Questions regarding password-based authentication and password management

learn more… | top users | synonyms (1)

6
votes
3answers
158 views

Force Firefox to remember passwords on particular sites

Usually, when I log into a website with username and password, Firefox asks whether it should remember the login details. When I click yes, next time I visit the website, the username and password ...
6
votes
1answer
280 views

Any random password results in successful login on tty

I can login to my machine (FreeBSD 9.1-RELEASE) for any user (for example: root or operator or any that exists in /etc/passwd) with any random password that I type... I tried to reset password for ...
6
votes
1answer
192 views

epiphany plugin for password storage

I am looking for a keepass plugin for epiphany. Something like PassIFox for Firefox: PassIFox "behaves" like a new password storage for firefox - and redirects all queries (fetch/store etc..) to ...
5
votes
3answers
19k views

Shell Script for logging into a ssh server

I tried writing a shell script which can do automatic login into a ssh server using password which is mentioned in the script. I have written the following code: set timeout 30 /usr/bin/ssh -p 8484 ...
5
votes
3answers
613 views

Remote shell script Enter passphrase for

How can I run a script to log into a remote server and execute a remote ssh command without entering in my passphrase? For example: When I log onto a remote server and execute the git pull command I ...
5
votes
1answer
173 views

No password to run command as root for fixed command? [duplicate]

Is it possible to define a rule in sudoers to allow one user to run one well defined command as root, without password or other authentication except being the right user? Are there alternatives to ...
5
votes
2answers
364 views

How to disable the try again password in ssh command

I want the ssh command to only allow one chance in typing the password, if the password was wrong at the first time the ssh will return Permission denied (publickey......). Is there a flag that ...
5
votes
1answer
3k views

export HTTP_PROXY and special characters in passwd

Suppose for the sake of argument my password below is abc123@ I need to authenticate my linux machine through a corporate proxy to get patches and updates... normally I'd use this: export ...
5
votes
2answers
937 views

How to check for empty passwords?

Looking at all the ssh-login attempts by script-kiddies I assume that there are messed up systems connected to the internet that have password-less accounts set up. But how to check a Linux/Unix ...
5
votes
2answers
567 views

How to see password as we type it

In debian wheezy terminal i type su - It ask for password, which i type but it dont show anything as Password: I want to it to show at least some asterisks as the placeholder for the password ...
5
votes
1answer
258 views

Automated ssh login with passphrase?

Logging onto a machine over ssh typically requires a password to be entered before access is granted. Alternatively, a key/certificate (without a passphrase) can be installed onto the remote machine ...
5
votes
2answers
2k views

Why SSH is asking for my private key password each time

Since yesterday, each time I try to connect to an ssh server, I got asked for my password. What should I do to make SSH not ask for my password each time.
5
votes
4answers
156 views

How to log into database via script securely?

I am wondering about whether it is acceptable (security-wise) to have database login credentials (user/pass) set in an environment variable or passed in as a command-line parameter? Both of these ...
5
votes
4answers
2k views

automatic passwordless ssh at login/restart

I want to have passwordless ssh to persist even after after I restart or logoff and then login. Somehow I have to run ssh-agent and use command ssh-add at login. I read here to add following lines to ...
5
votes
1answer
1k views

GNOME-keyring KWallet integration?

I use some GNOME apps, and some KDE apps, so some of them use G-keyring and some KWallet... What I would like to have is a single place for managing passwords. Is there a way to integrate G-keyring ...
5
votes
3answers
44 views

different passwords depending on plugged-in devices

I would like to have different passwords for my account(s): When (e.g.) a certain USB stick is plugged in then an easy password is to be used. The idea is: If I leave my computer then I take the stick ...
5
votes
1answer
173 views

Save password in bash script for multiple queries

I would like to know if there is a safe way to only be queried for a password once in a custom bash script, and then save it somehow to be used for later needs. At the end of the script it should be ...
5
votes
1answer
983 views

Changing password in multiple boxes using script

I'm working in a environment which has around 400 AIX boxes. I don't have root access and I'm a normal user. The environment has no LDAP kind of centralized mechanism for authentication so the ...
5
votes
1answer
3k views

Preventing `passwd` for asking for the local password

I have setup the sever to only use LDAP for authentication by using authconfig-tui. Everything works well but, when I run passwd, I get two prompts for a password: [beamin@rhel6-test-server1 ~]$ ...
5
votes
2answers
1k views

Can KWallet manage my ssh passwords?

