Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

learn more… | top users | synonyms

5
votes
5answers
511 views

Does ssh send the password over the network?

Basically the entire question is in the headline: Does ssh send the password over the network? Presuming of course that login via username and password is used. I'm asking because if ssh doesn't send ...
1
vote
0answers
11 views

Force authentication to use sssd not nslcd

What I did was: vim /etc/sysconfig/authconfig USESSSDAUTH=yes USESSSD=yes FORCELEGACY=no Then: authconfig --enablesssd --enablesssdauth --enablelocauthorize --update ...
1
vote
2answers
12k views

vsftp user authentication problems

I configured my ftp user's home dir to /var/www and set a password but I cannot login with ftp 127.0.0.1, it keep giving me 530 Login incorrect. Why is this? I'm sure I have typed the password right. ...
1
vote
0answers
52 views

postgresql auth against samba active directory

I've recently set up a new Samba4 Active Directory to handle centralized authentication for my small office network. On this server is also a postgresql-9.5 instance, and I'm trying to have it ...
0
votes
2answers
86 views

apache basic authenticaion

I have enabled basic authentication for one of the directories on website. The code has been added in the httpd.conf file. The user and passwords have been added in the /etc/passwd file. The same ...
3
votes
0answers
18 views

Can SSH public key authentication use pam_group?

I'm configuring some servers to use LDAP (via PAM) to authenticate users. Additionally, I use pam_group to add all users to some system groups like audio/video/vboxusers/.... My PAM configuration ...
1
vote
1answer
2k views

Apache mod_auth_kerb: “Key table entry not found”

I want to use the Apache Module "mod_auth_kerb" to implement SSO for a Webapplication. With the following config: <VirtualHost 10.5.3.200:443> #Proxy <Proxy *> Order deny,allow Allow ...
4
votes
3answers
502 views

Disabling ssh password authentication does not work on my debian VPS

I have a Debian 7 VPS setup. I just enabled SSH Key authentication and disabled password authentication but the disabling did not work. When I attempt to SSH into my VPS, it prompts me for my SSH Key ...
1
vote
1answer
417 views

Unknown Authz provider with Shibboleth on Apache 2.4

Currently I am dealing with the migration of a PHP web application from Apache 2.2 to Apache 2.4. This application is SSO-enabled, by using Shibboleth in order to manage the authentication process. ...
1
vote
1answer
72 views

Apache 2.4 basic auth don't work

I have a problem with basic auth in apache 2.4. I have these lines: <VirtualHost *:80> ServerAdmin email@email.com DocumentRoot /var/www/html/foo ServerName my.domain.com <...
1
vote
2answers
700 views

Why is my ssh connection unauthorized although I have updated my key on the remote machine?

On my local machine I have a public key stored in .ssh/id_rsa.pub To be able to log in to a remote machine I copy this key using ssh-copy-id: ssh-copy-id user@remote-host On the remote host, I ...
0
votes
0answers
13 views

Unable to Authenticate PhPVirtualBox Remote host - Firewall off - Auth Off

I am trying to get the most very basic setup running that I can build upon for controlling a remote Virtualbox installation. The setup : Server A : 192.168.1.10 Oracle VM VirtualBox web service ...
0
votes
2answers
28 views

Is there any way to impose user validation with yum?

I am trying to set up a package distribution via yum. Is there any way to restrict who can install the package from the server side (running RHEL 7.1)? I imagine that it is possible by whitelisting ...
0
votes
0answers
24 views

proxy authentication failed but for selected packages only

I have recently installed Ubuntu 14.0.1 version on my machine. I use a proxy server to access internet and for this I have to provide the necessary IP address of the proxy server, port number and my ...
1
vote
0answers
29 views

Encrypt directory on Linux

I need to create an encrypted directory (to be then filled with files and subdirectories) in a Linux ext4 filesystem, accessible to just one user. It should be: visible (just the root) from the non-...
3
votes
1answer
72 views

PAM failing to authenticate sudo, after successfully contacting ssh-agent

Setting up PAM sudo authentication, using ssh-agent, on 14.04.1-Ubuntu server LTS. I'm still unable to successfully authenticate sudo, via the ssh-agent, using PAM. Here are my relevant /var/log/...
1
vote
2answers
658 views

Unable to login with SSH-RSA key

This post is following this question : Authentication refused: bad ownership or modes for file /var/git/.ssh/authorized_keys . The issue as exposed there is solved (about files modes of the ....
0
votes
0answers
26 views

FTP user home directory for LDAP group

My company uses LDAP server for users authentication. We are now planning to add FTP server. The complicated thing is - we need several users belonging to the one group in LDAP have same home (chroot) ...
1
vote
1answer
64 views

Can a Linux server that authenticates against an Active Directory accept public/private keys for passwordless login?

