Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

learn more… | top users | synonyms

0
votes
0answers
29 views

Adding CentOS 7 to Active Directory

I am having a hard time adding a CentOS 7 machine to my domain (Active Directory 2012 running in Windows 2008 mode). I am using realmd to join the machine to the domain. Here is what I have checked so ...
2
votes
2answers
60 views

Why user without any PASSWD entry in sudo config has to authenticate every time?

Consider this sudo config for two users: mary ALL = (ALL) NOPASSWD: /bin/ls, /bin/cat bob ALL = (ALL) PASSWD: /bin/sort Now, when user mary executes any command not in the list she has to ...
1
vote
1answer
877 views

Apache mod_auth_kerb: “Key table entry not found”

I want to use the Apache Module "mod_auth_kerb" to implement SSO for a Webapplication. With the following config: <VirtualHost 10.5.3.200:443> #Proxy <Proxy *> Order deny,allow Allow ...
0
votes
1answer
16 views

persisting multi-factor user data for custom pam authentication in CentOS 7

I am designing n-factor authentication for CentOS 7 using a custom PAM module. When the user tries to SSH, they will be texted a pin code, and be prompted to enter the pin. Where should I store the ...
1
vote
1answer
82 views

Installing Kali 2.0 on virtual box failled

I'm using VirtualBox 4.3.22 and I'm trying to install Kali 2.0. After the installation progress is complete and I reboot, I have to enter my username and password as usual, e.g username newbie; ...
3
votes
2answers
37 views

How to stop sudo PAM messages in auth.log for a specific user?

I am using Zabbix for monitoring my environment and zabbix_agentd executes as user zabbix one custom script every 60 seconds; it uses sudo to run this script as root. In /var/log/auth.log I see every ...
2
votes
1answer
60 views

n-factor SSH authentication for CentOS 7

How can I enable (and require) n-factor authentication for all SSH connections to a CentOS 7 server? I have read about Google Authenticator, which provides two factor authentication. But that is ...
0
votes
2answers
7k views

vsftp user authentication problems

I configured my ftp user's home dir to /var/www and set a password but I cannot login with ftp 127.0.0.1, it keep giving me 530 Login incorrect. Why is this? I'm sure I have typed the password right. ...
8
votes
1answer
102 views

How to add additional steps to login?

What I would like to achieve is an interactive program that runs either before or after asking the user for the password, but won't handle over the access to the computer unless it exited with ...
1
vote
1answer
26 views

Mutt authentication fails because username string is malformed

I'm trying to set up mutt to work with our internal email server. Our user names have the form user@domain.lan But when mutt tries to authenticate, it appends the mail server's url to the username ...
-1
votes
1answer
54 views

Apache behind proxy: bypass Auth Basic for some ip

I need bypass basic auth to some ip, Apache is 2.4 and is behind haproxy, i have inserti this into Document Root section: <Directory /path/to/webroot> AuthUserFile /etc/apache2/.htpasswd ...
0
votes
0answers
14 views

Polkit Accepting Nothing

Today I switched from Windows to Fedora 21--Fermi Linux using KDE specifically--and I have a fair knowledge of how to do navigate my way around and install things via command line, but when it's ...
0
votes
0answers
21 views

Webmin: Cannot login through nginx reverse proxy

I've created a reverse proxy for webmin through nginx to run webmin at [site domain]/webmin instead of port 10000 ([site domain]:10000). When I go to [site domain]/webmin, the login page shows up as ...
3
votes
1answer
43 views

Disabling ssh password authentication does not work on my debian VPS

I have a Debian 7 VPS setup. I just enabled SSH Key authentication and disabled password authentication but the disabling did not work. When I attempt to SSH into my VPS, it prompts me for my SSH Key ...
1
vote
1answer
66 views

Cent OS 6.6 enable Plaintext authentication on dovecot and postfix

A customer of mine wants to use gmail as their default mail client but I have rolled forward to a new CENTOS server version (6.6, ok it's not "new" new) and the dovecot and postfix settings are ...
7
votes
3answers
492 views

login and su internals

I am trying to understand how user permissions work in Linux. The kernel boots and starts init as root, right? Init then runs startup scripts and runs getty (agetty), again as root. Agetty just reads ...
1
vote
0answers
15 views

