Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

learn more… | top users | synonyms

52
votes
3answers
12k views

Why is there a big delay after entering a wrong password?

I notice a weird (well, according to me) thing about passwords. For example, if I type an incorrect password during login, there will be a few seconds' delay before the system tells me so. When I try ...
8
votes
3answers
340 views

Trap: can't su as root, can't change group to wheel, ssh as root prohibited

Is this a trap? I made these steps in FreeBSD 10: 1) ssh as root prohibited 2) logged as user 3) su as root 4) as root chsh changed name of user "user" to "luser" 5) exit from ...
-2
votes
0answers
22 views

Captive portal splash/login page, what is the norm? [on hold]

Ok, let s plan a captive portal. Allright, my Wifi point is done. My popup should appear, e.g. on iPad. But but but... Where should I place this page? how to name it ? What are the guidelines ?
1
vote
0answers
12 views

Captive portal detection, popup implementation?

Based on hostapd, I m building a captive portal. - My Linux Machine provides a Wifi access. - iPad's and Android clients-tablets connect this Wifi. Generally, any client OS check if a url is ...
0
votes
1answer
15 views

Linux Mint, is there a captive-portal software for?

Does Linux Mint 17+ has a software for doing captive portal? Amongst the provided list here, it seems none is mint-compatible.
0
votes
0answers
14 views

When connecting my Wifi, open browser automatically. How?

I made my linux computer providing a wifi access. This is only to browse its local website. As one does for captive portal, i aim to force the browser display and direct to my homepage : - you choose ...
0
votes
1answer
33 views

Open a webpage and enter a username and password via CLI

Ultimately, I want to use a bash script to automatically open and log into a website. I was wondering if I could use the curl or elinks commands to log in to a website and then somehow export that ...
0
votes
1answer
751 views

Apache mod_auth_kerb: “Key table entry not found”

I want to use the Apache Module "mod_auth_kerb" to implement SSO for a Webapplication. With the following config: <VirtualHost 10.5.3.200:443> #Proxy <Proxy *> Order deny,allow Allow ...
0
votes
1answer
16 views

Install script - sudo authorisation compatibility?

I am currently updating a few scripts, and am planning on releasing some useful ones so others can use them (so they need to work across a wide range of machines without crashing, and without breaking ...
1
vote
2answers
178 views

Pamtester automate password testing

We have a system image which uses a default password for root. This should be changed, though I have a feeling not all users do this. I know I can test login with pamtester: # pamtester system-auth ...
0
votes
1answer
95 views

Why does my SD card need authentication to access?

I'm running Ubuntu 14.04 on a Toshiba Chromebook 2 via crouton. I recently reformatted a 256GB SD card that I keep in my chromebook at all times. My problem is that every time I try to access my SD ...
16
votes
2answers
2k views

SSH ignores characters after correct password string?

Remote machine 10.10.10.1 has password "asdFGH12" for user named "user". I'm able to log in even if I type in password "asdFGH12dasdkjlkjasdus" or any other characters after the "asdFGH12" string. $ ...
3
votes
5answers
20k views

vsftpd fails pam authentication

Moving a tried-and-true vsftpd configuration onto a new server with Fedora 16, I ran into a problem. All seems to go as it should, but user authentication fails. I cannot find any entry in any log ...
2
votes
2answers
52 views

Add a user wthout password but with SSH and public key

I want to add a user to Red Hat Linux that will not use a password for logging in, but instead use a public key for ssh. This would be on the command line.
28
votes
7answers
12k views

Can I find out which ssh key was used to access an account?

Is it possible to find out which ssh key was used to access an account? I have an account on a server that I let several (trusted!) people have access to via ssh. I'd find it useful to be able to ...
0
votes
0answers
76 views

Samba 4 AD or LDAP?

An old Windows AD server is to be replaced with CentOS 6 + Samba 4. The Windows server was used for Windows users authentication and shared files access. However there is a choice to be made in ...
3
votes
2answers
773 views

Where does Samba 4 store user passwords?

