Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

learn more… | top users | synonyms

3
votes
0answers
13 views

Adding a system user to an LDAP group with SSSD

Our LDAP server is running RFC 2307 groups (memberuid contains a username, not a DN). With our old nscd/nss_ldap/pam_ldap setup, you could list a non-LDAP user (a system user from /etc/passwd) in an ...
2
votes
1answer
25 views

Locally deny login to users authenticated via LDAP

I have a RedHat Linux server that are is use for more than 1000 users Users names are coming to the server via LDAP protocol, so login authentication is from the LDAP My question: is it possible to ...
1
vote
1answer
36 views

Throttle accounts after failed SSH login attempts

I have to set up a server that will allow remote logins. Obviously security is an issue. In this first pass we are discussing:- Locking a person for 15 minutes if they fail to login correctly three ...
17
votes
5answers
2k views

How do I tell what program is asking for a password?

I'm getting an occasional "Authentication request" dialog from Gnome, and I don't know what program is asking or even which account it's talking about. [email redacted] is an email address of mine, ...
3
votes
2answers
3k views

Allow user1 to “su - user2” without password

I need to allow user martin to switch to user martin-test without password su - martin-test I think this can be configured in /etc/pam.d/su. There are already some lines in that file which can be ...
0
votes
1answer
3k views

How to configure Samba to use Windows's login ID?

I'm trying to access the Linux share folder from Windows using Windows's domain authentication. I come across the integration of Windows Active Directory into Samba on a Linux box, thus I have this ...
0
votes
1answer
475 views

Apache mod_auth_kerb: “Key table entry not found”

I want to use the Apache Module "mod_auth_kerb" to implement SSO for a Webapplication. With the following config: <VirtualHost 10.5.3.200:443> #Proxy <Proxy *> Order deny,allow Allow ...
0
votes
3answers
1k views

SSH public key authentication works on LAN and not from WAN

I've setup my SSH server to use public key authentication. When I connect to my server on local network, it authenticates. But it doesn't when I connect over the internet. I don't think the problem ...
2
votes
2answers
896 views

How to sign into an open Wireless Network?

I'm running Arch Linux on my netbook. My school have an open Access Point and we must sign into the network via a page which we are redirected to when we try to open whatever website if we are not ...
0
votes
2answers
4k views

vsftp user authentication problems

I configured my ftp user's home dir to /var/www and set a password but I cannot login with ftp 127.0.0.1, it keep giving me 530 Login incorrect. Why is this? I'm sure I have typed the password right. ...
0
votes
1answer
746 views

Certificate extensions in generating and signing certificartes using openssl

References: SSL Configurations for Intermediate certificate How to add my own created certificate authority to system trusted repositories Why I can't find a page which tell me what's the kind of ...
0
votes
0answers
29 views

Authenticating a virtual machine against a git server

I have a CentOS 7 VM hosted on a Scientific Linux machine (Both branches are Red Hat). I'm using docker as the SW to emulate CentOS over SL. Communication between both is done through a bridge (a ...
0
votes
1answer
66 views

authenicate OpenSUSE 10.2 client to CentOS 6.6 LDAP server

In our company, we have a network where I installed a working LDAP server for our CentOS 6 servers (FTP/WEB/Pydio/VOD/etc servers) about 25 of them. All working perfectly with LDAP authentication. ...
0
votes
0answers
20 views

Putty not asking for Two Factor Authentication Code

I'm running a CentOS 7 server. So I've installed Two Factor Authentication with Google Authenticator a while back and all was well. However I can't access my server at the moment over SSH. PuTTY and ...
0
votes
1answer
379 views

Creating MySQL database and user without password

I am building a set of bash scripts which basically prepare apache virtual hosts, git repositories and other stuff on a cloud server. So far so good, everything is working, but a big problem occurred: ...
-1
votes
1answer
14 views

Why isn't my apache authentication working?

I am trying to set up apache2 authentication for a given website which can be found locally on my webserver. When I try to open up the website it states Internal Server Error 500. Then I put the ...
0
votes
1answer
36 views

How to set password of cups 1.3.7 (/etc/cups/passwd.md5) without prompting?