I have a Linux server that authenticates users against an Active Directory. Now interactive logins require username and password and automatic login requires a keytab (Kerberos) for passwordless ...
4
votes
2answers
36k views

Using curl to access basic auth protected website via proxy (polipo)

I am trying to download a file protected via basic auth: curl "http://User:Pass@example.com/blub/bla.bin" This is working fine. As soon as I tell curl to use my locally installed polipo it fails: ...
3
votes
0answers
43 views

How to pass private ssh key via string, not a file?

I have a text of a private key file. I want to connect via ssh to other node, yet the gateway I am in does not provide me with file system access. How to pass a text representation of key and not a ...
2
votes
2answers
2k views

Script to get file from SFTP and run it

We have 5 servers running our code: A, B , C, D and E. From a local machine, we sftp the file to A. Then ssh id@A su - applicationname sftp id@A get <file> bye tar -xzf <file> logout ...
0
votes
0answers
15 views

VNC client with possibility to specify username, and encryption keys

My KVMoIP from ADDER requires connection with username and encryption. The telnet prompt mentions RFB 4.0. None of my Linux clients can do that? I tried vncviewer, xvnc4viewer, and vinaigre, each the ...
0
votes
0answers
16 views

Git + Nginx - Is it safe to have https auth for cloning and pushing to repo, while remove any auth from gitweb block?

I have following nginx configuration on Ubuntu 14.04 to use together with git httpd backend and gitweb to anonymous browse of repo and push/clone with authentication. Is it safe to use such or I ...
14
votes
2answers
27k views

Meaning of “Connection closed by xxx [preauth]” in sshd logs

We have a Windows batch script, which connects automatically to a linux server via PLINK (putty). There is NO public private key authentication, the user and the password are in the script. On our ...
1
vote
1answer
57 views

2 Factor Authentication - ask about token only at first login

I've set up google OTP authentication and RSA key authentication on my server but it's very anoing, after some time, to type OTP from phone every time. I would like to know if there is any possibility ...
2
votes
1answer
65 views

How to restrict su from root to nis clients

We are using NIS services for users login for Unix accounts. We have test machines where users themselves install OS and they get root access. Users are using su from root account to NIS user accounts ...
1
vote
3answers
5k views

Authentication very slow (both with ssh and su)

I'm having a problem on one of our production servers where the login attempts become progressively slower as time passes. After roughly 5 days it becomes so slow that some critical processes/cron ...
0
votes
1answer
20 views

Add a second authentication to user log in

trap '' 2 code=`oathtool --base32 --totp "xxxxxxxxxxxx"` echo -n Enter Code: read -s password echo "" if [ "$password" == "$code" ]; then echo "You are allowed in" else exit fi trap ...
4
votes
2answers
11k views

What is difference between pbrun and sudo command?

What is difference between pbrun and sudo command? I have seen people executing pbrun sudo su - what this means? I know su -, it will try to switch to root user. What speciality pbrun gives to sudo ...
1
vote
0answers
39 views

pam su authentication with RSA token [closed]

We are implementing RSA token authentication in our company and management decide su - should ask for RSA token passcode for individual (listed users) user. So no-one is going to get root password: it'...
3
votes
2answers
162 views

WPA supplicant dropping/disconnecting NIC in hotel wifi

TL;DR WPA Supplicant intermittently fails on my Raspberry Pi 3 when using a USB Wifi dongle. It appears to do this when "reconnecting" to or changing access points in the hotel. WPA GUI states: "...
3
votes
2answers
6k views

Authenticate users via LDAP using nginx

I know how to auth the users via LDAP in apache2: # put the following in the VirtualHost <VirtualHost *:443> ServerAdmin user1@bar.foo.com DocumentRoot /var/www <Directory /&...
4
votes
1answer
778 views

Configuring Apache to Require a Client Certificate

I want to implement mutual authentication (two - way ) with apache web server. References : 1.Failed to sign CSR with the CA root key 2.Firefox error message when adding client certificate ...
6
votes
1answer
1k views

Apache Authorization for the Allowed Users?

