Questions regarding password-based authentication and password management

learn more… | top users | synonyms (1)

0
votes
0answers
10 views

User verification

Suppose I've writen a setuid root executable and I want it to verify that the user is not a script by asking the user to provide his/her password (granted, users might save their password and use that ...
3
votes
2answers
57 views

Trying to crack a weak password using John

I have a computer from the 1990s. It has an (extent) EFS file-system which cannot be wrote to in linux, so i cannot reset the password manually. So i have to crack my password. For this I am trying to ...
0
votes
1answer
29 views

Scanning user directories for specified file [on hold]

i want to find all files in /etc/passwd called cat.sh and then outputs the timestamp and * of entries. I was thinking of using grep -l "cat.sh" * | wc -l
1
vote
0answers
20 views

Can I make cross-computer sharing compatible with tinfoil-hat security (password managers, email, etc.)

Preface: I realize the following is asking for tinfoil-hat type security, but I'm really curious for answers to my questions -- not suggestions to enable two-factor logons on gmail, etc. and call it a ...
10
votes
4answers
2k views

what does star in passwd file mean?

I have a computer that I need to boot into, but the passwords seem to be bogus. Additionally i cant mount the drive for writing, and it is a mips processor, so I cant stick it in another machine to ...
2
votes
2answers
40 views

How to know when my password will expire? [duplicate]

How can I get to know when my password will expire? I'm running IBM AIX.
1
vote
1answer
39 views

How to retrieve a password from KWallet; KWalletManager won't run

Trying to retrieve a password from KWallet, I found that I couldn't open KWalletManager. Neither the menu item System > KWalletManager, nor Alt+F2 and typing in kwalletmanager do anything. Does ...
0
votes
1answer
56 views

sftp to use password stored in a parameter file

Is it possible to to connect two server through sftp with a batch of commands and where the authenticating password needs to be read from a file(where it is stored previously).I am new in UNIX world , ...
0
votes
1answer
21 views

Set root password AMI linux

I need set a password for root on EC2 AMI linux. I have tried with passwd root but if I enter with ec2-user and run sudo su, I get a root bash without asking for a password.
1
vote
2answers
33 views

Where & How is user group information stored in Ubuntu? [closed]

Two places possible: /etc/group and /etc/passwd. If I use command: adduser [username] [groupname], then the user would be added to the group, and the file /etc/group would then be updated. However, ...
0
votes
2answers
92 views

Dynamic change of Linux root password everyday

I want to change my root password everyday based on the date. The password will be like a combination of a string and the date. The below code is working fine. echo -e "pass"$(date ...
11
votes
2answers
703 views

How do I make sudo remember my password for longer?

How do I make sudo remember my password for longer so that I don't have to keep typing it? I do not want to sudo su and execute commands as root all the time. I am on Arch Linux and have tried to ...
1
vote
2answers
64 views

2 passwords for login

On Linux, I would like to to set up a user account in such a way that the user would have to enter 2 passwords to log in. Is this possible, and what would be the implications of this?
3
votes
1answer
34 views

security model of Linux password entry

Whenever a Windows application wants to do something requiring administrator privileges, my screen goes black and a prompt comes up, asking if I want to grant administrator privileges. I understand ...
0
votes
1answer
59 views

Wordlist/dictionary generation for penetration testing

How can I generate a dictionary of words containing 8-16 of alphabet characters ([a-zA-Z]) with low memory?
0
votes
0answers
27 views

not modified file increased size

weird thing happened. passwd file size increased although the timestamp hasn't... i've checked for rootkits and nothing found. Any reasons you can think of? Regards
1
vote
2answers
78 views

How do I scp a file from server A to server B from cron?