I need a way to store some SSH passwords. Note that these are login passwords which I need to pass to ssh; key authentication is unfortunately not an option. I'd like to be able to have KWallet fill ...
4
votes
3answers
963 views

Stracing su and ssh shows the password. Is this a security flaw or am I missing something?

I'm currently fascinated by strace so, being new to it, I decided to play around a little. As suggested by the question title, I tried both strace su and strace ssh. Both commands displayed the ...
4
votes
2answers
2k views

/etc/shadow date of last password change—UTC or local time?

man 5 shadow gives the following description of the third field in each line: The date of the last password change, expressed as the number of days since Jan 1, 1970. The value 0 has a ...
4
votes
2answers
240 views

Allow user1 to “su - user2” without password

I need to allow user martin to switch to user martin-test without password su - martin-test I think this can be configured in /etc/pam.d/su. There are already some lines in that file which can be ...
4
votes
2answers
9k views

How do I set the password of a new user after the account has already been created?

I used the 'useradd' command to create a new account, but I did so without specifying the password. Now, when the user tries to log in, it asks him for a password. If I didn't set it up initially, ...
4
votes
1answer
250 views

How to reset password on an encrypted fs?

I've got a laptop which I haven't used since the last summer vacation: I did put Debian 7 on it and used Debian's feature to fully encrypt the disk, besides a tiny bootloader (or a tiny partition) I ...
4
votes
4answers
185 views

Login into a GNU/Linux distribution is taking too long

So, When I try to login with my username and password (in tty), and insert a wrong password, I need to wait around 5 seconds for the system to tell me that the password is wrong. Why the validating ...
4
votes
3answers
365 views

Something like pwgen-win for linux?

Is there some kind of pwd generator for Linux that has a nice GUI and options like this one for Windows? I know that there is pwgen, but as far as I know it does not support mouse/keyboard entropy and ...
4
votes
2answers
123 views

Determining the Password Status of a User

I have a debian box that I connect to via SSH. I have removed the password from the users root, and my personal account using the instructions here, and set up a public/private key pair so I can log ...
4
votes
1answer
984 views

Not able to set password in ArchLinux

I logged in as root and created a new account: # useradd -d /home/onie -m onie # su onie Now I try to set the password for onie myself using the passwd command, but it's asking for my current ...
4
votes
1answer
371 views

Encrypt word X to /etc/shadow encryption

I've changed my password to X and the shadow file has changed to: ahmad:$1$oYINSKjP$eCkCtJV/2dXerAD57WQPj/:15425:0:99999:7::: I see the encrypted X as $1$oYINSKjP$eCkCtJV/2dXerAD57WQPj/. How can I ...
4
votes
2answers
318 views

Password protecting a system file? (e.g. /etc/resolv.conf)

I am trying to parental control myself by restricting web access via OpenDNS. The OpenDNS account password will be handed to someone trustworthy. Now, I want to put some restriction on the ...
4
votes
3answers
1k views

scp: localhost password not accepted

I'm attempting to copy a public key to a remote server. I'm logged in locally as [localname] and the key resides locally at ~/.ssh/. I'm also ssh'd into [remote.com] as [remotename], and attempting to ...
4
votes
1answer
153 views

sudo testing for credentials

I have a working bash script, that may run from 0 to 8-9 minutes. It requires sudo if it finds a problem and needs to change permissions/ownership on a file. I do not want to wait for the sudo prompt, ...
4
votes
1answer
6k views

How to create a user with given password on SuSE from command line?

