The authentication tag has no wiki summary.
10
votes
2answers
270 views
Groups differ from the local ones when logging in remotely
We store our users in LDAP, alongside some groups that have meaning across different systems (organizational roles including wheel). There are also groups local to workstations, e.g. audio or video ...
0
votes
0answers
20 views
Missing configuration in Apache to achive mutual SSL authentcaion
After implementing a Mutual Certificate Authentication with OpenSSL and Apache Web Server on CentOS platform, I tried this scenario (see this diagram):
----------
...
0
votes
0answers
27 views
How to determine the sequence of ordering certificates by browser?
I did a Mutual Certificate Authentication implementation with OpenSSL and Apache Web Server on CentOS platform. To simple explanation see this diagram:
----------
| ...
2
votes
1answer
418 views
How to configure for an Authenticating Proxy Server
My work proxy server requires authentication with the Microsoft AD domain user credentials. Everybody knows how it works: If you log in on a Windows workstation, your "Internet Explorer" browser based ...
3
votes
1answer
135 views
Configure applications to ask for a user:pass behind a proxy
Here's the deal: I'm trying to set up a SQL server with Debian Linux, I managed to install Debian - but I can't get apt-get to work, since I'm behind a proxy.
I already managed to setup Iceweasel to ...
1
vote
5answers
268 views
How to securely automate running commands as root with “sudo su -”?
hint (on client side, how to encrypt files/pwd's):
# encrypt pwd with ssh key:
openssl rsa -in ~/.ssh/id_rsa -outform pem > ~/.ssh/TEMP-id_rsa.pem 2>/dev/null
openssl rsa -in ~/.ssh/id_rsa ...
0
votes
1answer
29 views
certificate extensions in generating and signing certificartes using openssl
References :
SSL Configurations for Intermediate certificate
How to add my own created certificate authority to system trusted repositories
Why I can't find a page which tell me what's the kinds ...
2
votes
0answers
33 views
SSL Configurations for Intermediate certificate
I had implement a mutual certificate authentication and it worked successfully for following steps :
create root ca (self-signed)
create server certificate and sign it with ca private key
create ...
1
vote
3answers
5k views
vsftpd fails pam authentication
Moving a tried-and-true vsftpd configuration onto a new server with Fedora 16, I ran into a problem. All seems to go as it should, but user authentication fails. I cannot find any entry in any log ...
3
votes
1answer
56 views
Configuring Apache to Require a Client Certificate
I want to implement mutual authentication (two - way ) with apache web server.
References :
1.Failed to sign CSR with the CA root key
2.Firefox error message when adding client certificate ...
15
votes
4answers
3k views
Can I find out which ssh key was used to access an account?
Is it possible to find out which ssh key was used to access an account? I have an account on a server that I let several (trusted!) people have access to via ssh. I'd find it useful to be able to ...
0
votes
1answer
46 views
Where to put generated certicate for user [duplicate]
I was following this tutorial and I want to implement mutual authentication between server and client, where server and CA (certificate authority) is the same thing.
I reached the last step and I ...
3
votes
1answer
90 views
Firefox error message when adding client certificate signed by CA
I'm getting this message when I'm trying to add a certificate to Firefox's "your certificate tab". I generated and signed it before by a server which also is a CA.
Failed to decode the file. ...
1
vote
1answer
60 views
Failed to sign CSR with the CA root key
I'm trying to implement Mutual Certificate Authentication , I have to be the CA and server at the same time , generate certificates and sign them for users. and I'm following this tutorial which is a ...
1
vote
1answer
70 views
Configure SSL Mutual (Two-way) Authentication
I was asked to do it "Configure SSL Mutual (Two-way) Authentication" and I don't know where to start or how to test it .
server and many clients . they can access code on server only if they have a ...
13
votes
2answers
634 views
SSH ignores characters after correct password string?
Remote machine 10.10.10.1 has password "asdFGH12" for user named "user". I'm able to log in even if I type in password "asdFGH12dasdkjlkjasdus" or any other characters after the "asdFGH12" string.
$ ...
1
vote
1answer
114 views
Where does Samba 4 store user passwords?
Where does Samba 4 store user passwords? How can I import my password hashes from Samba 3 in Samba 4?
