Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

learn more… | top users | synonyms

1
vote
1answer
110 views

Pamtester automate password testing

We have a system image which uses a default password for root. This should be changed, though I have a feeling not all users do this. I know I can test login with pamtester: # pamtester system-auth ...
1
vote
0answers
121 views

Assigning an identity to an IPsec policy in Linux

Page 36 of RFC2367 (PF_KEYv2 Key Management API) states that when the kernel needs an IPsec security association for an outbound packet, but does not have one, it will ask the key management daemon ...
1
vote
1answer
94 views

kinit returns error salt type 3 unsupported on FreeBSD 9.1-RELEASE install

When attempting to run kinit to log into a Kerberos V5 realm I get the following error on a default install FreeBSD 9.1-RELEASE kinit: krb5_get_init_creds: salt type 3 not supported Any ideas?
1
vote
1answer
873 views

SSL handshake failure with Shibboleth [closed]

I am using Shibboleth for single user authentication and it needs a ssl configuration which facilitates the user authentication process. Before it was working fine but now I am facing a SSL handshake ...
1
vote
0answers
3k views

SMTP Auth - SASL on Dovecot, Postfix and CentOS 6.2 (and Open-Xchange)

I am trying to get open SASL to work on CentOS 6.2. I followed this tutorial: http://wiki.centos.org/HowTos/postfix_sasl I suspect it works perfectly for CentOS 5.x so all I really need is an update ...
1
vote
0answers
796 views

“No PostgreSQL user name specified” - possible concurrency issues?

For my dissertation I'm running the same cronjob on around 300 machines, which is: 10,25,40,55 * * * * /path/to/db_script.sh 1>/dev/null This script gets some values from the system (whether ...
1
vote
0answers
249 views

How to obtain X.509 certificate on solaris based server? [closed]

I have a Solaris based T5220 server. I'd like to install an x.509 certificate. What is the procedure to install this certificat? Does that procedure differs from one server to another? i.e. is it ...
0
votes
3answers
893 views

What does sudo su work but su does not? [duplicate]

I have tried this on Fedora and on Ubuntu. kshitiz@kshitiz:~$su su: Authentication failure kshitiz@kshitiz:~$sudo su root@kshitiz:/home/kshitiz# I am entering the same password in both the cases. ...
0
votes
2answers
11k views

SSH authentication using gssapi-keyex or gssapi-with-mic (publickey not permitted)

My company has disabled SSH public key authentication, therefore I have to manually enter each time my password (I am not suppose to change /etc/ssh/sshd_config). However gssapi-keyex and ...
0
votes
3answers
850 views

SSH public key authentication works on LAN and not from WAN

I've setup my SSH server to use public key authentication. When I connect to my server on local network, it authenticates. But it doesn't when I connect over the internet. I don't think the problem ...
0
votes
2answers
206 views

Ssh 'access denied' from one host but not the other

Consider the following scenario: I have a Debian-ssh-server setup and exposed it to the internet for some time for testing. Also I have an account which is basically configured as root in the sudoers ...
0
votes
2answers
68 views

How to set Linux to ask for authentication when running potentially dangerous commands?

I've faced times when I accidentally ran dangerous commands and lost all my data. How do I set Linux to ask for current user password or root user password when running potentially dangerous commands ...
0
votes
1answer
97 views

apt-get update and package authentication

Sometimes when you try to apt-get install a program, you get a warning message about how some packages couldn't be authenticated. Doing an apt-get update will sometimes fix the problem, but sometimes ...
0
votes
1answer
17 views

Smart Card local authentication

Is it possible to use smartCard for local authentication ? So that, rather userID/password combination, an user can authenticate himself by inserting card and by providing it's PIN number. RDesktop, ...
0
votes
1answer
33 views

xscreensaver sometimes unlocks locked screen automatically, after returning from monitor standby mode

I am using xscreensaver to lock my screen. Additionally to that, my monitor goes to "standby" , i.e turn display off, after 30 minutes of inactivity. It has happened to me twice now, that I have ...
0
votes
2answers
651 views

Authentication very slow (both with ssh and su)

I'm having a problem on one of our production servers where the login attempts become progressively slower as time passes. After roughly 5 days it becomes so slow that some critical processes/cron ...
0
votes
1answer
39 views

