Questions regarding password-based authentication and password management

learn more… | top users | synonyms (1)

4
votes
2answers
15 views

how to prevent a buffer from swap

this question is specific to Unix and Linux. but it is programming and security, too. my program will get a clear password or decryption key by one of a few ways (decrypting a password file, asking ...
0
votes
2answers
29 views

How to make the script automated to take password on its own?

I have a script that is doing sftp some files from one server to another, like inside the script script.ksh I have the below lines; sftp user@ip_address << EOF cd path put file1 bye EOF When ...
0
votes
0answers
27 views

What is the user and password for Sabayon Linux?

I am currently unable to use my computer because I can not login. I've burned thrice the daily minimal-dev Sabayon Linux ISO onto the same USB flash device. Each time, the login screen asks for login ...
0
votes
0answers
32 views

logging wrong passwords in /var/log/auth.log

/var/log/auth.log logs (among other things) failed login attempts to my debian linux. I was wandering if it is possible to ask it to log the password that was used in the failed attempt. This is ...
2
votes
1answer
20 views

GNU Screen - any way to remove password when detached?

Protecting a GNU screen session with a password is good security. However, how does one remove the password if you need to share a session with a colleague? I tried the following to clear it and got ...
-2
votes
2answers
32 views

A little help passwd status on linux

On a linux distro user mino report this passwd status passw -S mino mino P 04/21/2015 0 90 15 -1 P=passwd ok 04/21/2015 = date creation 0 min pass? 90 max pass valid 15 = ? -1 = ? Thanks
2
votes
2answers
68 views

Change Password Programmatically

In the current version of Raspian, I know it is possible to change the password of the current logged in user from the command line like so: sudo passwd which will then prompt the user to enter a ...
1
vote
1answer
24 views

LDAP Force Password Change Through HTTPS

We have a "master" server running Suse Enterprise with LDAP that controls user's access to our systems. We want to implement a 90 day expiration policy, but the issue is that most of our servers are ...
5
votes
2answers
348 views

How to set default password algorithm to sha512 on Linux?

on AIX, it would be a simple: chsec -f /etc/security/login.cfg -s usw -a pwd_algorithm=ssha512 Question: But how can we set the default password algorithm to sha512? UPDATE: I think pwd_algorithm ...
1
vote
1answer
21 views

Configuring Exim on Debian to authenticate using only a password?

I am attempting to configure Exim in such a way that clients who wish to relay email through the server must supply a single passphrase. The file /etc/exim4/conf.d/auth/30_exim4-config_examples ...
0
votes
2answers
63 views

SSH authenticity couldn't be established

Last night I SSH'ed to different systems.... one system/SSH reported that the "authenticity of HOSTNAME couldn't be established......." and it asks if I want to continue or something, I didn't and ...
2
votes
1answer
93 views

Policy in /etc/pam.d/password-auth is not being enforced

I've updated login.defs and password-auth to include a minimum length on passwords (12), but the minlen is not being enforced when I attempt to change a user's password with passwd. None of the ...
0
votes
0answers
35 views

How to change the password display in linux? [duplicate]

In general when we enter the password, nothing is display in the screen. I want to display * when I enter password in Linux. Current behavior: abc@123:$ su testuser ...
0
votes
0answers
71 views

shell script prompting for password but not taking it while doing tar

In my shell script, I have following lines: function tarIt() { FILE_OWNER=$1 TAR_FILE_NAME=$2 FILE_NAME=$3 su - $FILE_OWNER -c "tar -czf $TAR_FILE_NAME $FILE_NAME 2>&1" if [ ${?} ...
2
votes
2answers
37 views

How can I store an encrypted rdesktop password for easier sign-in?

I am using rdesktop on a Fedora laptop to connect to Windows computers at work. To make it easier, I've made an alias in my .bashrc: alias companyremote='rdesktop -u USER -p - -g 1920x1040 -K' So I ...
0
votes
0answers
21 views

How to show the password of a user? [duplicate]

I am a newbie. I know one can make new password for a user, but is there a way to retrieve the current password of a user?
2
votes
1answer
101 views

How can I decrypt my encrypted /home partition?

