Questions regarding password-based authentication and password management
4
votes
2answers
228 views
Password protecting a system file? (e.g. /etc/resolv.conf)
I am trying to parental control myself by restricting web access via OpenDNS. The OpenDNS account password will be handed to someone trustworthy. Now, I want to put some restriction on the ...
4
votes
3answers
1k views
scp: localhost password not accepted
I'm attempting to copy a public key to a remote server. I'm logged in locally as [localname] and the key resides locally at ~/.ssh/. I'm also ssh'd into [remote.com] as [remotename], and attempting to ...
4
votes
3answers
1k views
SSH authentication: either SSH keys or one time password
I have an Ubuntu 10.04 Linux server that I normally ssh into (from my home machine) using ssh key authentication. However, sometimes I need to ssh remotely from potentially insecure machines (like ...
4
votes
3answers
188 views
Randomise or shred memory of an application
Is it possible to randomise or shred memory of a particular application just after its life ends, or better, whenever it deallocates some memory?
A command-line utility like this would be perfect:
...
4
votes
1answer
433 views
Why ssh-copy-id prompts for the local user password three times?
Noticed from my previous question that when trying to copy an SSH public key to a remote host via ssh-copy-id, I am prompted for the local user password three times:
ssh-copy-id myuser@myserver
...
4
votes
2answers
2k views
Disable svn plaintext password storage for all users
By default, Subversion allows users to save their password in plaintext in ~/.subversion/auth/svn.simple. I'm investigating options for storing encrypted passwords in svn, but at the very least and ...
4
votes
2answers
1k views
Why SSH is asking for my private key password each time
Since yesterday, each time I try to connect to an ssh server, I got asked for my password. What should I do to make SSH not ask for my password each time.
4
votes
1answer
2k views
Preventing `passwd` for asking for the local password
I have setup the sever to only use LDAP for authentication by using authconfig-tui. Everything works well but, when I run passwd, I get two prompts for a password:
[beamin@rhel6-test-server1 ~]$ ...
4
votes
1answer
667 views
Password expiry in Samba v3.0
I'm trying to setup a Samba server which asks new users to change their password on their first login and makes passwords expire after 90 days.
I was able to setup the 90 days expiry date but the ...
3
votes
3answers
410 views
Stracing su and ssh shows the password. Is this a security flaw or am I missing something?
I'm currently fascinated by strace so, being new to it, I decided to play around a little. As suggested by the question title, I tried both strace su and strace ssh. Both commands displayed the ...
3
votes
3answers
8k views
Shell Script for logging into a ssh server
I tried writing a shell script which can do automatic login into a ssh server using password which is mentioned in the script. I have written the following code:
set timeout 30
/usr/bin/ssh -p 8484 ...
3
votes
3answers
137 views
Securely feeding a program with a password
After understanding the problem with using a password in the command line, I need to find a way of feeding a program with a password without it being a problem (without the password being recorded ...
3
votes
3answers
766 views
How to take 'password' like input in shell script? [duplicate]
Possible Duplicate:
How to hide commands typed in a Linux shell?
Reading passwords without showing on screen in Bash Scripts
I would like to take a password as input, but I want user to ...
3
votes
2answers
1k views
/etc/shadow date of last password change—UTC or local time?
man 5 shadow gives the following description of the third field in each line:
The date of the last password change, expressed as the number of days since Jan 1, 1970.
The value 0 has a ...
3
votes
3answers
296 views
Encrypt a password the same way mysql does
I've created a user ... but forgotten the password
mysql> create user 'blayo'@'%' identified by 'right';
Which Linux command line tool can encrypt the password the same way mysql 5.5 does ?
...
3
votes
2answers
2k views
How do I set the password of a new user after the account has already been created?
I used the 'useradd' command to create a new account, but I did so without specifying the password. Now, when the user tries to log in, it asks him for a password. If I didn't set it up initially, ...
3
votes
2answers
409 views
How to make a folder request root password to view execute?
I am running Ubuntu 10.04 LTS. I want to use my laptop to play music in a party. MY screensaver does not need a password to deactivate. I would like to allow people to use my computer to play the ...