Howto Tell if a System authenticate with password only or through PAM

If my computer has the pam package installed and has the directory /etc/pam.d/sshd, does it mean for sure when I ssh to my computer, I am authenticated through pam modules? The /etc/pam.d/sshd looks ...
0
votes
2answers
89 views

In Fedora 17 kde I don't know user or password to authenticate printer installation

I am trying to set up a new computer with Fedora 17 and KDE both working ok. I have plugged in an HP laser USB printer, and am trying to set it up. I enter "system settings -> printers" from the KDE ...
0
votes
1answer
1k views

Setting up the superuser password for the first time

How can I set up the super user password for the first time in Zorin OS, since the installer didn't ask me to provide one. I have experience with Fedora and openSUSE, but they asked me for the ...
0
votes
1answer
252 views

Sendmail relay without authentication

I have an issue:when the email is sent from an address other than 127.0.0.1 the authorization is required even if ip is on the same machine. How can I avoid to make request authorization for a given ...
0
votes
1answer
1k views

Unable to login to my server using ssh

Yesterday I was migrating to my new server, needed to use rsync, I created a RSA key, so that rsync could connect, I saw an error that says add to trusted key in location x I didn't have that location ...
0
votes
1answer
13 views

SASL authentication fails when called from crontab

When I run mbsync from the command line it works fine. But if mbsync is run from the crontab, mbsync fails with this error "Error: SASL(-1): generic failure:". My guess is that mbsync's SASL ...
0
votes
0answers
49 views

Ubuntu remote desktop user using a key-based login

I have an Ubuntu 14.04 LTS set up and I have a which authenticates using a private key to connect via PuTTY. Is it possible to use remote desktop from windows 7 (xrdp) with key-based login?
0
votes
1answer
33 views

Authconfig doesn't find all ldap groups

My (soon to be) admin account is in two groups: # ldapsearch \ > -v \ > -H ldaps://localhost:636 \ > -D "${l_dirmgr}" \ > -w $(cat ${f_dirmgr_passphrase}) \ > -b ...
0
votes
0answers
80 views

While trying to ssh, pam_ldap always sends the password “INCORRECT” causing bind to fail

I installed ldap-auth-client nscd ldap-utils on lubuntu 14.04 running on a banana pi. I can successfully bind as the user using ldapwhoami, but I cannot log in via ssh: Auth.log: Oct 21 02:12:05 ...
0
votes
0answers
50 views

Why on my Linux PPPoE connection displays sometimes authentication failure?

Here is my log: Oct 18 09:51:52 -desktop pppd[2764]: Plugin rp-pppoe.so loaded. Oct 18 09:51:52 -desktop pppd[2766]: pppd 2.4.5 started by root, uid 0 Oct 18 09:51:52 -desktop pppd[2766]: PPP session ...
0
votes
0answers
48 views

pam.d password hardening: nullok

In most all pam.d documentation or linux distributions that I saw, the recommend "secure" configuration for password is the following: password required pam_unix.so sha512 shadow nullok ...
0
votes
0answers
52 views

log freeradius ip address with username

i configured a mikrotik with linux(freeradius+rsyslog+mysql) to authenticate and log users activity. now i want to log users visited urls, but only ip addresses of users and visited urls are logged. ...
0
votes
1answer
83 views

Authenticating To Multiple LDAP Servers

Owing to a corporate strategy I am moving human user authentication from an implementation of LDAP locally to a centralized Active Directory domain. The problem is that we have a tightly constrained ...
0
votes
0answers
51 views

authenticate url with asked credentials

there is a URL http://server, when I open this url it ask for username and password (.htaccess authentication), this URL works fine in browser. This is the webpage not the browser which ask ...
0
votes
0answers
54 views

Samba 3 file sharing access permission problem onWindows

I'm trying to set permissions on a server RHEL v5 whith Samba v3. The configuration of /etc/samba/smb.conf is [project] valid users = proyecto, admin writeable = yes ...
0
votes
1answer
365 views

Creating MySQL database and user without password

I am building a set of bash scripts which basically prepare apache virtual hosts, git repositories and other stuff on a cloud server. So far so good, everything is working, but a big problem occurred: ...
0
votes
1answer
125 views

