Questions regarding password-based authentication and password management

learn more… | top users | synonyms (1)

6
votes
3answers
653 views

Is w command safe for users?

Some applications allow to pass password as an argument. For example: mysql --user=user_name --password=your_password db_name Is it safe? Besides the fact that typed password would be saved in bash ...
6
votes
3answers
4k views

Allow user1 to “su - user2” without password

I need to allow user martin to switch to user martin-test without password su - martin-test I think this can be configured in /etc/pam.d/su. There are already some lines in that file which can be ...
6
votes
4answers
2k views

Is it possible to change password database file(/etc/passwd) in linux?

Is it possible to change password database file(/etc/passwd) to some other file. How does this authentication mechanism work internally ? Does it depend on pam ?
6
votes
2answers
8k views

How to expire a password? (For inital account creation)

I've often created temporary passwords for users for my own development machine for initial id creation. For other environments, I've seen admins have the ability to have a password show as expired ...
6
votes
1answer
358 views

How can I prevent someone from gaining root access through the bootloader?

On Ubuntu 10.10 I can login as root without the root password by replacing ro quiet splash with rw init=/bin/bash. How can I secure my machine and disable this backdoor?
6
votes
2answers
1k views

Pipe Password to Application When Asked

The following should be done in a bash script: curl --digest --user schmijos https://bitbucket.org/u/p/get/tip.zip -o tip.zip How can I automatically submit a password to curl when it asks for it? ...
6
votes
1answer
5k views

export HTTP_PROXY and special characters in passwd

Suppose for the sake of argument my password below is abc123@ I need to authenticate my linux machine through a corporate proxy to get patches and updates... normally I'd use this: export ...
6
votes
3answers
625 views

“no such user” but user is in passwd file

Looking at the files in /etc/: /etc/group:lbutler:*:1005: /etc/master.passwd:lbutler:$6$s..../:1005:1005::0:0:L Butler:/home/lbutler:/bin/bash /etc/passwd:lbutler:*:1005:1005:L ...
6
votes
4answers
3k views

SSH authentication: either SSH keys or one time password

I have an Ubuntu 10.04 Linux server that I normally ssh into (from my home machine) using ssh key authentication. However, sometimes I need to ssh remotely from potentially insecure machines (like ...
6
votes
3answers
203 views

Passwords for newly created users?

I am fairly new to Linux and I have question regarding users. When I use the useradd command I don't specify a password. I must use the passwd command afterwards. Does this mean that the user is ...
6
votes
1answer
151 views

Why do we need an expiration period?

Why is there a gap between the expiration of an account and its complete deactivation, when one can no longer log in or change his password when it became expired?
6
votes
4answers
284 views

How to log into database via script securely?

I am wondering about whether it is acceptable (security-wise) to have database login credentials (user/pass) set in an environment variable or passed in as a command-line parameter? Both of these ...
6
votes
1answer
2k views

GNOME-keyring KWallet integration?

I use some GNOME apps, and some KDE apps, so some of them use G-keyring and some KWallet... What I would like to have is a single place for managing passwords. Is there a way to integrate G-keyring ...
6
votes
3answers
66 views

different passwords depending on plugged-in devices

I would like to have different passwords for my account(s): When (e.g.) a certain USB stick is plugged in then an easy password is to be used. The idea is: If I leave my computer then I take the stick ...
6
votes
3answers
2k views

Logged on via ssh-key, can I reset my account password?

I am logged in on a server via sshkey (ssh -i /home/me/.ssh/ssh-key me@server). I got sudo rights on that server from the admin, but I can't exercise them, since I forgot my actual Unix password (or ...
6
votes
2answers
79 views

Linux graphical password dialog trick security

When we run a command by sudo, the password is asked [sudo] password for user If the sudo is not typed the password should not be asked. If asked, I would assume it as a fraud by the application. ...
6
votes
1answer
323 views