My company is using CUPS v1.3.7, I would like to allow users to be authenticated only in the cups web interface and not via SSH. I imagine, i should use the authentication type BasicDigest in ...
0
votes
1answer
33 views

Please provide pptpd authentication methods other than chap secrets

I have setup VPN with pptpd service and authentication via CHAP secrets. What other methods are available with pptpd for authenticating users. Any scope of using public keys.
0
votes
0answers
26 views

cups printing system user authentication

I have started to implement CUPS printing service. How to manage users(controlling unauthorized user to print). As it is network printer it should be protected from unauthenticated user. So, please ...
1
vote
1answer
97 views

how to pass a password with a cron job safely?

I have a site map generator script placed in this URL http://www.mydomain.com/admin/sitemapgen/ However this URL is protected with an username and a password in auth_type basic method. I need to ...
1
vote
0answers
55 views

/private/var socket not created with postfix/dovecot sasl

I'm currently running into a problem I have with my email server. I try to setup Postfix and Dovecot with SASL authentication but I get the following error when I connect with telnet (port 25) to the ...
3
votes
0answers
44 views

Why is my SSH authentication socket different from the man pages?

These two entries of man ssh-agent describe the SSH authentication socket: $TMPDIR/ssh-XXXXXXXXXX/agent.<ppid> UNIX-domain sockets used to contain the connection to the authentication ...
2
votes
5answers
17k views

vsftpd fails pam authentication

Moving a tried-and-true vsftpd configuration onto a new server with Fedora 16, I ran into a problem. All seems to go as it should, but user authentication fails. I cannot find any entry in any log ...
0
votes
1answer
21 views

SASL authentication fails when called from crontab

When I run mbsync from the command line it works fine. But if mbsync is run from the crontab, mbsync fails with this error "Error: SASL(-1): generic failure:". My guess is that mbsync's SASL ...
2
votes
1answer
84 views

LDAP Authentication on OpenBSD

I'm trying to get an OpenBSD server to authenticate users using the same LDAP server the rest of my home network uses. While 'getent password' lists the users from the LDAP server as expected, I ...
4
votes
1answer
633 views

Gmail blocking mutt

When I try to log in to gmail with mutt, it flashes a quick Webalert with a url, something like accounts.gmail.com or something. It's too quick for me to see or copy it. Then it says Login failed. ...
12
votes
2answers
15k views

I Can't login as root with su command, but I can with SSH

How is it possible that I cannot log in as root by su root or su (I get incorrect password error), but I can log in by ssh root@localhost or ssh root@my_local_IP with the same password? I'm using ...
1
vote
1answer
90 views

Fetch, authenticate, and download a post-install script on FreeBSD

I'm on a fresh FreeBSD install and want to download and run a post-install script from a private BitBucket repo. My fetch attempt returns an authentication error: ~# fetch ...
10
votes
3answers
3k views

How can I make a user able to log in with ssh keys but not with a password?

I would like to create a user and have no password. As in you cant log in with a password. I want to add keys to its authorized_keys by using root. This is for my automated backup system.
0
votes
1answer
122 views

Authenticating To Multiple LDAP Servers

Owing to a corporate strategy I am moving human user authentication from an implementation of LDAP locally to a centralized Active Directory domain. The problem is that we have a tightly constrained ...
0
votes
0answers
65 views

Ubuntu remote desktop user using a key-based login

I have an Ubuntu 14.04 LTS set up and I have a which authenticates using a private key to connect via PuTTY. Is it possible to use remote desktop from windows 7 (xrdp) with key-based login?
2
votes
2answers
71 views

temporarily disable login using one specific ssh key

On my server, I have several public SSH keys in ~/.ssh/authorized_keys. I would like to temporarily block/disallow/deactivate one key. I want to prevent the user to log in using this key now. but I ...
2
votes
1answer
52 views

What's the correct way to authenticate a user without PAM?

as my related question doesn't seem to get much love, here another one: What's the proper way to authenticate a user via username/password prompt in Linux nowadays? In principle, I suppose I would ...
2
votes
0answers
67 views

Login to Linux using a trusted Active Directory

I'm having trouble to log in to Linux using a trusted Active Directory. The machine is connected to an Active Directory that we are responsible for in the project, but most of the users who will use ...
0
votes
1answer
71 views

Authconfig doesn't find all ldap groups

My (soon to be) admin account is in two groups: # ldapsearch \ > -v \ > -H ldaps://localhost:636 \ > -D "${l_dirmgr}" \ > -w $(cat ${f_dirmgr_passphrase}) \ > -b ...
2
votes
1answer
60 views

iptables, what is truly open?

