Questions regarding password-based authentication and password management

learn more… | top users | synonyms

2
votes
1answer
413 views

Why 'mkpasswd -m sha-512' produce different result every time it is called?

I am using this function to create a password in the shadow file $ mkpasswd -m sha-512 password $6$o50n4EfNOBzfs$K5l5AcOI5e0I9n2df0LmR11OLSPKSVM6AGBOnWVfDDfMubb46MrAj0zehdLNEoYzD2fj5q4XUdDwexj/dWLHy/ ...
0
votes
0answers
259 views

Cracking .cap file without dictionary

.cap file taken by airodump handshake I need to crack .cap file with bruteforce attack If the password between 8 and 12 letter containing characters+numbers+symbols I tried simple crunch command ...
1
vote
1answer
63 views

Automating setup of the SSH tunnel

I need to frequently login to many machines but I can only login to them from a proxy machine or using an SSH tunnel (by tunneling through that proxy machine). The problem is that I cannot use ...
11
votes
5answers
1k views

What does “,,,” mean in the 5 column in /etc/passwd file? [duplicate]

There are 7 fields in the /etc/passwd file :username,Password,User ID (UID),Group ID (GID),User ID Info,Home directory,Command/shell. Part of rows in my /etc/passwd : avahi:x:105:110:Avahi mDNS ...
0
votes
0answers
161 views

migrating local users to LDAP

I have sucessfully setup LDAP and LAM on a raspberry pi in my home network. I have several Linux machines around the house, some Windows machines, aswell as a QNAP TS-210 NAS. They all have the same ...
1
vote
2answers
82 views

providing password to ssh [duplicate]

The situation: I have an IP : 192.168.1.1 $IP username : root (or whatever) $USER and a passwd: foo $PASSWD Is there a way to give $PASSWD to ssh ? like PASSWORD_VAR=$PASSWD ssh -l $USER $IP ...
1
vote
1answer
56 views

Different password for login and sudo - security concerns

I'm planning to follow the steps described in this answer to have a different password to log in and sudo. The reason is that I want a high security password to access my account or unblock the ...
0
votes
1answer
100 views

execute script and enter password from one command

I have a script that uses CUPS lpstat -h command. However, the remote server I am trying to get a response from asks for a password. But I need to execute this script from within Nagios, so I have ...
1
vote
3answers
102 views

How can I tell if my password is set?

I have been using this server for a few months. At the beginning I sent the admin my public ssh key, and he set up the account for me, and I have only used the ssh key to log in. I definitely didn't ...
11
votes
2answers
284 views

A consistent and safe approach to passwordless accounts with SSH

I must admit that I like servers without passwords in some cases. A typical server is vulnerable to anyone who has physical access to it. So in some cases it is practical to lock it physically and ...
0
votes
0answers
18 views

Returning from a sleep the desktop displays shortly (before entering password), privacy issue

OS: Linux mint 17.1 Cinnamon 64-bit Cinnamon version 2.4.6 Intel Celeron: 900 @ 2.20Ghzx1 Memory 2 Gb Graphics Card: Intel Mobile 4 series integrated When I return to my computer after it has been ...
1
vote
1answer
24 views

How to generate many passwords with kpcli?

Keepass has password generating function. Q: How can I generate example: 400 000 passwords with kpcli to a text file?
0
votes
1answer
81 views

NCR unix system v/386 release 4 recover root password

we have NCR 3455 system from long time as attached all information for server (images) , so we need your help to assist us to get root password which lost it , really we appreciate your efforts if ...
1
vote
2answers
270 views

How strong is the encryption of a zip file in Linux Mint

Zip encryption has had often a bad reputation of being weak, but some would argue that a zip file encrypted using certain algorithms (such as by using AES), together with strong password, is really ...
4
votes
3answers
772 views

Any disk encryption that locks itself for some time after a number of failed attempts?

