Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

learn more… | top users | synonyms

0
votes
0answers
11 views

Can a Linux server that authenticates against an Active Directory accept public/private keys for passwordless login?

I have a Linux server that authenticates users against an Active Directory. Now interactive logins require username and password and automatic login requires a keytab (Kerberos) for passwordless ...
1
vote
1answer
1k views

Apache mod_auth_kerb: “Key table entry not found”

I want to use the Apache Module "mod_auth_kerb" to implement SSO for a Webapplication. With the following config: <VirtualHost 10.5.3.200:443> #Proxy <Proxy *> Order deny,allow Allow ...
2
votes
1answer
39 views

SSH: display warning when using (deprecated) ssh-dss key

With the 7.0 release, OpenSSH disabled ssh-dss keys. The not-so-recommended workaround is to explicitly re-add DSA key support to .ssh/config, which will eventually be dropped by a later OpenSSH ...
0
votes
0answers
12 views

Async or Parallel PAM Authentication

I did a long google search on PAM authentication. From various sources what i learned is There is a PAM Call stack, which loads config files from different sources. Based on order of modules,its ...
1
vote
1answer
25 views

Debian package's files authentication

I know that dpkg keeps md5sums of configuration files for each package installed, so it can tell whether they are changed or not when upgrading. Does it keep md5sums for regular (non-configuration) ...
3
votes
0answers
12 views

Changing LDAP server preference on Solaris 10

I've recently inherited a new environment running Solaris 10 and I was looking for information on how to change the LDAP server preference on an LDAP client, namely through modifying the ...
0
votes
2answers
9k views

vsftp user authentication problems

I configured my ftp user's home dir to /var/www and set a password but I cannot login with ftp 127.0.0.1, it keep giving me 530 Login incorrect. Why is this? I'm sure I have typed the password right. ...
0
votes
1answer
53 views

ssh authentication and remote command output's redirection

I need to run a remote capture on a host via ssh and to authenticate twice, but the second prompt is being redirected. ssh -t user@host "sudo tcpdump -s 0 -n -w - -U -i eth0 not port 22" > ...
0
votes
0answers
12 views

Can Linux ldap users still available if ldap server is unlinked?

I have a Linux with some users have their password in /etc/shadow and other authenticate through LDAP. Is there a way to make user that have their password stored on ldap continuing to be available ...
-1
votes
1answer
20 views

Ask password in window mode after sudo or other command line operations?

Was seen in movies, that after command line operations, the password was asked in separate GUI window. From my (small) experience, password, required from command line, was always asked in command ...
3
votes
0answers
26 views

exists a “two-factor authentication” for sudo, if not how to make one anyway?

tl;dr normaly to gain root priviledges via sudo requires a special user account and the use of its passphrase as means to authetication. Due to keylogging/replay (in X.org session) attacks, I would ...
2
votes
1answer
34 views

Is it possible to have a daemon run a process as another user WITHOUT having a superuser daemon?

I'm working on a project at the moment where I have a daemon that needs to run a process as another user. I would like the daemon to not run as root if possible. However, i'm struggling to figure out ...
-1
votes
1answer
25 views

Linux + LDAP/ActiveDirectory: Can't create a private group for the user like “username:username”

My apologies first for not phrasing this question very well, because it's difficult to Google. (Try finding a Google answer with the terms "self user group" in it.) Normally, with PAM in Linux, when ...
-1
votes
2answers
32 views

MariaDB: Create and grant a new user using unix sockets plugin (passwordless)

I just installed MariaDB on Kubuntu 15.10. I am able to log in with the root user via the plugin that authenticates the user from the operating system. (This is new to me, so I am learning about it ...
3
votes
1answer
554 views

How to stop sudo PAM messages in auth.log for a specific user?

