Questions regarding password-based authentication and password management

learn more… | top users | synonyms

2
votes
1answer
2k views

SCP and/or SSH command with password in line

First, I'm TRYING to use rsa keys because I'm using the script to create RSA keys, but initially I have to connect to the remote machine to pass over the newly generated authentication key. Having ...
5
votes
1answer
4k views

Samba passwords expiring in x days - how do we fix them to not expire

We use OpenLDAP and Samba v3. Recently some Samba-defined users (no accounts on the shared linux server) started being listed in logwatch as having their passwords come up to "will expire"...I ...
3
votes
1answer
4k views

Difference between passwd and passwd- file [duplicate]

Possible Duplicate: Who creates /etc/{group,gshadow,passwd,shadow}-? I have a strange passwd- file in /etc, notice the trailing dash: root@ubuntu:~# ls /etc/passw* /etc/passwd /etc/passwd- ...
1
vote
3answers
2k views

Ask root for password when using su command

I'm trying to edit /etc/sudoers via visudo, but I don't know how to change the root rights. I want root to be prompted for the user1's password, when he tries to use su user1.
2
votes
2answers
577 views

Finding root password

I installed a Ubuntu and it only has a user. I can login to the system without login. It doesn't ask me for un/pwd. but when I am in, and I want to run some commands as root (sudo), it ask for ...
3
votes
3answers
4k views

Shell script to become root

How can we write a shell script to become root? That is I donot want to input the password at prompt it should be within the script itself. I was trying to make but failed to do so.Is it possible, if ...
39
votes
6answers
92k views

How to create SHA512 password hashes on command line

In Linux I can create a SHA1 password hash using sha1pass mypassword. Is there a similar command line tool which lets me create sha512 hashes? Same question for Bcrypt and PBKDF2.
2
votes
1answer
324 views

Security drawbacks of disabling tty password check

I found that, in /etc/inittab, this modification (-a username) for the user u disables the login/password check for all tty:s: 1:2345:respawn:/sbin/getty -a u 38400 tty1 2:23:respawn:/sbin/getty -a u ...
4
votes
2answers
13k views

How to remove root password on Debian?

I'm running Debian in a virtual machine and for convenience I would like to remove the password on root (since it doesn't really matter what happens to this box). Internet hasn't been too helpful on ...
6
votes
2answers
7k views

Another account with same uid as root gets prompted to set new password for root, not itself

After upgrading the os from 5300-06 to 5300-11, this weird behaviour happened. My system had another unix account, let's call it "abc", purposely configured its uid to 0 for working as a root with ...
4
votes
1answer
307 views

Can linux use a mix of SHA-1 and CRYPT passwords?

We have an automated sync-routine that uses useradd to create new users on a Ubuntu 10.04 machine. The application launching the routine provided both username and CRYPT-encrypted password. However, ...
2
votes
1answer
345 views

add new language to /usr/share/dict/words

In this directory I have English dict and my language file, but where I can download other language? Or maybe you known other free dictionary? I need to make list of word that are not in the ...
3
votes
1answer
3k views

Can I automate mounting a cifs share without storing my password in plaintext?

I currently use a script which contains commands along the lines of sudo /sbin/mount.cifs $SERVER_SHARE $MOUNT -o username=$DOMAIN_$USER,uid=$USER,gid=$USER,file_mode=0664,dir_mode=0775 to mount my ...
0
votes
1answer
607 views

Force users to change email password every six months

I'm going to build an experimental mail server with Postfix + Dovecot and Mysql for user accounts. The server will offer SMTP + POP3 + IMAP. Is there a way to force users to change their mail account ...
14
votes
1answer
7k views

In /etc/group what is the meaning of the second field?