3
votes
2answers
457 views
Is Open LDAP meant to work with the passwd command for Linux?
I've implemented an Open LDAP server in OpenSuSE 11.2 via the YaST GUI. I'm having success logging in from the local machine and other machines via LDAP. I am able to change LDAP user passwords via
...
3
votes
3answers
519 views
Why does this password fail AIX and Solaris rules
Had to reset my password on a couple of client servers today, and despite following the rules I get the message "Your password failed to meet: minimum of 2 non-alphabetic characters" back from the ...
3
votes
3answers
131 views
SSH asking for password after ssh-copy-id
I created a key on my machine with ssh-keygen. I copied the key to remote machine using ssh-copy-id.
Tried to connect to remote machine but it asked me the password. Both machines are ubuntu (local ...
3
votes
4answers
5k views
Can a linux user change their password without knowing the current password?
I'm setting up a few ubuntu boxes, and using opscode's chef as a configuration tool. It would be fairly easy to install public keys for each user on each of these servers, and disable password ...
3
votes
1answer
212 views
How to disable timeout of password prompt for partition decryption during boot?
I have a computer running OpenSUSE 12.1, 64-bit, default install.
How it works currently:
I turn on the computer
It goes through the boot process
At some point during boot, I am asked for password ...
3
votes
4answers
821 views
passing passwords to a script
I want to scp a file to a remote host, and from there, run a command on the file, and exit the remote session. If I write a usual script, call scp and then ssh, I am prompted to enter two passwords. ...
3
votes
1answer
204 views
Is it a good idea to use pwsafe - a password manager not updated since 2005?
I'm looking for a command-line Linux password-manager. It appears that pwsafe is the program most commonly used. However, its latest update was in 2005. Is it a good idea to use this? Has it been so ...
3
votes
2answers
1k views
Two-step remote ssh without password
I'm looking to ssh from my localhost to a remote server, and from there to a remote computer. I currently have it set up so that the remote computer and remote server have passwordless ssh-ing set up ...
3
votes
1answer
425 views
Debian wake up from suspend password
I am using Debian Squeeze.
When I suspend my laptop and wake it up again later, it doesn't ask for the system password. How do I fix this?
3
votes
1answer
164 views
Can linux use a mix of SHA-1 and CRYPT passwords?
We have an automated sync-routine that uses useradd to create new users on a Ubuntu 10.04 machine. The application launching the routine provided both username and CRYPT-encrypted password. However, ...
3
votes
1answer
2k views
Will a users password expire if I set the “maxexpired” to “-1”? [maxage not 0] - AIX
So under AIX 6, according to "lsuser" the user has the following settings:
maxexpired=-1
maxage=2
So this means that 2 weeks after the last password update of the user the password will expire, but ...
3
votes
1answer
477 views
Why does a user get prompted for password under AIX?
Users get prompted for password, and according to the lsuser -f username output:
expires=0
maxexpired=-1
maxage=13
users shouldn't be prompted for changing password.
Why does he has a change ...
3
votes
1answer
564 views
Change default for Nautilus (file_manager) from “Forget password immediately”?
When opening a tab which needs to mount a Samba share, Nautilus 2.30.1 displays a window:
Password required for share xxx on localhost
Password: [ ]
(*) Forget password immediately
( ) ...
3
votes
1answer
481 views
Validate AIX Password for root from script
Looking for a way in a shell script to validate the password for for root on an (AIX) matches a standardized plain text password. This query is similar to another one on this site. I have access to ...
3
votes
0answers
42 views
Restrict usage of the same password during a time period
I need to configure a server with some requisites on the password changing: in addition to other requisites, I need to ensure that, on a password change, it is not repeated (last 5 passwords) and ...
3
votes
0answers
335 views
ZIP password finders for Linux?
I'm trying to extract ZIP files for an encrypted archive I've forgotten the password for. So far I've found the tool fcrackzip which does what I want, but its own manpage states that it has numerous ...