Any random password results in successful login on tty

I can login to my machine (FreeBSD 9.1-RELEASE) for any user (for example: root or operator or any that exists in /etc/passwd) with any random password that I type... I tried to reset password for ...
6
votes
1answer
215 views

epiphany plugin for password storage

I am looking for a keepass plugin for epiphany. Something like PassIFox for Firefox: PassIFox "behaves" like a new password storage for firefox - and redirects all queries (fetch/store etc..) to ...
5
votes
3answers
3k views

Why is the 'sudo' password different than the 'su root' password

On my personal machine, I often type sudo in front of certain commands in order to accomplish administrative tasks. I had hoped to avoid doing this throughout the day, by typing su root and providing ...
5
votes
3answers
1k views

Remote shell script Enter passphrase for

How can I run a script to log into a remote server and execute a remote ssh command without entering in my passphrase? For example: When I log onto a remote server and execute the git pull command I ...
5
votes
2answers
769 views

How to disable the try again password in ssh command

I want the ssh command to only allow one chance in typing the password, if the password was wrong at the first time the ssh will return Permission denied (publickey......). Is there a flag that ...
5
votes
1answer
1k views

Not able to set password in ArchLinux

I logged in as root and created a new account: # useradd -d /home/onie -m onie # su onie Now I try to set the password for onie myself using the passwd command, but it's asking for my current ...
5
votes
2answers
322 views

How to set default password algorithm to sha512 on Linux?

on AIX, it would be a simple: chsec -f /etc/security/login.cfg -s usw -a pwd_algorithm=ssha512 Question: But how can we set the default password algorithm to sha512? UPDATE: I think pwd_algorithm ...
5
votes
1answer
388 views

No password to run command as root for fixed command? [duplicate]

Is it possible to define a rule in sudoers to allow one user to run one well defined command as root, without password or other authentication except being the right user? Are there alternatives to ...
5
votes
3answers
3k views

Force Firefox to remember passwords on particular sites

Usually, when I log into a website with username and password, Firefox asks whether it should remember the login details. When I click yes, next time I visit the website, the username and password ...
5
votes
2answers
1k views

How to check for empty passwords?

Looking at all the ssh-login attempts by script-kiddies I assume that there are messed up systems connected to the internet that have password-less accounts set up. But how to check a Linux/Unix ...
5
votes
2answers
475 views

Why is 8 numbers considered a “strong” password?

Just curious as to why 8 numbers are accepted as a password in linux (CentOS if it matters) and not 8 characters on a non-dictionary word. It's 10 vs 26 per digit after all. (52 counting CaSe ...
5
votes
1answer
410 views

sudo testing for credentials

I have a working bash script, that may run from 0 to 8-9 minutes. It requires sudo if it finds a problem and needs to change permissions/ownership on a file. I do not want to wait for the sudo prompt, ...
5
votes
2answers
969 views

How to see password as we type it

In debian wheezy terminal i type su - It ask for password, which i type but it dont show anything as Password: I want to it to show at least some asterisks as the placeholder for the password ...
5
votes
1answer
3k views

How to reset KDE wallet password in linux?

I have installed OpenSUSE on my laptop. I am trying to connect to my wifi. I entered my wifi password (correctly) and then it is asking for my KDE wallet password. I set the KDE password but forgot ...
5
votes
2answers
3k views

Graphically ask for password in a bash script and retain default sudo timeout setting

The sudo -A (SUDO_ASKPASS) option apparently causes sudo to lose the timeout (e.g., timestamp_timeout) setting. I want to use the sudo -A option but I want to retain the default timeout (e.g., 15 ...
5
votes
1answer
310 views

Automated ssh login with passphrase?