I am using my own LDAP server with samba 3, and the password hash is stored within the ...
1
vote
1answer
340 views
SSL handshake failure with Shibboleth
I am using Shibboleth for single user authentication and it needs a ssl configuration which facilitates the user authentication process. Before it was working fine but now I am facing a SSL handshake ...
2
votes
1answer
107 views
Restrict two way SSH and Apache authentication to non-local networks
I am using Google's open-source PAM module for two-way authentication for SSH logins and certain Apache directives. It works great, however I would like to use this only when trying to log in from an ...
0
votes
1answer
129 views
Unable to login to my server using ssh
Yesterday I was migrating to my new server, needed to use rsync, I created a RSA key, so that rsync could connect, I saw an error that says add to trusted key in location x I didn't have that location ...
3
votes
1answer
151 views
How are loaded SSH keys referenced by name?
I'm using chef's knife ec2 tool which requires the name of a loaded SSH key (that was created in the Amazon EC2 control panel)
It seems strange to me that it uses a name to reference the keypair - ...
0
votes
3answers
94 views
What does sudo su work but su does not? [duplicate]
I have tried this on Fedora and on Ubuntu.
kshitiz@kshitiz:~$su
su: Authentication failure
kshitiz@kshitiz:~$sudo su
root@kshitiz:/home/kshitiz#
I am entering the same password in both the cases.
...
1
vote
1answer
93 views
Session terminates immediately after authentication
I have a RedHat 5.3 server with several regular users created. Since last Friday the user "xpto" is getting "Authentication failed" error messages.
Tha account isn't locked out.
I have reset the ...
30
votes
2answers
9k views
Why is there a big delay after entering a wrong password?
I notice a weird (well, according to me) thing about passwords. For example, if I type an incorrect password during login, there will be a few seconds' delay before the system tells me so. When I try ...
0
votes
1answer
109 views
How to authenticate a user with PAM, that is not the user that started the application
I'm currently developing an authentication module for an application. The decision was made to do this by using PAM. I have made this work but it can only authenticate the user that started the ...
3
votes
1answer
1k views
Suddenly, I Can't login with correct password (greeter & tty)
This might be a duplicate of other password related questions but it's somehow eccentric.
I have 3 accounts in my Ubuntu 12.10 system (one standard and two administrators). One of the administrator ...
0
votes
1answer
53 views
apt-get update and package authentication
Sometimes when you try to apt-get install a program, you get a warning message about how some packages couldn't be authenticated.
Doing an apt-get update will sometimes fix the problem, but sometimes ...
1
vote
0answers
526 views
Git-SVN Not Allowing Me to Authenticate
Git 1.7.9.1 on Arch Linux:
git svn init -s https://app.svn.beanstalk.com/repo
Initialized empty Git repository in /path/to/repo/.git/
Authentication realm: ...
0
votes
0answers
89 views
Need help configuring Fedora client authentication for 389 server with Kerberos
Trying to setup kerberos authentication with 389-ds and having trouble figuring out how the two fit together.
Here is my setup:
A CentOS 6 VM (centos01) where I setup bind, 389 ds, and kdc services
...
1
vote
1answer
49 views
keeping keys on an auxiliary removable drive
It seems that servers are only as secure as the machine that holds the keys and that in turn means the desktop/screensaver password is the line of defence for not only the desktop itself but any ...
3
votes
1answer
243 views
Multiple PCs network centralized system authentication
(I couldn't really choose an accurate title as I don't know exactly what the feature I'm looking for is called. Sorry about that. I hope that the following lines may clear this aspect.)
I own a dozen ...
2
votes
3answers
300 views
rsync server/daemon security
I have a NAS (Netgear Readynas NV+) at home and a linux (Arch) box at work that is always on. The linux box is already running an ssh server/daemon and the NAS is already running an rsync ...
2
votes
0answers
465 views
nsswitch cache and nscd
I have an LDAP directory server installed that stores all the user data in one server and I have an ongoing authentication mechanism using pam to request user information from it. This works very ...
1
vote
1answer
484 views
Script to get file from SFTP and run it
We have 5 servers running our code: A, B , C, D and E.