A sample /etc/group file contains the following entries: root:*:0: adm:!:4:logcheck antoine:x:1000: The man pages I've read (Debian & OSX) says the second field is to store a group password. ...
3
votes
2answers
5k views

Ubuntu password policy

I want to set the system-wide password policy on an Ubuntu 12.04 LTS server. Googling around, a lot of people point to this (very old) document: https://help.ubuntu.com/10.04/serverguide/user-...
5
votes
2answers
2k views

Scripting htdigest -c /path/to/file/$user $user $password in Bash

I want to be able to script with a password in variable $password. htdigest -c /etc/apache2/pw/$user $user $password At the moment it asks me to manually enter a password; this is not going to be ...
2
votes
1answer
12k views

How to list and filter Samba users that need a password change?

Apparently, I can find out whether a Samba user needs a password change or not with the following command: pdbedit -v -u userid | grep "Password must change" I also see I can list all the Samba ...
4
votes
1answer
1k views

Validate AIX Password for root from script

Looking for a way in a shell script to validate the password for for root on an (AIX) matches a standardized plain text password. This query is similar to another one on this site. I have access to ...
6
votes
7answers
4k views

Encrypt a password the same way mysql does

I've created a user ... but forgotten the password mysql> create user 'blayo'@'%' identified by 'right'; Which Linux command line tool can encrypt the password the same way mysql 5.5 does ? ...
1
vote
1answer
156 views

How do I keep KDE from asking new users for a password when I use /etc/skel to set up their enviroment?

I made this nice custom KDE setup on Arch Linux with customised settings like desktop background, panel settings, kwin settings, etc. I heard that if you copy all the hidden files from your /home/"...
2
votes
1answer
410 views

password problem when feeding a remote file into diff

When I want to compare a local file with a remote file, any of these usually works: $ ssh remote cat file | diff file - $ diff file <(ssh remote cat file) However, sometimes (especially when the ...
5
votes
1answer
487 views

Automated ssh login with passphrase?

Logging onto a machine over ssh typically requires a password to be entered before access is granted. Alternatively, a key/certificate (without a passphrase) can be installed onto the remote machine ...
4
votes
2answers
441 views

Password protecting a system file? (e.g. /etc/resolv.conf)

I am trying to parental control myself by restricting web access via OpenDNS. The OpenDNS account password will be handed to someone trustworthy. Now, I want to put some restriction on the /etc/resolv....
9
votes
2answers
13k views

Disable svn plaintext password storage for all users

By default, Subversion allows users to save their password in plaintext in ~/.subversion/auth/svn.simple. I'm investigating options for storing encrypted passwords in svn, but at the very least and ...
4
votes
1answer
22k views

How to create a user with given password on SuSE from command line?

I need to create bunch of new users with given password. What I want is a script that I would pass the user name of new user and it will create/add the user and set its password. (the password is the ...
2
votes
0answers
706 views

Validate Password for user account from shell script

Application is for a multiple server standardization script Looking for a way in a shell script to check if the password for an OS account (AIX) matches a standardized plain text password. The ...
3
votes
1answer
400 views

Is it a good idea to use pwsafe - a password manager not updated since 2005?

I'm looking for a command-line Linux password-manager. It appears that pwsafe is the program most commonly used. However, its latest update was in 2005. Is it a good idea to use this? Has it been so ...
3
votes
1answer
523 views

How to disable timeout of password prompt for partition decryption during boot?

I have a computer running OpenSUSE 12.1, 64-bit, default install. How it works currently: I turn on the computer It goes through the boot process At some point during boot, I am asked for password ...
11
votes
3answers
56k views

How do I set the password of a new user after the account has already been created?

I used the 'useradd' command to create a new account, but I did so without specifying the password. Now, when the user tries to log in, it asks him for a password. If I didn't set it up initially, ...
7
votes
2answers
9k views

export HTTP_PROXY and special characters in passwd

Suppose for the sake of argument my password below is abc123@ I need to authenticate my linux machine through a corporate proxy to get patches and updates... normally I'd use this: export HTTP_PROXY=...
6
votes
4answers
3k views

Is it possible to change password database file(/etc/passwd) in linux?