I have read the answer to this question: http://stackoverflow.com/questions/4102763/apache-basic-authentication-except-for-those-allowed It helped me understand how to not authenticate some users (...
3
votes
2answers
136 views

How can I CTRL^C out of a password prompt?

Say I started a su command, and I want to cancel it. Control+C doesn't work for su like it does for sudo... I have to finish the prompt (either by getting the password wrong enough times or by ...
2
votes
0answers
19 views

Might any damage have been caused when cancelling the update manager in Linux Mint during an update?

My Linux Mint Update Manager was running an update - a very big one. It was in the middle of downloading package files, and it was taking way too long and I had to stop it, so I clicked Cancel. When I ...
1
vote
2answers
92 views

“SSH Virtual Kiosk”. Does “PermitEmptyPasswords yes” work? - How to make ssh user with empty password, so random users can use it?

How to make properly secure ssh account with empty password for running trusted binary? I'd like to make a kind of "virtual ssh Kiosk" for random users, while limiting "demo app" behind ssh "pseudo-...
1
vote
1answer
2k views

Failed to sign CSR with the CA root key

I'm trying to implement Mutual Certificate Authentication , I have to be the CA and server at the same time , generate certificates and sign them for users. and I'm following this tutorial which is a ...
3
votes
1answer
2k views

Firefox error message when adding client certificate signed by CA

I'm getting this message when I'm trying to add a certificate to Firefox's "your certificate tab". I generated and signed it before by a server which also is a CA. Failed to decode the file. ...
15
votes
3answers
21k views

Allow user1 to “su - user2” without password

I need to allow user martin to switch to user martin-test without password su - martin-test I think this can be configured in /etc/pam.d/su. There are already some lines in that file which can be ...
-2
votes
2answers
39 views

linux + ssh login took time from one server to another

I have a central Linux server (Red Hat version 6.5), and from this server I establish SSH sessions to other servers. To one server the SSH login took around 5 seconds, while to all others it took ...
13
votes
3answers
41k views

I Can't login as root with su command, but I can with SSH

How is it possible that I cannot log in as root by su root or su (I get incorrect password error), but I can log in by ssh root@localhost or ssh root@my_local_IP with the same password? I'm using ...
13
votes
4answers
977 views

Groups differ from the local ones when logging in remotely

We store our users in LDAP, alongside some groups that have meaning across different systems (organizational roles including wheel). There are also groups local to workstations, e.g. audio or video ...
0
votes
0answers
53 views

Authentication required to edit Sudoers - User not listed

I made a small typo in my sudoers file, nothing a simple pkexec can't fix. The problem is that when I added my user with "adduser name" and added "name" to visudo, as well as the root and sudo groups:...
1
vote
2answers
133 views

mounting a CIFS filesystem directly or via fstab

I am encountering a problem in which mounting a remote CIFS server without an fstab entry works, but mounting through fstab does not. The following command works: $ sudo mount -t cifs //w.x.y.z/Home$...
1
vote
1answer
53 views

The most secure Alpine SSHD Configuration

I'm experimenting with Docker's alpine image and OpenSSH. The sshd_config file that ships with alpine has everything commented out by default. I only uncomment Port 22. I assume this is the most ...
0
votes
1answer
125 views

Timeouts with authd on CentOS 7

I am currently trying to augment my mailsystem by allowing servers that received mails from me within the last ten seconds to perform ident lookups. While the needed iptables rules are working ...
2
votes
3answers
2k views

Why does sudo su work, but su does not? [duplicate]

I have tried this on Fedora and on Ubuntu. kshitiz@kshitiz:~$su su: Authentication failure kshitiz@kshitiz:~$sudo su root@kshitiz:/home/kshitiz# I am entering the same password in both the cases.
0
votes
1answer
63 views

Connect to a wireless network as standard user without administrator authentication Linux Mint 17.3

I'm trying to get a standard user on my laptop installed with Linux Mint 17.3 on the wireless. I can get to the internet just fine logged in with an administrator but as soon as i log in with a ...