I have a file in server A which I am able to do transfer to server B using scp. I need to do this through a cron entry. server B has a password. How do I perform this?
-2
votes
1answer
61 views

SSH into a Remote Machine with a Password

I'm to trying to dd a remote disk using SSH with the following command: ssh userfoo@111.111.111 "dd if=/dev/xvda1 | gzip -1 -" | dd of=/home/user/image.gz I get the following error: ssh: ...
-1
votes
0answers
12 views

How to change the password of Gmail in CLI? [migrated]

How to change the password of Gmail in CLI ? That is, after: openssl s_client -crlf -connect pop.gmail.com:995 What command should I type? Some says we can't in CLI. Is it true ? And Is it also ...
1
vote
6answers
249 views

Hiding Password in Shell Scripts

How can I hide a password in shell scripts? There are a number of scripts that are accessing database. If we open the script others also aware the username and password. So if anyone knows how to hide ...
0
votes
1answer
27 views

Change requirements for passwords on Oracle Solaris 11.2

Is it possible to change strict requirements for user passwords, including root, e.g. I'd like not include numbers in the password as required, since this is a home machine, and I'm the only user?
1
vote
1answer
26 views

Disabling su - <user1> alone

In my Team , we have a server which few people know the root password I can see they log into root and then use su - user1 to use from user1 login., I cannot change root password for some reasons , ...
0
votes
1answer
47 views

Manipulating a (non-root) password in Fedora 22

My Fedora 22 (workstation-gnome) home pc has two accounts: steve, which has no password, and root which does have a password. On this website, the fedora 22 - change from gnome to kde4 topic may ...
3
votes
2answers
44 views

How to generate a CSR for attaching SSL certificate to the site? [duplicate]

How can I generate a CSR for attaching SSL certificate to the site? In various articles about installing SSL certificates are described different ways of generating private key and CSR. That's like ...
2
votes
2answers
57 views

Add a user wthout password but with SSH and public key

I want to add a user to Red Hat Linux that will not use a password for logging in, but instead use a public key for ssh. This would be on the command line.
2
votes
0answers
38 views

Is there a password manager server application

Yet another hackers attack on the infrastructure of companies that offer to store our passwords begs the question: Is there a password manager server application? (Along with browser extensions) ...
3
votes
1answer
98 views

OS X FileVault 2 duress password

I've been attempting to add a custom script to run after the FileVault password is entered on login that will check whether it a 'special password' that will run a script in the background after ...
0
votes
2answers
36 views

Installing Kali Linux

This is my 4th attempt at installing Kali Linux mini on Dell Inspiron 1545 Laptop. When I get to dialog that says "Select components to install" there is no way to select additional components it ...
5
votes
3answers
502 views

Does the shadow file have encrypted passwords?

man 5 shadow says this about the 2nd field: encrypted password Is that true nowadays? I think it should say "hashed password". Am I correct?
0
votes
1answer
39 views

How to change password of an ssh identity file

Can I, and in that case how can I, change the password of an SSH identity file without having to generate a new key and setting up it all over again?
0
votes
1answer
23 views

How to see the password in rhel6 [duplicate]

How to see the password what we are entering in RHEL6. If not how to see at least the entering password in some special characters.
1
vote
1answer
33 views

Why root is not constrained by pam

I have the following settings in file /etc/pam.d/common-password. password requisite pam_cracklib.so retry=3 lcredit=-1 ucredit=-1 dcredit=-1 password [success=1 ...
1
vote
1answer
32 views

How to format password using SCP

I'm currently writing a Script to upload files to my server via SCP. I have the following line: sshpass -p password!% scp -P 1234 ./test.text user@mydyndns:~/test.txt But everytime I try that I ...
0
votes
0answers
73 views

How to Sync UNIX Passwords SAMBA4.x?

My current server is running Debian 8 jessie with Samba 4. Its purpose will be to host a simple file sharing server for around 100 people on Windows machines. I already have a collection of UNIX users ...
2
votes
1answer
74 views

What does **___________ mean in /etc/shadow?