Authentication shared over multiple systems [closed]

TL;DR I'm looking for a software that allows authentication shared over multiple systems to be used for authorizing access to all devices connected to a network. Any advice, recommendation inclusive ...
0
votes
1answer
14 views

ssh-copy-id doesn't copy to non-default location

Does ssh-copy-id recognize if the authorized_keys file is not in ~/.ssh? I am storing my authorized keys file in a different folder, which I have configured as: AuthorizedKeysFile ...
0
votes
1answer
219 views

Setting up connection to WPA2 Enterprise (PEAP/MSCHAPv2) with two-level certificate

For a long time, I have been able to use NetworkManager + wpa_supplicant as configured in Debian 7 to connect to a secure wireless at work (which is WPA2 Enterprise, with PEAP + MSCHAPv2 ...
0
votes
0answers
73 views

firefox 38 hanging with corporate proxy and winbind?

I seem to have broken firefox 38 and it is unusable. It just hangs and freezes for long periods of time ranging from a few seconds up to infinity - usually in steps at the authentication prompt for ...
52
votes
3answers
13k views

Why is there a big delay after entering a wrong password?

I notice a weird (well, according to me) thing about passwords. For example, if I type an incorrect password during login, there will be a few seconds' delay before the system tells me so. When I try ...
8
votes
3answers
354 views

Trap: can't su as root, can't change group to wheel, ssh as root prohibited

Is this a trap? I made these steps in FreeBSD 10: 1) ssh as root prohibited 2) logged as user 3) su as root 4) as root chsh changed name of user "user" to "luser" 5) exit from ...
1
vote
0answers
62 views

Captive portal detection, popup implementation?

Based on hostapd, I m building a captive portal. - My Linux Machine provides a Wifi access. - iPad's and Android clients-tablets connect this Wifi. Generally, any client OS check if a url is ...
0
votes
1answer
49 views

Linux Mint, is there a captive-portal software for?

Does Linux Mint 17+ has a software for doing captive portal? Amongst the provided list here, it seems none is mint-compatible.
0
votes
0answers
41 views

When connecting my Wifi, open browser automatically. How?

I made my linux computer providing a wifi access. This is only to browse its local website. As one does for captive portal, i aim to force the browser display and direct to my homepage : - you choose ...
0
votes
1answer
76 views

Open a webpage and enter a username and password via CLI

Ultimately, I want to use a bash script to automatically open and log into a website. I was wondering if I could use the curl or elinks commands to log in to a website and then somehow export that ...
0
votes
1answer
25 views

Install script - sudo authorisation compatibility?

I am currently updating a few scripts, and am planning on releasing some useful ones so others can use them (so they need to work across a wide range of machines without crashing, and without breaking ...
1
vote
2answers
201 views

Pamtester automate password testing

We have a system image which uses a default password for root. This should be changed, though I have a feeling not all users do this. I know I can test login with pamtester: # pamtester system-auth ...
0
votes
1answer
127 views

Why does my SD card need authentication to access?

I'm running Ubuntu 14.04 on a Toshiba Chromebook 2 via crouton. I recently reformatted a 256GB SD card that I keep in my chromebook at all times. My problem is that every time I try to access my SD ...
16
votes
2answers
2k views

SSH ignores characters after correct password string?

Remote machine 10.10.10.1 has password "asdFGH12" for user named "user". I'm able to log in even if I type in password "asdFGH12dasdkjlkjasdus" or any other characters after the "asdFGH12" string. $ ...
4
votes
5answers
21k views

vsftpd fails pam authentication

Moving a tried-and-true vsftpd configuration onto a new server with Fedora 16, I ran into a problem. All seems to go as it should, but user authentication fails. I cannot find any entry in any log ...
2
votes
2answers
63 views

Add a user wthout password but with SSH and public key

I want to add a user to Red Hat Linux that will not use a password for logging in, but instead use a public key for ssh. This would be on the command line.
29
votes
7answers
13k views

Can I find out which ssh key was used to access an account?

Is it possible to find out which ssh key was used to access an account? I have an account on a server that I let several (trusted!) people have access to via ssh. I'd find it useful to be able to ...
3
votes
2answers
823 views

Where does Samba 4 store user passwords?