Logging onto a machine over ssh typically requires a password to be entered before access is granted. Alternatively, a key/certificate (without a passphrase) can be installed onto the remote machine ...
5
votes
2answers
4k views

Another account with same uid as root gets prompted to set new password for root, not itself

After upgrading the os from 5300-06 to 5300-11, this weird behaviour happened. My system had another unix account, let's call it "abc", purposely configured its uid to 0 for working as a root with ...
5
votes
2answers
3k views

Why SSH is asking for my private key password each time

Since yesterday, each time I try to connect to an ssh server, I got asked for my password. What should I do to make SSH not ask for my password each time.
5
votes
1answer
2k views

Changing password in multiple boxes using script

I'm working in a environment which has around 400 AIX boxes. I don't have root access and I'm a normal user. The environment has no LDAP kind of centralized mechanism for authentication so the ...
5
votes
1answer
3k views

Preventing `passwd` for asking for the local password

I have setup the sever to only use LDAP for authentication by using authconfig-tui. Everything works well but, when I run passwd, I get two prompts for a password: [beamin@rhel6-test-server1 ~]$ ...
5
votes
4answers
2k views

automatic passwordless ssh at login/restart

I want to have passwordless ssh to persist even after after I restart or logoff and then login. Somehow I have to run ssh-agent and use command ssh-add at login. In a tutorial I read that I should add ...
5
votes
1answer
617 views

Save password in bash script for multiple queries

I would like to know if there is a safe way to only be queried for a password once in a custom bash script, and then save it somehow to be used for later needs. At the end of the script it should be ...
5
votes
2answers
2k views

Can KWallet manage my ssh passwords?

I need a way to store some SSH passwords. Note that these are login passwords which I need to pass to ssh; key authentication is unfortunately not an option. I'd like to be able to have KWallet fill ...
4
votes
3answers
734 views

Any disk encryption that locks itself for some time after a number of failed attempts?

Is there any way to have your disk/partition/file encrypted (in Linux or as a hardware encryption; no Windows here) in such way that it locks itself for say 10 minutes after say 3 failed unlock ...
4
votes
3answers
1k views

Stracing su and ssh shows the password. Is this a security flaw or am I missing something?

I'm currently fascinated by strace so, being new to it, I decided to play around a little. As suggested by the question title, I tried both strace su and strace ssh. Both commands displayed the ...
4
votes
2answers
933 views

Sudo Su automated login

I want to automate the login process with sudo su. I have seen lot of questions on these, but none of them are working for me. Automate login with sudo and su Here's my what I tried so far echo ...
4
votes
3answers
1k views

SCP command with selected file and directories for download ask's for password for each new file or directory

On my Fedora 20 system I use scp a lot, and this is the second time I encounter this, when I run this command: scp -r -P PORT user@host:/home/user/something/{file1,folder1,folder2,folder3,folder4} ...
4
votes
3answers
508 views

Securely feeding a program with a password

After understanding the problem with using a password in the command line, I need to find a way of feeding a program with a password without it being a problem (without the password being recorded ...
4
votes
3answers
216 views

Automatic login via ssh (no GUI environment installed / no ssh-agent available)?

I have three systems, and I want to have them doing backups between them periodically. The two of them, have Debian Wheezy installed and the other one has Ubuntu 12.04 installed. Only the Ubuntu has a ...
4
votes
3answers
11k views

How to take 'password' like input in shell script? [duplicate]

Possible Duplicate: How to hide commands typed in a Linux shell? Reading passwords without showing on screen in Bash Scripts I would like to take a password as input, but I want user to ...
4
votes
2answers
2k views

/etc/shadow date of last password change—UTC or local time?

man 5 shadow gives the following description of the third field in each line: The date of the last password change, expressed as the number of days since Jan 1, 1970. The value 0 has a ...
4
votes
3answers
169 views

How to unlock account for public key ssh authorization, but not for password authorization?

The ssh won't let me login, because account is locked. I want to unlock the user on my server for public key authorization over ssh, but do not enable password-ed login. I've tried: # passwd -u ...
4
votes
2answers
200 views

Why rejection of password is much slower than acceptance of it? [duplicate]

In both my Linux and OSX machines when I type in the password to login, a correct password is accepted immediately. However, if I type a wrong password, checking process takes much longer. How is ...
4
votes
2answers
3k views

Two ways to lock a password but only one to unlock

CentOS 6 Linux has two ways to lock a password: passwd -l usermod -L Today I found out, that they do something different. passwd writes two exclamation marks into the shadow file. # passwd -d ...