“NOT AUTHENTICATED” warning trying to install rdesktop on almost-fresh Mint 16 install

Linux Mint 16 (Ubuntu-based) 32-bit running on a netbook. Installed Wine and Skype, and all updates. Went to install rdesktop (typed rdesktop in the gnome menu search, chose 'install rdesktop'), and I ...
0
votes
0answers
48 views

Hit “sasl_decode error=-1” while sending mail via sendmail server on RHEL

Having installed sendmail and openwebmail on RHEL workstation 6.3, I can send email through webmail(cgi-bin/openwebmail/openwebmail.pl), but failed to interact with sendmail server in Perl script as ...
0
votes
0answers
22 views

KRB5 auth with samba

I'm attempting to setup a samba share on RHEL6 for a group of users. There are quite a few of them with very little technical experience so having them SSH in to reset smbpasswd is asking a lot. We ...
0
votes
0answers
109 views

Get user login name and address on bad login attempt [Dovecot]

Background I am trying to develop a method to ban users who exhibit strange behavior when logging into Dovecot by obtaining their POP-ID/login name and IP address. I want to send that information to a ...
0
votes
1answer
182 views

Authentication failure for FTP server [duplicate]

I followed this link to install ftp server. And also added ftp user(ftpuser) and also added ftp password(1234567). But when I am using this password in any wordpress site or any ftp software such as ...
0
votes
1answer
369 views

Apache mod_auth_kerb: “Key table entry not found”

I want to use the Apache Module "mod_auth_kerb" to implement SSO for a Webapplication. With the following config: <VirtualHost 10.5.3.200:443> #Proxy <Proxy *> Order deny,allow Allow ...
0
votes
2answers
3k views

vsftp user authentication problems

I configured my ftp user's home dir to /var/www and set a password but I cannot login with ftp 127.0.0.1, it keep giving me 530 Login incorrect. Why is this? I'm sure I have typed the password right. ...
0
votes
1answer
2k views

How to configure Samba to use Windows's login ID?

I'm trying to access the Linux share folder from Windows using Windows's domain authentication. I come across the integration of Windows Active Directory into Samba on a Linux box, thus I have this ...
0
votes
0answers
192 views

Log in using a 4-digit PIN, with a password fallback

Windows 8 has this feature where you can log in with a 4-digit PIN which is really convenient. Is there such a thing in Linux? In Windows 8, you get five attempts to log in using the PIN, then it ...
0
votes
0answers
280 views

Sendmail authentication

when I try to send email from my new system: Distributor ID: Scientific Description: Scientific Linux release 6.4 (Carbon) Release: 6.4 Codename: Carbon with sendmail Version 8.14.4 I have this ...
0
votes
0answers
117 views

How to determine the sequence of ordering certificates by browser?

I did a Mutual Certificate Authentication implementation with OpenSSL and Apache Web Server on CentOS platform. To simple explanation see this diagram: ---------- | ...
0
votes
1answer
666 views

Certificate extensions in generating and signing certificartes using openssl

References: SSL Configurations for Intermediate certificate How to add my own created certificate authority to system trusted repositories Why I can't find a page which tell me what's the kind of ...
0
votes
1answer
59 views

Where to put generated certicate for user [duplicate]

I was following this tutorial and I want to implement mutual authentication between server and client, where server and CA (certificate authority) is the same thing. I reached the last step and I ...
0
votes
1answer
254 views

Why is my ssh connection unauthorized although I have updated my key on the remote machine?

On my local machine I have a public key stored in .ssh/id_rsa.pub To be able to log in to a remote machine I copy this key using ssh-copy-id: ssh-copy-id user@remote-host On the remote host, I ...
-1
votes
1answer
52 views

Password length and complexity

I am using CentOS and I want to set the minimum password length, minimum password expiry , maximum password expiry and password complexity in my system. I have looked over some tutorials to change ...
-1
votes
1answer
120 views

How do i deal with HP Device Manager requiring authentication to remove print jobs?

I have Fedora 20, with Gnome 3 Classic, and have installed Okular to read and, especially, print pages from, .pdf files. I want to print only a few pages, but in my frustrated attempts to set this up ...