Where does Samba 4 store user passwords? How can I import my password hashes from Samba 3 in Samba 4? I am using my own LDAP server with samba 3, and the password hash is stored within the ...
0
votes
3answers
154 views

Get MAC of a client request?

I have a network with 20 raspberries (clients) and 1 server. I'd like to check MAC of client request, is that possible ? Further, possible without being known (nor visible) by the client ? NB : I ...
3
votes
3answers
940 views

Authentication refused: bad ownership or modes for file /var/git/.ssh/authorized_keys [duplicate]

EDIT The issue as exposed here is solved (about files modes of the .ssh folder. But an other issue persists so I create a new question : > Unable to login with SSH-RSA key I can no longer ...
0
votes
1answer
60 views

Unable to login with SSH-RSA key

This post is following this question : Authentication refused: bad ownership or modes for file /var/git/.ssh/authorized_keys . The issue as exposed there is solved (about files modes of the ...
2
votes
0answers
103 views

Wifi with WPA2-EAP MS-CHAPv2 authentication (username and password) during Debian installation

I am currently attempting to install Debian on my laptop computer. During the network configuration stage, I am prompted to "enter a passphrase for WPA/WPA2 PSK authentication". Unfortunately, I am on ...
0
votes
1answer
191 views

is iptables broken on my raspberry-pi? how to fix?

I am getting some person(s) trying to brute force my ssh, from multiple ip addresses (small sample) : May 22 19:50:02 rpi sshd[1272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
9
votes
3answers
3k views

Gmail blocking mutt

When I try to log in to gmail with mutt, it flashes a quick Webalert with a url, something like accounts.gmail.com or something. It's too quick for me to see or copy it. Then it says Login failed. ...
2
votes
1answer
48 views

Configure OpenSSH server not to require password *or* key for a particular user

For the purpose of a training session, I'd like to make it possible for a particular user to connect without requiring a password or key-based authentication. I do not know the IPs or other data of ...
-1
votes
1answer
46 views

How can i get out of the authentication screen and shutdown? [closed]

I decided to install linux ,dualbooted, on my laptop but ran in some issues . I installed several corrupt installs causing me to allocate most of my harddrive ,at least the parts that do not contain ...
1
vote
2answers
2k views

What is difference between pbrun and sudo command?

What is difference between pbrun and sudo command? I have seen people executing pbrun sudo su - what this means? I know su -, it will try to switch to root user. What speciality pbrun gives to sudo ...
1
vote
1answer
138 views

Simple Radius authentication

I'm looking into using Radius as an authentication server for a few Ubuntu servers when accessing through SSH. I have tried using libpam-radius-auth but it doesn't work quite as I need. My goal is to ...
5
votes
3answers
15k views

How to configure for an Authenticating Proxy Server

My work proxy server requires authentication with the Microsoft AD domain user credentials. Everybody knows how it works: If you log in on a Windows workstation, your "Internet Explorer" browser based ...
0
votes
1answer
134 views

what does pam_env.so really do?

Having the following line: auth required pam_env.so Documentation happily says "This module is required—it must run successfully for authentication to proceed." ...
10
votes
1answer
491 views

D-Bus authentication and authorization

I'm trying to set up remote access to D-Bus, and I don't understand how authentication and authorization are (not) working. I have a D-Bus server listening on an abstract socket. $ echo ...
2
votes
1answer
50 views

Externally authenticate user within PAM session/PAM session within PAM session

Is there a way of properly authenticating a user from within a custom PAM session? I am currently writing my own PAM authentication module which allows the user to login via an external token. This ...
1
vote
1answer
78 views

How to get the authentication status from the last PAM module run

If I have the following PAM stack: auth required default_pam.so auth requisite my_custom_pam.so .... How do you obtain the authentication status from the last/previous PAM module run for use in ...
1
vote
3answers
139 views

Why is gksu asking me for root password and not my password?

On one of my systems, I'm running Gentoo Linux and I've installed x11-libs/gksu-2.0.2-r1. I've disabled the root account using sudo passwd -dl root and I want to be able to run GUI apps which need ...