We have an RSA appliance, I've reviewed the firewall rules on this appliance to determine what ports are enabled. To me, it looks like its wide open; but the vendor states that I am wrong about this, ...
0
votes
1answer
21 views

Smart Card local authentication

Is it possible to use smartCard for local authentication ? So that, rather userID/password combination, an user can authenticate himself by inserting card and by providing it's PIN number. RDesktop, ...
1
vote
1answer
74 views

basic explanation on NSS , LDAP and PAM

can anyone give me a basic explanation on what are NSS , LDAP and PAM and what they used for and what is their relationship/differences ?
2
votes
5answers
93 views

Simulate the remote host identification warning

I need to simulate the warning: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT IS POSSIBLE THAT SOMEONE IS DOING ...
8
votes
3answers
273 views

Trap: can't su as root, can't change group to wheel, ssh as root prohibited

Is this a trap? I made these steps in FreeBSD 10: 1) ssh as root prohibited 2) logged as user 3) su as root 4) as root chsh changed name of user "user" to "luser" 5) exit from ...
0
votes
2answers
1k views

Authentication very slow (both with ssh and su)

I'm having a problem on one of our production servers where the login attempts become progressively slower as time passes. After roughly 5 days it becomes so slow that some critical processes/cron ...
1
vote
1answer
925 views

SSL handshake failure with Shibboleth [closed]

I am using Shibboleth for single user authentication and it needs a ssl configuration which facilitates the user authentication process. Before it was working fine but now I am facing a SSL handshake ...
1
vote
1answer
35 views

Allow a python application to run if the user's password is wrong

Is it possible to let a python program execute only if a wrong password is given at the login screen of my raspberry pi?
2
votes
1answer
246 views

public key authentication without authorized_keys file

I have a lot of ssh public key logins on a Linux server, e.g.: Jul 25 11:41:01 host sshd[24594]: Accepted publickey for root from xxx.xxx.xx.xx port 33374 ssh2 This is strange for me since there's ...
0
votes
0answers
218 views

While trying to ssh, pam_ldap always sends the password “INCORRECT” causing bind to fail

I installed ldap-auth-client nscd ldap-utils on lubuntu 14.04 running on a banana pi. I can successfully bind as the user using ldapwhoami, but I cannot log in via ssh: Auth.log: Oct 21 02:12:05 ...
0
votes
0answers
67 views

Why on my Linux PPPoE connection displays sometimes authentication failure?

Here is my log: Oct 18 09:51:52 -desktop pppd[2764]: Plugin rp-pppoe.so loaded. Oct 18 09:51:52 -desktop pppd[2766]: pppd 2.4.5 started by root, uid 0 Oct 18 09:51:52 -desktop pppd[2766]: PPP session ...
0
votes
1answer
43 views

xscreensaver sometimes unlocks locked screen automatically, after returning from monitor standby mode

I am using xscreensaver to lock my screen. Additionally to that, my monitor goes to "standby" , i.e turn display off, after 30 minutes of inactivity. It has happened to me twice now, that I have ...
2
votes
0answers
23 views

Externally authenticate user within PAM session/PAM session within PAM session

Is there a way of properly authenticating a user from within a custom PAM session? I am currently writing my own PAM authentication module which allows the user to login via an external token. This ...
4
votes
2answers
1k views

Git-SVN Not Allowing Me to Authenticate

Git 1.7.9.1 on Arch Linux: git svn init -s https://app.svn.beanstalk.com/repo Initialized empty Git repository in /path/to/repo/.git/ Authentication realm: ...
1
vote
1answer
71 views

How to disallow usage of an LDAP root account

I am responsible for a couple of servers at my university. All of these machines are configured to talk to the LDAP server of my departement to allow centralised user logins. On this LDAP server there ...