From a local machine, we sftp the file to A. Then
ssh id@A
su - applicationname
sftp id@A
get <file>
bye
tar -xzf <file>
logout
...
1
vote
1answer
2k views
How to setup proxy authentication in the Debian shell?
I think that once I used
export http_proxy=http://user:password@address:port/
successfully. But now when I use wget it shows
Error parsing proxy URL http://user:passwordaddress:port/: Bad port ...
4
votes
1answer
107 views
Easiest way to manage users for two machines
I'm administrating two ubuntu desktops and one debian server.
There are abount ~20 active users on the desktops. A few (5-10) user accounts are added each year and about the same amount become ...
1
vote
1answer
118 views
How do I restore authentication for Debian Lenny synaptic package manager?
My neighbor calls me to fix things when his cats walk on his keyboard and cause problems that he can't fix. This time it happened while he was running synaptic package manager.
After the reload, ...
3
votes
2answers
144 views
How do you automatically elevate an automatic task to root privileges or is there an alternative approach?
I'm trying to write, in essence, an automatic deployment script for use by our development team and I know I can set up SSH to use keys so that I can automatically authenticate via key instead of ...
1
vote
0answers
469 views
“No PostgreSQL user name specified” - possible concurrency issues?
For my dissertation I'm running the same cronjob on around 300 machines, which is:
10,25,40,55 * * * * /path/to/db_script.sh 1>/dev/null
This script gets some values from the system (whether ...
3
votes
1answer
281 views
Does the SFTP server accept passwords at all?
I'm trying to connect to a sftp server via sftp USERNAME@SERVERNAME. Whatever I do, I get "Permission denied (publickey)." Googling doesn't help as everybody recommends switching to key-based ...
6
votes
4answers
680 views
Is it possible to change password database file(/etc/passwd) in linux?
Is it possible to change password database file(/etc/passwd) to some other file. How does this authentication mechanism work internally ?
Does it depend on pam ?
0
votes
0answers
142 views
How can I setup auth/winbind to prefer local accounts over AD even if the account is in both systems?
I seem to have an interesting account/permissions problem on my RHEL 6 server. We migrated from a RHEL 3 installation and I moved over /etc/shadow,passwd,and groups so that we can maintain all of our ...
1
vote
2answers
163 views
Command-line web browser with Kerberos authentication?
QUESTION: Is there a Kerberos-friendly web browser usable via an SSH console?
I have tried links but it does not seem to work with Kerberos (the webapp asks me for login/password even though I have a ...
1
vote
1answer
660 views
User authentication over Dante proxy server
Below is my Dante SOCKS Proxy server configuration that I connect to without any authentication:
internal: eth0 port = 53200
internal: 127.0.0.1 port = 53200
external: eth0
clientmethod: none
...
0
votes
0answers
356 views
Password protect my website on Centos + Kloxo [closed]
I have Centos 5.6 deployed along with Kloxo. Now I want to password protect my website. It means user has to provide uid/pwd to login (like this: ...
7
votes
2answers
383 views
iPhone type login screen?
The person that introduced me to Fedora had somehow made his login screen so that instead of typing in a password he used the "connect the dots" password that's popular on phones. Eg
On my ...
2
votes
1answer
1k views
Where to supply authentication details to the Network Proxy (Central Proxy) on Fedora?
My system is running Fedora 16 and I live in a campus where we use LAN to connect to the Internet. And for this, we use an http proxy with authentication (username & password).
I tried putting the ...
1
vote
0answers
1k views
SMTP Auth - SASL on Dovecot, Postfix and CentOS 6.2 (and Open-Xchange)
I am trying to get open SASL to work on CentOS 6.2. I followed this tutorial:
http://wiki.centos.org/HowTos/postfix_sasl
I suspect it works perfectly for CentOS 5.x so all I really need is an update ...
4
votes
2answers
6k views
How to telnet via proxy authentication?
I am behind a proxy server in my college. It uses a simple username and password authentication. And i connect to the proxy server to port 3128. now i want to telnet simply to say any website on the ...
5
votes
2answers
430 views
How to check for empty passwords?
Looking at all the ssh-login attempts by script-kiddies I assume that there are messed up systems connected to the internet that have password-less accounts set up.
But how to check a Linux/Unix ...