Where does Samba 4 store user passwords? How can I import my password hashes from Samba 3 in Samba 4? I am using my own LDAP server with samba 3, and the password hash is stored within the ...
0
votes
3answers
73 views

Get MAC of a client request?

I have a network with 20 raspberries (clients) and 1 server. I'd like to check MAC of client request, is that possible ? Further, possible without being known (nor visible) by the client ? NB : I ...
2
votes
3answers
223 views

Authentication refused: bad ownership or modes for file /var/git/.ssh/authorized_keys [duplicate]

EDIT The issue as exposed here is solved (about files modes of the .ssh folder. But an other issue persists so I create a new question : > Unable to login with SSH-RSA key I can no longer ...
0
votes
1answer
47 views

Unable to login with SSH-RSA key

This post is following this question : Authentication refused: bad ownership or modes for file /var/git/.ssh/authorized_keys . The issue as exposed there is solved (about files modes of the ...
2
votes
0answers
59 views

Wifi with WPA2-EAP MS-CHAPv2 authentication (username and password) during Debian installation

I am currently attempting to install Debian on my laptop computer. During the network configuration stage, I am prompted to "enter a passphrase for WPA/WPA2 PSK authentication". Unfortunately, I am on ...
0
votes
1answer
81 views

is iptables broken on my raspberry-pi? how to fix?

I am getting some person(s) trying to brute force my ssh, from multiple ip addresses (small sample) : May 22 19:50:02 rpi sshd[1272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
0
votes
2answers
6k views

vsftp user authentication problems

I configured my ftp user's home dir to /var/www and set a password but I cannot login with ftp 127.0.0.1, it keep giving me 530 Login incorrect. Why is this? I'm sure I have typed the password right. ...
6
votes
3answers
2k views

Gmail blocking mutt

When I try to log in to gmail with mutt, it flashes a quick Webalert with a url, something like accounts.gmail.com or something. It's too quick for me to see or copy it. Then it says Login failed. ...
2
votes
1answer
45 views

Configure OpenSSH server not to require password *or* key for a particular user

For the purpose of a training session, I'd like to make it possible for a particular user to connect without requiring a password or key-based authentication. I do not know the IPs or other data of ...
-1
votes
1answer
27 views

How can i get out of the authentication screen and shutdown? [closed]

I decided to install linux ,dualbooted, on my laptop but ran in some issues . I installed several corrupt installs causing me to allocate most of my harddrive ,at least the parts that do not contain ...
1
vote
2answers
594 views

What is difference between pbrun and sudo command?

What is difference between pbrun and sudo command? I have seen people executing pbrun sudo su - what this means? I know su -, it will try to switch to root user. What speciality pbrun gives to sudo ...
1
vote
1answer
67 views

Simple Radius authentication

I'm looking into using Radius as an authentication server for a few Ubuntu servers when accessing through SSH. I have tried using libpam-radius-auth but it doesn't work quite as I need. My goal is to ...
5
votes
3answers
14k views

How to configure for an Authenticating Proxy Server

My work proxy server requires authentication with the Microsoft AD domain user credentials. Everybody knows how it works: If you log in on a Windows workstation, your "Internet Explorer" browser based ...
0
votes
1answer
54 views

what does pam_env.so really do?

Having the following line: auth required pam_env.so Documentation happily says "This module is required—it must run successfully for authentication to proceed." ...
10
votes
1answer
238 views

D-Bus authentication and authorization

I'm trying to set up remote access to D-Bus, and I don't understand how authentication and authorization are (not) working. I have a D-Bus server listening on an abstract socket. $ echo ...
2
votes
1answer
40 views

Externally authenticate user within PAM session/PAM session within PAM session

Is there a way of properly authenticating a user from within a custom PAM session? I am currently writing my own PAM authentication module which allows the user to login via an external token. This ...
1
vote
1answer
69 views

How to get the authentication status from the last PAM module run

If I have the following PAM stack: auth required default_pam.so auth requisite my_custom_pam.so .... How do you obtain the authentication status from the last/previous PAM module run for use in ...
1
vote
3answers
84 views

Why is gksu asking me for root password and not my password?