I am using Zabbix for monitoring my environment and zabbix_agentd executes as user zabbix one custom script every 60 seconds; it uses sudo to run this script as root. In /var/log/auth.log I see every ...
0
votes
2answers
124 views

Unable to login with SSH-RSA key

This post is following this question : Authentication refused: bad ownership or modes for file /var/git/.ssh/authorized_keys . The issue as exposed there is solved (about files modes of the ...
1
vote
1answer
193 views

/private/var socket not created with postfix/dovecot sasl

I'm currently running into a problem I have with my email server. I try to setup Postfix and Dovecot with SASL authentication but I get the following error when I connect with telnet (port 25) to the ...
3
votes
2answers
657 views

Multiple PCs network centralized system authentication

(I couldn't really choose an accurate title as I don't know exactly what the feature I'm looking for is called. Sorry about that. I hope that the following lines may clear this aspect.) I own a dozen ...
2
votes
1answer
782 views

LDAP Authentication on OpenBSD

I'm trying to get an OpenBSD server to authenticate users using the same LDAP server the rest of my home network uses. While 'getent password' lists the users from the LDAP server as expected, I ...
2
votes
1answer
54 views

How to allow unauthenticated logins over ssh on FreeBSD?

I created an account ckurs on my FreeBSD 10 workstation. This account uses a custom shell-script as a login-shell that attaches the user to a tmux-session in read-only mode. I have sufficiently ...
1
vote
1answer
32 views

Apache 2.4 basic auth don't work

i have a problem with basic auth to apache 2.4, i have this line: <VirtualHost *:80> ServerAdmin email@email.com DocumentRoot /var/www/html/foo ServerName my.domain.com ...
15
votes
5answers
6k views

Gmail blocking mutt

When I try to log in to gmail with mutt, it flashes a quick Webalert with a url, something like accounts.gmail.com or something. It's too quick for me to see or copy it. Then it says Login failed. ...
2
votes
1answer
84 views

Unknown Authz provider with Shibboleth on Apache 2.4

Currently I am dealing with the migration of a PHP web application from Apache 2.2 to Apache 2.4. This application is SSO-enabled, by using Shibboleth in order to manage the authentication process. ...
3
votes
1answer
229 views

SSH keeps skipping my pubkey and asking for a password

Everytime I ssh onto my remote server I need to provide the password. I copied my public key (id_dsa.pub) to the remote server using: ssh-copy-id -i id_dsa.pub user@server I checked it was ...
1
vote
0answers
23 views

Samba Share to Require Password Debugging

I've recently set up Samba on one of my CentOS 7 servers and it works fine, it allows anyone to access it as long as they are on the LAN. Now I need to set up a second share that can only be accessed ...
0
votes
2answers
46 views

apache basic authenticaion

I have enabled basic authentication for one of the directories on website. The code has been added in the httpd.conf file. The user and passwords have been added in the /etc/passwd file. The same ...
2
votes
1answer
35 views

manually redirecting X output through ssh

I have a remote server, on which I am able to log in with ssh. However there is no home directory for my user. When I try to ssh -X to that server, ssh tries to put a cookie into ~/.Xauthority which ...
0
votes
2answers
120 views

How can I set up centralized home directories and user authentication using LDAP and NFS?

I am trying to configure my server to authenticate users using LDAP and save their home directories on a NFS-Directory, also located on the server. i.e.: I share a directory on my server: /nfsexport ...
1
vote
0answers
38 views

User creation during authentication

I'm working with OpenBSD 5.6 and the goal is that I need to create user when he or she tries to authenticate with specific password. I've written a script for this purpose and everything goes ok but ...
1
vote
1answer
49 views

telnet accessing website with authentication

I am trying to access httpbin.org with basic authentication. I must enter a username and a password. Using telnet in the command terminal(linux) I execute at least : telnet httpbin.org 80 HEAD ...
2
votes
4answers
152 views

Authentication failure on Amazon Linux

There is an authentication failure when I'm trying to enter password for any of my accounts. I am logged in using ssh to my AWS EC2 instance. After a while I checked the privileges to files that ...
1
vote
3answers
285 views

Pamtester automate password testing

We have a system image which uses a default password for root. This should be changed, though I have a feeling not all users do this. I know I can test login with pamtester: # pamtester system-auth ...
0
votes
2answers
405 views

“NOT AUTHENTICATED” warning trying to install rdesktop on almost-fresh Mint 16 install

Linux Mint 16 (Ubuntu-based) 32-bit running on a netbook. Installed Wine and Skype, and all updates. Went to install rdesktop (typed rdesktop in the gnome menu search, chose 'install rdesktop'), and I ...
4
votes
2answers
38 views

Understand the PasswordAuthentication in sshd configuration

I have an OpenSSH server which supports only password authentication: [martin@ ~]$ ssh -v 10.10.1.183 -l root OpenSSH_5.2p1 FreeBSD-20090522, OpenSSL 0.9.8k 25 Mar 2009 debug1: Reading configuration ...
2
votes
2answers
3k views

Why do my sshd logs show many tries on invalid ports?