I need to create bunch of new users with given password. What I want is a script that I would pass the user name of new user and it will create/add the user and set its password. (the password is the ...
4
votes
3answers
238 views

Randomise or shred memory of an application

Is it possible to randomise or shred memory of a particular application just after its life ends, or better, whenever it deallocates some memory? A command-line utility like this would be perfect: ...
4
votes
1answer
778 views

Why ssh-copy-id prompts for the local user password three times?

Noticed from my previous question that when trying to copy an SSH public key to a remote host via ssh-copy-id, I am prompted for the local user password three times: ssh-copy-id myuser@myserver ...
4
votes
2answers
5k views

Disable svn plaintext password storage for all users

By default, Subversion allows users to save their password in plaintext in ~/.subversion/auth/svn.simple. I'm investigating options for storing encrypted passwords in svn, but at the very least and ...
4
votes
2answers
1k views

Two-step remote ssh without password

I'm looking to ssh from my localhost to a remote server, and from there to a remote computer. I currently have it set up so that the remote computer and remote server have passwordless ssh-ing set up ...
4
votes
3answers
2k views

Logged on via ssh-key, can I reset my account password?

I am logged in on a server via sshkey (ssh -i /home/me/.ssh/ssh-key me@server). I got sudo rights on that server from the admin, but I can't exercise them, since I forgot my actual Unix password (or ...
4
votes
1answer
89 views

Where are passwords stored and how are they encrypted in OS X?

I know that on a Linux system passwords are stored in /etc/shadow and are salted and encrypted using a one way hashing algorithm like MD5, SHA-256 or SHA-512. It looks like there is no /etc/shadow ...
4
votes
1answer
875 views

Validate AIX Password for root from script

Looking for a way in a shell script to validate the password for for root on an (AIX) matches a standardized plain text password. This query is similar to another one on this site. I have access to ...
4
votes
1answer
1k views

Password expiry in Samba v3.0

I'm trying to setup a Samba server which asks new users to change their password on their first login and makes passwords expire after 90 days. I was able to setup the 90 days expiry date but the ...
4
votes
1answer
41 views

how to verify if root password changed correctly

I have an OpsWare task, that changes root passwords on a massive number of servers, by replacing the root's password hash in /etc/shadow file. I need a script of some sort, which preferably runs ...
4
votes
1answer
942 views

Samba passwords expiring in x days - how do we fix them to not expire

We use OpenLDAP and Samba v3. Recently some Samba-defined users (no accounts on the shared linux server) started being listed in logwatch as having their passwords come up to "will expire"...I ...
3
votes
3answers
311 views

Securely feeding a program with a password

After understanding the problem with using a password in the command line, I need to find a way of feeding a program with a password without it being a problem (without the password being recorded ...
3
votes
3answers
5k views

How to take 'password' like input in shell script? [duplicate]

Possible Duplicate: How to hide commands typed in a Linux shell? Reading passwords without showing on screen in Bash Scripts I would like to take a password as input, but I want user to ...
3
votes
2answers
314 views

Two ways to lock a password but only one to unlock

CentOS 6 Linux has two ways to lock a password: passwd -l usermod -L Today I found out, that they do something different. passwd writes two exclamation marks into the shadow file. # passwd -d ...
3
votes
2answers
2k views

Second field in /etc/shadow

If the second field of the /etc/shadow file is set to !!, does it mean that the account is disabled? Or does it mean that the account is active with no password assigned?
3
votes
3answers
217 views

Changing user password through GUI app

I was making a GUI application to manage users and groups in Linux! I'm done with the part where it creates a new user, but stuck with the part where it gives the newly created user a new password. ...
3
votes
2answers
317 views

How to Create a Encrypted Password

I want to know how can I create a encrypted password in Ubuntu 14.04 TLS. Tried this: makepasswd --crypt-md5 password_here Did not worked for me throwing this Error sysadmin@localhost:~$ ...