When I look at /etc/shadow I see several entries that look like this: username:**___________::::::: What does the "**___________" mean? That is where I should see the password hash.
1
vote
2answers
62 views

What could be causing a delay between running passwd and being able to login with that password?

I have a RHEL 6.6 Server that I am seeing odd behavior with. When I change a password using the passwd command, the /etc/passwd file gets updated without issue (confirmed with timestamp check). ...
0
votes
1answer
99 views

CentOS 7 - while installing i set disk encrypted with password, but on reboot always it asking password

While installing CentOS 7, i put password for disk encrypt. Now while working remotely on that machine and doing reboot it always ask password to be inserted on-site. Is this normal? or there is a ...
5
votes
4answers
126 views

How do I put comments in my /etc/shadow file?

I am running through some system upgrades and my package manager is showing changes between the upstream /etc/shadow and mine. I would like to put some comments in the file for next time this ...
2
votes
1answer
79 views

How to safely transmit a password over SSH for a remote command to use

On the local server, I have a program that stores the password in the predefined environment variable (SPECIAL_PASSWORD). On the remote server I have a program that reads and uses a password from a ...
2
votes
1answer
47 views

Edit samba user password hash/digest without knowing the password

I am maintaining a samba server for an office environment. So far, whenever there had to be a new user, I called the person over and let him type in his samba password on my console, after I typed ...
0
votes
1answer
23 views

dhcpd restart command asks for password from command line but not from a script?

I have a script that runs and will ssh into another server to restart its dhcpd. In the script, the command literally is: sudo ssh -n $SERVER /sbin/service dhcpd restart This works fine when the ...
5
votes
1answer
111 views

Is it safe for my ssh user to be given passwordless sudo for `apt-get update` and `apt-get upgrade`?

I have an SSH standard user account on my personal server, and it has sudo access (via its password). I ssh in using a public key, so I don't have to type in the account password to log in. Is it ...
1
vote
2answers
47 views

How to pass password to mysql command line

I have MySQL password saved on a file foo.php, for example P455w0rd, when I try to use it: $ cat foo.php | grep '$dbpwd=' | cut -d '"' -f 2 | mysql -U root -p mydb -h friendserver Enter password: ...
1
vote
1answer
28 views

Script samba password but securely

I want to script the addition on a samba user and the password. I have seen solutions similar to the one here Piping password to smbpasswd echo -ne "$PASS\n$PASS\n" | smbpasswd -a -s $LOGIN but ...
-1
votes
1answer
52 views

How can I get a log of all incorrectly entered passwords in linux?

How can I get a list of all incorrect passwords used whenever someone tried to log in. And how can this be generalized to all types of password fields in linux? As it mentioned by K1773R, yes it's a ...
1
vote
2answers
108 views

Script to read line by line from a file pipe that to another command and output to another file

I've got this weird old app that I'm trying to support and it stores the passwords in plain text and I'd like to hash them. I'd really like to have an input file in csv with a username,password for ...
1
vote
1answer
99 views

Set a password on Damn Small Linux

I'm running Damn Small Linux. When you open the command prompt, you are automatically logged in as the default user called dsl and granted root privileges (with sudo). How can I set a password for the ...
1
vote
4answers
402 views

How to “cat /etc/shadow” on an HMC?

hscroot@hmcserver:~> grep root /etc/group root:x:0:hscroot,ccfw hscroot@hmcserver:~> hscroot@hmcserver:~> ls -la /etc/shadow -r-------- 1 root shadow 5252 2015-05-06 19:36 /etc/shadow ...
1
vote
1answer
115 views

passwd does not work after change CRYPT_DEFAULT

I want to change algorithm for password encryption in Solaris 10 server. When I change CRYPT_DEFAULT option from __unix __ to 6, I can not change my old password with passwd command and I get ...
4
votes
2answers
116 views

how to prevent a buffer from swap

this question is specific to Unix and Linux. but it is programming and security, too. my program will get a clear password or decryption key by one of a few ways (decrypting a password file, asking ...