2
votes
8answers
1k views
How to give a normal user permission to change root password
Please do not ask why, but is it possible to do it?
p/s: I know it's not a good thing, let's just say someone from the top management who is computer illiterate want some sort of control over the ...
2
votes
2answers
1k views
How to get hashed password in /etc/shadow using getpwnam()?
Apparently there is a function (getpwnam) that given a username, will return the appropriate entry in /etc/passwd with the other details for that user (shell, uid, gid, etc.).
However, I have no idea ...
2
votes
4answers
716 views
Can separate unix accounts share a username but have separate passwords?
On unix systems, each separate user account has a unique username. Passwords, then, are not unique - every distinct user could have the same exact password.
I want to do the converse. I want one ...
2
votes
4answers
808 views
Why can't I echo the password to fetchmail?
I'm trying to configure a fetchmail. Before I deal with the syntax of fetchmailrc ( I discovered that the level of bugginess of a problem is synergistic with the number of different aspects of the ...
2
votes
1answer
452 views
crypt() on different machines
Because of a hardware issue i need to migrate many virtual users to a new machine. Their passwords stored in MySQL encrypted with ENCRYPT which using crypt()eventually.
Maybe it's my fault but salt ...
2
votes
1answer
613 views
Does OpenBSD use bcrypt by default?
http://codahale.com/how-to-safely-store-a-password/
with what does OpenBSD store the password by default?
They say bcrypt is way more secure then hashing. I googled' it and obsd supports bcrypt, but ...
2
votes
2answers
203 views
Finding root password
I installed a Ubuntu and it only has a user. I can login to the system without login. It doesn't ask me for un/pwd. but when I am in, and I want to run some commands as root (sudo), it ask for ...
2
votes
4answers
477 views
sudo without password - security? [duplicate]
Possible Duplicate:
What specific vulnerabilities am I creating by disabling the sudo password?
I'm involved yet again in the old argument on whether sudo without password is secure enough ...
2
votes
1answer
299 views
retrieve password on remote server
I normally ssh into a remote server, for which I previously set an option that allows me not to type my password every time. Now that I forgot it, is there any way to retrieve it?
2
votes
1answer
88 views
How to change the forgotten root password?
I am very new to Debian linux, I forgot my root password...actually I think I know what it is because it is the same password I have for pretty much everything but in the Terminal in tell me "Sorry, ...
2
votes
1answer
63 views
Apache boot without asking for passwd
So I'm maintaining a server which has a verified SSL certificate setup, however there is a password on the private key and so whenever apache is reboot, we get a message asking for the password. This ...
2
votes
1answer
2k views
How to create a user with given password on SuSE from command line?
I need to create bunch of new users with given password. What I want is a script that I would pass the user name of new user and it will create/add the user and set its password. (the password is the ...
2
votes
1answer
111 views
Where can I find a reference to the format of the comment field (field 5) of the /etc/passwd file?
In the /etc/passwd file on my system, the "comment" field, field 5, is inconsistent in its contents. I thought that I could extract it to get the full name of the user.
fullname=`awk -F: '$1 == name ...
2
votes
3answers
1k views
debian not accepting administrative password
I have XFCE Debian on an old PowerPC PowerBook G4. When I go to open Synaptic Package Manager, a window pops up asking for my administrative password. I enter the password I normally use for sudo in ...
2
votes
2answers
76 views
Equivalent of “passwd -sa” in RHEL?
I feel a little silly having to ask this, but: In Solaris you can issue a passwd -sa command which gives you (more or less) the same output as passwd -S userName does, except it prints out the status ...
2
votes
2answers
130 views
Is it possible (and a good idea) to do `pw lock root` on FreeBSD?
I have set up sudo on my FreeBSD server. As I now never want to log in as root anymore, I was wondering whether I should do sudo pw lock root.
My questions are:
Is this possible, without forever ...
2
votes
1answer
276 views
A local, centralized, secure way to store FTP login data, including passwords
I want to be able to store the login details all of my remote FTP accounts in one place, securely. Then I'd like clients like autofs/curlftpfs, Filezilla, etc to use this one store of passwords. I'm ...