On one of my systems, I'm running Gentoo Linux and I've installed x11-libs/gksu-2.0.2-r1. I've disabled the root account using sudo passwd -dl root and I want to be able to run GUI apps which need ...
0
votes
0answers
57 views

ldap user on samba share

I have two servers: one is ldap and the other is samba. I have an existing user on the ldap server for an ldap client. Now I want to use this user account with samba to give share access permissions ...
0
votes
0answers
56 views

Configure ldap client without yast

I'm configuring an LDAP client in a large number of Suse servers. The only way that I know to do this is using Yast, and this way is slow. I can't find another way. Anyone know another way to do ...
1
vote
1answer
291 views

CUPS not working correctly after Debian Wheezy -> Jessie upgrade because of a faulty libpam

I just upgraded a Debian Wheezy to Jessie, by changing the /etc/apt/sources.lst. If important: I pinned systemd to stay with sysvinit, and after the upgrade I removed the pin. If I now do apt-get ...
0
votes
1answer
34 views

Mixing authentication types in Apache

Currently, I'm using Apache to host my project repos (mercurial) and use Kerberos auth for users to push. The same Kerberos password is used to log in through SSH and there is a LDAP backend for user ...
0
votes
0answers
94 views

Authentication error with apt-get

I am trying to install CppCMS (A C++ network library) on my Debian computer. I have added the repository sources to sources.list file. When I run: $ sudo apt-get source cppcms I get the warning ...
7
votes
3answers
7k views

Allow user1 to “su - user2” without password

I need to allow user martin to switch to user martin-test without password su - martin-test I think this can be configured in /etc/pam.d/su. There are already some lines in that file which can be ...
0
votes
1answer
82 views

Putty not asking for Two Factor Authentication Code

I'm running a CentOS 7 server. So I've installed Two Factor Authentication with Google Authenticator a while back and all was well. However I can't access my server at the moment over SSH. PuTTY and ...
1
vote
1answer
4k views

How to configure Samba to use Windows's login ID?

I'm trying to access the Linux share folder from Windows using Windows's domain authentication. I come across the integration of Windows Active Directory into Samba on a Linux box, thus I have this ...
3
votes
1answer
405 views

recover email from imap account using mailx

I am having problems fetching emails with mailx. My imap account uses ssl/tls connection with normal password authentication on port 993. I don't have any problems sending through smtp though. Here is ...
1
vote
1answer
898 views

Certificate extensions in generating and signing certificartes using openssl

References: SSL Configurations for Intermediate certificate How to add my own created certificate authority to system trusted repositories Why I can't find a page which tell me what's the kind of ...
7
votes
2answers
20k views

How to telnet via proxy authentication?

I am behind a proxy server in my college. It uses a simple username and password authentication. And i connect to the proxy server to port 3128. now i want to telnet simply to say any website on the ...
0
votes
1answer
85 views

Please provide pptpd authentication methods other than chap secrets

I have setup VPN with pptpd service and authentication via CHAP secrets. What other methods are available with pptpd for authenticating users. Any scope of using public keys.
1
vote
1answer
23 views

Directory Server doing lookups on one ldap server and authintication on another ldap server

I have an old Centos Directory Server and a new 389 Directory Server. I don't want to use sssd at the moment so lets keep that suggestion off the table. I do the following my RHEL 6.4 servers: ...
4
votes
1answer
254 views

Adding a system user to an LDAP group with SSSD

Our LDAP server is running RFC 2307 groups (memberuid contains a username, not a DN). With our old nscd/nss_ldap/pam_ldap setup, you could list a non-LDAP user (a system user from /etc/passwd) in an ...
2
votes
1answer
99 views

Locally deny login to users authenticated via LDAP

I have a RedHat Linux server that are is use for more than 1000 users Users names are coming to the server via LDAP protocol, so login authentication is from the LDAP My question: is it possible to ...
1
vote
1answer
65 views

Throttle accounts after failed SSH login attempts

I have to set up a server that will allow remote logins. Obviously security is an issue. In this first pass we are discussing:- Locking a person for 15 minutes if they fail to login correctly three ...