1
vote
2answers
1k views

LDAP on openSUSE

I'm trying to run an LDAP server on a openSUSE 12. But I have a couple of doubts. What I whant is this: testing.com with 2 OU (Info and People ). So the right way would be ou=Info,dc=testing,dc=com. ...
1
vote
1answer
544 views

How to protect my anonymity and authenticity in Irc?

I use irssi for playing multiplayer/programming game with random people. Some people take the game a bit too seriously so I want to protect my identity in it. I do not want that someone misuses my ...
1
vote
0answers
23 views

Samba Share to Require Password Debugging

I've recently set up Samba on one of my CentOS 7 servers and it works fine, it allows anyone to access it as long as they are on the LAN. Now I need to set up a second share that can only be accessed ...
1
vote
0answers
38 views

User creation during authentication

I'm working with OpenBSD 5.6 and the goal is that I need to create user when he or she tries to authenticate with specific password. I've written a script for this purpose and everything goes ok but ...
1
vote
1answer
127 views

Valid root/user passwords not working on EC2

There is an authentication failure when I'm trying to enter password for any of my accounts after an update using yum. My authentication got broken, while everything else works. The updates were ...
1
vote
1answer
105 views

Sendmail issues “530 Authentication required” error message when authinfo is supplied

sender_email - email address that does not exist, but must be used as FROM address, because receiver host rejects emails from other emails. receiver_email - email that is supposed to receive the sent ...
1
vote
0answers
1k views

Adding CentOS 7 to Active Directory

I am having a hard time adding a CentOS 7 machine to my domain (Active Directory 2012 running in Windows 2008 mode). I am using realmd to join the machine to the domain. Here is what I have checked so ...
1
vote
1answer
194 views

Installing Kali 2.0 on virtual box failled

I'm using VirtualBox 4.3.22 and I'm trying to install Kali 2.0. After the installation progress is complete and I reboot, I have to enter my username and password as usual, e.g username newbie; ...
1
vote
1answer
570 views

Cent OS 6.6 enable Plaintext authentication on dovecot and postfix

A customer of mine wants to use gmail as their default mail client but I have rolled forward to a new CENTOS server version (6.6, ok it's not "new" new) and the dovecot and postfix settings are ...
1
vote
0answers
23 views

Authentication shared over multiple systems [closed]

TL;DR I'm looking for a software that allows authentication shared over multiple systems to be used for authorizing access to all devices connected to a network. Any advice, recommendation inclusive ...
1
vote
0answers
120 views

firefox 38 hanging with corporate proxy and winbind?

I seem to have broken firefox 38 and it is unusable. It just hangs and freezes for long periods of time ranging from a few seconds up to infinity - usually in steps at the authentication prompt for ...
1
vote
0answers
168 views

When connecting my WiFi, how to open browser automatically?

I made my Linux computer providing WiFi access. This is only to browse its local website. As one does for a captive portal, I want to force the browser to display and direct to my homepage : - you ...
1
vote
0answers
186 views

Captive portal detection, popup implementation?

Based on hostapd, I m building a captive portal. - My Linux Machine provides a Wifi access. - iPad's and Android clients-tablets connect this Wifi. Generally, any client OS check if a url is ...
1
vote
1answer
195 views

/private/var socket not created with postfix/dovecot sasl

I'm currently running into a problem I have with my email server. I try to setup Postfix and Dovecot with SASL authentication but I get the following error when I connect with telnet (port 25) to the ...