Is there any way to have your disk/partition/file encrypted (in Linux or as a hardware encryption; no Windows here) in such way that it locks itself for say 10 minutes after say 3 failed unlock ...
1
vote
1answer
39 views

How to install software on to multiple linux clients

Is there any free way or method for ssh that could be used to install and update linux clients for a ubuntu laptop. I do not have password less ssh but the admin password is the same for all of the ...
3
votes
1answer
63 views

How passwd command from non-root account succeeds

I am trying to change my password as a non root user : passwd The data is updated in /etc/shadow, but checking the permission i get: ---------- 1 root root 6076 Jan 27 17:14 /etc/shadow cat ...
1
vote
2answers
206 views

Can't enter GNU GRUB boot menu!

so I booted up an old Linux Mint machine today and I can't seem to remember the password. So I wanted to reset the password using the instructions on Mint's website but when I hold shift the GNU GRUB ...
1
vote
0answers
301 views

removing `nullok` from system-auth prevents any root password

[ this is a follow-up on my post on ServerFault : http://serverfault.com/questions/661136/root-accepts-any-password-how-to-change-to-a-real-password ] On an old system the root account accepts any ...
3
votes
2answers
408 views

Where does Linux store Wifi passwords?

I am going to write a simple replacement for Ubunutu's NetworkManager. Is there any place where the Wifi network passwords would be stored in Linux? I know about ...
2
votes
1answer
100 views

NIS and /etc/passwd

Shadow passwords are to be avoided in a NIS server, as suggested in this guide at paragraph 7.6. So: in a NIS server (a Unix or Unix-like system), should all the users be migrated to /etc/passwd from ...
2
votes
0answers
587 views

Password protected zip archives open without password

I have a zip archive that is password protected in linux(the password is "secret"). However, whenever I try to open the zip file I am not prompted for a password or anything. I also have a python ...
1
vote
1answer
63 views

SSH not giving indication that the public key is being used for login

I have a public key to log on to my server. This key is password protected. However, when I log in to my server, there's no indication that the key is ever used. I just log in with my password as ...
2
votes
6answers
183 views

What are the Implications of Passwordless SSH

If UNIX users reach servers via SSH, and we only want to allow pubkey logins, are there any other items that need to be added to this list, that I should be concerned with? Allow pubkey login in ...
6
votes
2answers
117 views

Linux graphical password dialog trick security

When we run a command by sudo, the password is asked [sudo] password for user If the sudo is not typed the password should not be asked. If asked, I would assume it as a fraud by the application. ...
1
vote
1answer
847 views

how to pass a password with a cron job safely?

I have a site map generator script placed in this URL http://www.mydomain.com/admin/sitemapgen/ However this URL is protected with an username and a password in auth_type basic method. I need to ...
2
votes
2answers
102 views

How can I configure Linux to not require sudo for specific commands for specific users?

I am sure this question has been asked before but I can't find an answer. I would like to configure Linux so that when I enter specific commands (e.g. apt-get), I wouldn't have to enter password as I ...
2
votes
2answers
305 views

Warn about password expiration without forcing change

It's pretty simple. I would like to figure out what combination of changes in /etc/login.defs and/or /etc/pam.d/system-auth-ac I would need to perform to allow the following behavior: I want a ...
0
votes
1answer
304 views

Password fail delay is too long - Linux Mint 17

As per the title, the delay after a failed password is very long. In /etc/pam.d/login, FAIL_DELAY is configured as auth optional pam_faildelay.so delay=3000000 however, actual delay is ...
0
votes
1answer
98 views

Mint maximum user passtext length?

Strangely, I can use a long passtext, approximately 64 words long, for disk encryption, but I'm having trouble with user password lengths. Certain steps fail like the installer or unlocking the ...
1
vote
1answer
116 views

Alias for perl script

So far while surfing web I've discovered nice addition to my gpg password generator and I've decided to adjust my alias with these commands. Here is the code gpg --gen-random 1 20 | perl -ne'print ...
2
votes
1answer
157 views

upload and dowload the files from server without giving password

I want to download the file from sever by using cron job, so I need to use scp command without giving password by keyword. How do I do so?
0
votes
1answer
81 views

When I boot Linux, it asks for password, pretends to proceed, but then returns to asking it again

I turned off my computer by pressing a turn off button for a long time. Then I turned it on. Usually it doesn't ask for password, but this time it did. So I tried to enter my password and it seemingly ...
1
vote
2answers
732 views

How does openssl decrypt a password

I'm learning about encryption and decryption on linux and php. So I have three questions about openssl and how it generates password hashes. 1- So say I generated a password with the linux command ...
4
votes
3answers
2k views

chroot permission denied! But Im root!