My ssh daemon is setup to listen on port 2221. I have also disabled root login from ssh. I don't understand why in auth.log I see attempts to log on other ports (example with 4627 here). May 17 ...
0
votes
1answer
65 views

Enable sssd caching and linux to honor that cache on CentOS 5

I wanted to enable sssd caching on CentOs and not to use nscd caching, because sssd itself is giving that option. However, authconfig is not giving the option for --enablecachecreds even on the ...
1
vote
0answers
167 views

When connecting my WiFi, how to open browser automatically?

I made my Linux computer providing WiFi access. This is only to browse its local website. As one does for a captive portal, I want to force the browser to display and direct to my homepage : - you ...
3
votes
1answer
35 views

How to log messages from a pam module?

The problem I am trying to solve is that I want to know if a certain PAM config file is being used or not. The latest version of IBM MQ (V8) provides a PAM file /etc/pam.d/ibmmq. We're ...
0
votes
0answers
26 views

GUI Authentication Requiring a Different User Auth

A few weeks ago a colleague signed into my Fedora 22 workstation. He too is a group admin. Ever since then whenever I attempt to install or unlock the "Authentication Required" modal requires his ...
5
votes
2answers
30k views

Suddenly, I Can't login with correct password (greeter & tty)

This might be a duplicate of other password related questions but it's somehow eccentric. I have 3 accounts in my Ubuntu 12.10 system (one standard and two administrators). One of the administrator ...
1
vote
1answer
125 views

Valid root/user passwords not working on EC2

There is an authentication failure when I'm trying to enter password for any of my accounts after an update using yum. My authentication got broken, while everything else works. The updates were ...
4
votes
4answers
689 views

Is the username in Unix case sensitive?

Is ssh abc@servername different from ssh Abc@servername? Does the case of the username matter in Unix? My user authenticates via LDAP.
3
votes
2answers
259 views

Why does my SD card need authentication to access?

I'm running Ubuntu 14.04 on a Toshiba Chromebook 2 via crouton. I recently reformatted a 256GB SD card that I keep in my chromebook at all times. My problem is that every time I try to access my SD ...
1
vote
1answer
109 views

Dogtag CA after installation

After Dogtag 10 installation(step by step by https://www.youtube.com/watch?v=C3eElJAz7lU) when I open Admin (https://localhost.localdomain:8443/ca/agent/ca/) I get following error Problem ...
1
vote
1answer
105 views

Sendmail issues “530 Authentication required” error message when authinfo is supplied

sender_email - email address that does not exist, but must be used as FROM address, because receiver host rejects emails from other emails. receiver_email - email that is supposed to receive the sent ...
9
votes
2answers
25k views

How to telnet via proxy authentication?

I am behind a proxy server in my college. It uses a simple username and password authentication. And i connect to the proxy server to port 3128. now i want to telnet simply to say any website on the ...
5
votes
1answer
3k views

Command line printing with a Samba printer requiring authentication

Is there a way to print to a Samba printer requiring authentication by providing the credentials on the command line (e.g., with lpr)? I managed to store the credentials in GNOME Keyring and when I ...
0
votes
1answer
58 views

Linux: root filesystem via network (with authentication)

I try to create a linux computer which loads its root filesystem from the network. This currently works with NFS, but unfortunately it is not very secure. The network is just a home network, which ...
1
vote
0answers
1k views

Adding CentOS 7 to Active Directory

I am having a hard time adding a CentOS 7 machine to my domain (Active Directory 2012 running in Windows 2008 mode). I am using realmd to join the machine to the domain. Here is what I have checked so ...
3
votes
2answers
95 views

Why user without any PASSWD entry in sudo config has to authenticate every time?

Consider this sudo config for two users: mary ALL = (ALL) NOPASSWD: /bin/ls, /bin/cat bob ALL = (ALL) PASSWD: /bin/sort Now, when user mary executes any command not in the list she has to ...