A year ago I installed Linux Mint 17 on my laptop. I partitioned the HDD and separated the system (/ mount point) and the data (/home mount point). I chose to encrypt the whole /home using the basic ...
4
votes
3answers
187 views

How to unlock account for public key ssh authorization, but not for password authorization?

The ssh won't let me login, because account is locked. I want to unlock the user on my server for public key authorization over ssh, but do not enable password-ed login. I've tried: # passwd -u ...
3
votes
1answer
38 views

Change the root password of a Linux image

I'm building a jessie build of Debian. Passwords are saved in /etc/shadow in the build tree, but they are salted obviously so I cannot change it just by editing the file. If this was my installed ...
1
vote
1answer
60 views

How do I log in to Mint when I've forgotten my password?

I'm brand new to Linux. I bought a laptop with Linux Mint 17.1 installed on it, but I can't remember the log in password. Is there a way of disabling it?
0
votes
2answers
51 views

/etc/passwd shortest password

I need to put one character inside the password file so that nobody can notice. I thought that if I was able to put the password as plain text and put something like a space nobody would ever find ...
0
votes
1answer
70 views

What is the difference between these two ways of reseting the root password?

I know several ways to reset root user's password, but want to know which is the best and why it is. For example: A method: Grub > 'e' init=/bin/sh (Remove rhgb and quiet tags if necessary) > ctrl+x ...
-2
votes
2answers
41 views

How to Find the number of password entries that are on the server? in unix [closed]

Find the number of password entries that are on the server? in UNIX
-2
votes
3answers
52 views

What is “-l” option do to the passwd command? [duplicate]

I have seen people use passwd -l "$USERNAME" , But the linux man page does not explain what the -l option is for. What does it do ?
1
vote
4answers
89 views

How can I update a password without entering the password twice?

I effectively have a sticky keyboard (host machine to RDP to vCenter to virtual console), but need to update the password of a VM I am building. Using the rescue environment CentOS media offers, I ...
2
votes
1answer
36 views

Where do my keypresses go ?

Scenario (Ubuntu 14.04.2) : I wake Ubuntu from suspend. I know (from past experience) that it only takes 2 or 3 seconds for the lock screen to become available. My monitor, however, takes longer - ...
3
votes
2answers
149 views

Why should you NEVER edit the /etc/shadow file directly?

In another answer here on UNIX & Linux Stack Exchange Michael D Parker wrote, in response to someone saying that doing so was "safe", that:Usually you should NEVER edit the /etc/shadow file ...
1
vote
1answer
51 views

smd5 - generate by unix tool or perl

I have problem on Unix, have to create a lot of passwords in smd5 but don't know how to generate smd5 passwords using some unix tool or perl in a form: {smd5}DoZgZ.OE$vSg4ZH7Bpy0BCdXNzBj001 I have ...
1
vote
0answers
46 views

Persistent SSH port forward without public keys

Problem I haven't found a solution to run an SSH port forward in a reliable and persistent fashion, when the server you are connecting to does not support public-key authentication. Question What ...
3
votes
1answer
41 views

How to blacklist common passwords on UNIX systems?

If we have a file on a server (Linux, AIX, etc) that contains the common passwords, how can we filter passwords based on this?
1
vote
0answers
70 views

md5 password hash

I'm looking to create a md5 hash to use in /etc/shadow. Someone suggested using grub-crypt. Every time I put the same password in I get a different hash. [root@endpoint ~]# grub-crypt --md5 Password: ...
2
votes
4answers
64 views

can a super user steal passwords from other users with keylogging?

First, before I get answers containing information that I already know, yes, I'm aware that the superuser can reset passwords, and yes, I know that the superuser can log in as other users without ...
1
vote
1answer
43 views

Cannot update password policy for user

I am trying to update the password policy for a user. It should be as follows: Must be changed every 30 days Once changed, cannot be changed for 3 days Must be disabled after 45 days of inactivity ...
0
votes
0answers
36 views

'Pass' password manager - does it require public key?