I am trying to chroot into an old HD to change a forgotten password, but chroot says permission denied? what gives? I am root! The harddrive I am trying to chroot into is an old version of edUbuntu ...
0
votes
1answer
72 views

Disable root password caching

How can I disable root password caching? I looked at This Question, but I didn't really understand how to do it, is not the same as my question but it is indirectly related. I tried adding this to ...
4
votes
2answers
119 views

SSH password requested when in Tmux

When I connect to my remote machine I do authenticate using a rsa key (I think is rsa, don't remember). If I do ssh from a regular shell I get logged on the machine without a password. However if I ...
1
vote
0answers
26 views

How the /etc/passwd file is accessed by passwd command [duplicate]

My question is we are the normal user. We can't access the file which we didn't have the permission. We are executing the passwd command then how that command is able to access that file. We are ...
2
votes
1answer
74 views

Repetition of password while rsync-ing files?

I'm using a script to download files in two steps: First, I'm downloading a file containing a list of files from a server to my host machine using rsync. Then, I'm using rsync to download the ...
1
vote
0answers
59 views

Pass/Firefox master key integration?

I handle my passwords with pass, and I use the Firefox master password functionality. The master password is rather long and "safe" and stored in pass along with the others. For now, my usual Firefox ...
4
votes
1answer
84 views

password store storing some passwords in plain text

I red about the password management program pass in a question on this forum and decided to try it. I installed from the download page (tarball 1.6.3). I created some test entries and then some real ...
1
vote
1answer
66 views

How can I see the password of another user in Linux?

I made 4 users on my server, but unfortunately I changed the password of the "first" user while configuring the server, but I don't know how I changed it. How can I see the password of users in root?
1
vote
2answers
3k views

What is Lubuntu default password when it's distributed by magazines?

A friend gave me an old Dell to fix for her daughter. So I put Lubuntu on it. I had a disk with Lubuntu on it that came with one of my magazines, so I installed it. This machine won't boot from USB ...
2
votes
1answer
151 views

how to disable gcr-prompter dialogs?

Whenever i save *.gpg files (symmetric password) using emacs the gcr-prompter displays dialog and asks me for password twice! It's so annoying, especially that my emacs remembers the password i type, ...
3
votes
1answer
534 views

SSH for user without a login password

I have created a user without a password $getent passwd logcoll logcoll:x:998:999:Log Collector,,,:/var/backups/logcoll:/bin/sh This user has no password, and this machine requires users to login ...
4
votes
3answers
248 views

Automatic login via ssh (no GUI environment installed / no ssh-agent available)?

I have three systems, and I want to have them doing backups between them periodically. The two of them, have Debian Wheezy installed and the other one has Ubuntu 12.04 installed. Only the Ubuntu has a ...
1
vote
1answer
63 views

sudoers file and passwd only for selected group

I have 3 users in "production" group: John, Steve and Bob. In "sales" group are: Sam and Jack. Now, I would like to give John permition to change passwords of all users but only in "production" ...
0
votes
1answer
179 views

Is there a way to specify the list of private keys to add to ssh-agent?

After a few hours of digging, I finally found out why my computer stopped asking me for my key(s) using gnome ssh-askpass. It was very simple, but took me forever to figure out because... well... most ...
3
votes
1answer
196 views

Export passwords from the `pass` password manager

I've been using the pass password manager for a year or so now, and it's awesome, but sometimes I like to test other password managers and then I need my passwords back. So far I've just been adding ...
2
votes
3answers
402 views

Writing a script that outputs local users and their password expiration date

I'm new to Linux and scripting, and was doing a practice problem and am stuck on it. I'm supposed to write a script that outputs local users real name and their password expiration information. This ...