Is it possible to change password database file(/etc/passwd) to some other file. How does this authentication mechanism work internally ? Does it depend on pam ?
4
votes
2answers
2k views

Two-step remote ssh without password

I'm looking to ssh from my localhost to a remote server, and from there to a remote computer. I currently have it set up so that the remote computer and remote server have passwordless ssh-ing set up ...
3
votes
4answers
334 views

SSH asking for password after ssh-copy-id

I created a key on my machine with ssh-keygen. I copied the key to remote machine using ssh-copy-id. Tried to connect to remote machine but it asked me the password. Both machines are ubuntu (local ...
1
vote
0answers
223 views

Make gdm/mdm prompt for an empty password on liveCD

By default Fedora liveCD is configured in a way that liveuser is logged in automatically since following lines added to gdm/mdm (a fork of gdm of GNOME2) configuration file [daemon] ...
11
votes
4answers
5k views

Command-line password manager that uses SSH key to authenticate

I'm looking for a command-line password manager, much like pwsafe, but one that features SSH key authentication. That is, I'd like to be able to add my SSH key to the authentication when opening the ...
1
vote
2answers
3k views

I reset my password and now I can login, but without nautilus or program menu

I recently powered on some old notebook with Linux Mint 11 (Katya) installed, and I thought I remembered my user password, but turns out I didn't. So I reset that password using the instructions here. ...
6
votes
1answer
153 views

Why do we need an expiration period?

Why is there a gap between the expiration of an account and its complete deactivation, when one can no longer log in or change his password when it became expired?
12
votes
5answers
27k views

Can a linux user change their password without knowing the current password?

I'm setting up a few ubuntu boxes, and using opscode's chef as a configuration tool. It would be fairly easy to install public keys for each user on each of these servers, and disable password ...
4
votes
3answers
2k views

scp: localhost password not accepted

I'm attempting to copy a public key to a remote server. I'm logged in locally as [localname] and the key resides locally at ~/.ssh/. I'm also ssh'd into [remote.com] as [remotename], and attempting to ...
12
votes
3answers
19k views

Getting the password expire time

Let me preface this with: I do NOT have root access available. I recently got locked out of my account because I did not know the password expiration was getting close, then elapsed. I want to add a ...
6
votes
1answer
7k views

How to reset KDE wallet password in linux?

I have installed OpenSUSE on my laptop. I am trying to connect to my wifi. I entered my wifi password (correctly) and then it is asking for my KDE wallet password. I set the KDE password but forgot it....
2
votes
4answers
2k views

Change password in headless mode

I am building a script to fully automate a VPS setup, and I need to change the root password. I would like to avoid typing it as the script is running through SSH. Is there a way to redirect an ...
8
votes
2answers
15k views

How to expire a password? (For inital account creation)

I've often created temporary passwords for users for my own development machine for initial id creation. For other environments, I've seen admins have the ability to have a password show as expired ...
13
votes
4answers
35k views

can we know the password for the other users if we have root access?

If a person has root access to a particular RHEL machine, will they be able to retrieve the password of the other users?
18
votes
4answers
109k views

How can we change root password?

If we don't know the root password and don't have root access to the machine, how can we change the root password?
1
vote
1answer
582 views

How to invoke root privileges from a password prompt of “Software Update” window?

When I try to install software updates using the "Software Update" GUI, I am asked for the root password. Although, I can 'su' in a terminal, the password is not recognized as correct in the GUI ...
11
votes
3answers
8k views

Reading passwords without showing on screen in Bash Scripts

How to read passwords in bash scripts in a way like tools which are not showing it on terminal ? (Changing font to black on black might be tricky by easy to copy&paste - so it's not solution)
5
votes
2answers
2k views

How to check for empty passwords?

Looking at all the ssh-login attempts by script-kiddies I assume that there are messed up systems connected to the internet that have password-less accounts set up. But how to check a Linux/Unix ...
0
votes
2answers
856 views

Error when I want to create a user on FreeBSD

I'm trying to run FreeBSD (.iso) in a virtual VMWare machine. The useradd command gives me an error: # useradd pstnc useradd: Command not found Why is that? The command is correct and very simple, ...