The 'pass' password manager uses gpg keys. http://www.passwordstore.org/ However, gpg itself can be used for symmetric encryption of files. Does pass only work using public/private keys, or is it ...
0
votes
2answers
50 views

provide password for script begin called inside another script [duplicate]

I have written a shell script which in turn calls another script, but the second one prompts for password. I want to supply the password and pass the prompt without user begin notified. Here is my ...
0
votes
3answers
40 views

set samba password now can't login

In trying to get samba server configured on my Fedora I used the following command to set a password: sudo smbpasswd -a user 'user' also happens to be the main user account on the system: the one I ...
2
votes
1answer
139 views

Why 'mkpasswd -m sha-512' produce different result every time it is called?

I am using this function to create a password in the shadow file $ mkpasswd -m sha-512 password $6$o50n4EfNOBzfs$K5l5AcOI5e0I9n2df0LmR11OLSPKSVM6AGBOnWVfDDfMubb46MrAj0zehdLNEoYzD2fj5q4XUdDwexj/dWLHy/ ...
0
votes
0answers
105 views

Cracking .cap file without dictionary

.cap file taken by airodump handshake I need to crack .cap file with bruteforce attack If the password between 8 and 12 letter containing characters+numbers+symbols I tried simple crunch command ...
1
vote
1answer
52 views

Automating setup of the SSH tunnel

I need to frequently login to many machines but I can only login to them from a proxy machine or using an SSH tunnel (by tunneling through that proxy machine). The problem is that I cannot use ...
11
votes
5answers
1k views

What does “,,,” mean in the 5 column in /etc/passwd file? [duplicate]

There are 7 fields in the /etc/passwd file :username,Password,User ID (UID),Group ID (GID),User ID Info,Home directory,Command/shell. Part of rows in my /etc/passwd : avahi:x:105:110:Avahi mDNS ...
0
votes
0answers
46 views

migrating local users to LDAP

I have sucessfully setup LDAP and LAM on a raspberry pi in my home network. I have several Linux machines around the house, some Windows machines, aswell as a QNAP TS-210 NAS. They all have the same ...
1
vote
2answers
60 views

providing password to ssh [duplicate]

The situation: I have an IP : 192.168.1.1 $IP username : root (or whatever) $USER and a passwd: foo $PASSWD Is there a way to give $PASSWD to ssh ? like PASSWORD_VAR=$PASSWD ssh -l $USER $IP ...
1
vote
1answer
38 views

Different password for login and sudo - security concerns

I'm planning to follow the steps described in this answer to have a different password to log in and sudo. The reason is that I want a high security password to access my account or unblock the ...
0
votes
1answer
54 views

execute script and enter password from one command

I have a script that uses CUPS lpstat -h command. However, the remote server I am trying to get a response from asks for a password. But I need to execute this script from within Nagios, so I have ...
1
vote
3answers
60 views

How can I tell if my password is set?

I have been using this server for a few months. At the beginning I sent the admin my public ssh key, and he set up the account for me, and I have only used the ssh key to log in. I definitely didn't ...
10
votes
2answers
212 views

A consistent and safe approach to passwordless accounts with SSH

I must admit that I like servers without passwords in some cases. A typical server is vulnerable to anyone who has physical access to it. So in some cases it is practical to lock it physically and ...
0
votes
0answers
18 views

Returning from a sleep the desktop displays shortly (before entering password), privacy issue

OS: Linux mint 17.1 Cinnamon 64-bit Cinnamon version 2.4.6 Intel Celeron: 900 @ 2.20Ghzx1 Memory 2 Gb Graphics Card: Intel Mobile 4 series integrated When I return to my computer after it has been ...
1
vote
1answer
16 views

How to generate many passwords with kpcli?

Keepass has password generating function. Q: How can I generate example: 400 000 passwords with kpcli to a text file?
0
votes
1answer
42 views

NCR unix system v/386 release 4 recover root password

we have NCR 3455 system from long time as attached all information for server (images) , so we need your help to assist us to get root password which lost it , really we appreciate your efforts if ...
1
vote
1answer
81 views

How strong is the encryption of a zip file in Linux Mint

Zip encryption has had often a bad reputation of being weak, but some would argue that a zip file encrypted using certain algorithms (such as by using AES), together with strong password, is really ...