Tagged Questions

Questions regarding password-based authentication and password management

learn more… | top users | synonyms (1)

17
votes
3answers
335 views

Typical use case for a group password

I checked more than half a century worth Unix experience and neither my colleagues, nor myself has ever set a password on a group (sg and gpasswd). What would be a typical use case for a group ...
2
votes
1answer
265 views

How may I distinguish encryption algorithm of htpasswd?

I have an apache web server running on Debian Linux and I secure a certain directory with htaccess. I have no history or knowledge how the .htpasswd file was created. Apache documentations says that ...
1
vote
3answers
842 views

How to gain root privileges for specific user if we have root password? [closed]

Can someone suggest how can I change process privileges in Linux to root ? Assume, I have a normal process running under some user-consider me. Now my script should create some users using 'useradd' ...
2
votes
1answer
2k views

Unix last password change date

My understanding is that the last change date(in /etc/shadow) is the number of days since 01/01/1970 that the password was changed, but I'm seeing numbers like 19708 which translate to 17/12/2023 ...
12
votes
4answers
2k views

Can you give a user account multiple passwords?

I want to assign 2 passwords to a single account. What I want to know is 1) is this possible, and 2) what are the security implications of this? The reason I want to do this is because I'm currently ...
4
votes
1answer
8k views

How to set password for users in AIX using single line command?

Is there any way in which I can set the password for a newly created user account in AIX in a one line command? I don't want to give any prompt to the user. If there is a command, it should set the ...
5
votes
2answers
556 views

How to disable the try again password in ssh command

I want the ssh command to only allow one chance in typing the password, if the password was wrong at the first time the ssh will return Permission denied (publickey......). Is there a flag that ...
2
votes
1answer
1k views

Subversion (svn) doesn't store passwords in gnome-keyring

I fight with svn since 2 hours to store my password inside the gnome keyring, but nothing worked. I'm on a fresh installed archlinux system with the following packages installed: acl 2.2.52-1 ...
3
votes
1answer
2k views

Resetting password in Linux Mint when disk is encrypted

I have a system (VM, actually) with Linux Mint 15 on it. The disk is encrypted, but I remember that password -- just not the password for my account. I've tried changing the command in GRUB from ro ...
5
votes
4answers
210 views

How to log into database via script securely?

I am wondering about whether it is acceptable (security-wise) to have database login credentials (user/pass) set in an environment variable or passed in as a command-line parameter? Both of these ...
5
votes
2answers
779 views

How to see password as we type it

In debian wheezy terminal i type su - It ask for password, which i type but it dont show anything as Password: I want to it to show at least some asterisks as the placeholder for the password ...
1
vote
5answers
16k views

How to Reset Forgotten Root Password in Fedora 19 from GRUB

YES, FEDORA 19. I saw a lot of information about how to do it but doesn't work with this version. All the tutorials explain the method for older versions of Fedora, i didn't found anything about ...
4
votes
1answer
112 views

Where are passwords stored and how are they encrypted in OS X?

I know that on a Linux system passwords are stored in /etc/shadow and are salted and encrypted using a one way hashing algorithm like MD5, SHA-256 or SHA-512. It looks like there is no /etc/shadow ...
3
votes
1answer
118 views

Solaris/OpenIndiana: Password for roles?

I've been gently experimenting with roles in Solaris, and wonder a bit about setting a password for it. I want the role I've created to be used by several users, so setting password to the same as ...
0
votes
1answer
223 views

Can the ~/.john/john.pot file be used forever?

If I use john for getting weak passwords in ex.: 2010, then can I use the john.pot file later or there could be situations when the hash is the same, but the passwords differ?
1
vote
1answer
1k views

ssh-agent: How to set it up so my CentOS server will only ask for passphrase once?

On my Macbook, my SSH private key is encrypted, but I never have to re-enter the passphrase even if I reboot the machine. The system must be unlocking it along with my user account. Is it possible ...
5
votes
1answer
2k views

Changing password in multiple boxes using script

I'm working in a environment which has around 400 AIX boxes. I don't have root access and I'm a normal user. The environment has no LDAP kind of centralized mechanism for authentication so the ...
6
votes
1answer
297 views

Any random password results in successful login on tty

I can login to my machine (FreeBSD 9.1-RELEASE) for any user (for example: root or operator or any that exists in /etc/passwd) with any random password that I type... I tried to reset password for ...
-1
votes
1answer
555 views

SSH key based login bypasses password policies

I noticed that logins via an SSH key bypass the LDAP password policies (password ageing, password warning, and password lockout due to failed attempts, etc). Is there any way to force key-based ssh ...
1
vote
2answers
129 views

Different configurations for ssh client depending on ip address or hostname

I have this in my ~/.ssh/config directory: Host 12.34.56.78 IdentityFile ~/.ssh/my_identity_file When I ssh to 12.34.56.78, everything works fine. I'm asked for the passphrase for ...
9
votes
1answer
15k views

Manually generate password for /etc/shadow [duplicate]

I need to manually edit /etc/shadow to change the root password inside of a virtual machine image. Is there a command-line tool that takes a password and generates an /etc/shadow compatiable password ...
4
votes
2answers
2k views

Graphically ask for password in a bash script and retain default sudo timeout setting

The sudo -A (SUDO_ASKPASS) option apparently causes sudo to lose the timeout (e.g., timestamp_timeout) setting. I want to use the sudo -A option but I want to retain the default timeout (e.g., 15 ...
1
vote
1answer
90 views

kinit returns error salt type 3 unsupported on FreeBSD 9.1-RELEASE install

When attempting to run kinit to log into a Kerberos V5 realm I get the following error on a default install FreeBSD 9.1-RELEASE kinit: krb5_get_init_creds: salt type 3 not supported Any ideas?
3
votes
1answer
310 views

Is it a bad idea to add myself to the sudo group?

Members of the sudo group in my Debian install can execute anything without entering a password. This is convenient, but seems like a bad idea. NOTE: My computer is an ordinary desktop, not a server ...
3
votes
1answer
450 views

sudo command executes without prompting for password

For some reason, I suddenly do not need to enter the password when issuing sudo some_cmd. Entered command just runs without ever prompting password, even if I am not logged in as user root. Commands ...
4
votes
2answers
6k views

Avoid “Authentication token manipulation error” on password change

I'm implementing a security policy that will force the users to introduce stricter passwords when they change their own: The /etc/pam.d/passwd configuration file is: #%PAM-1.0 auth include ...
1
vote
1answer
3k views

can't ssh into remote host with root, password incorrect

I have a remote host, previously I can ssh into it with root and password ssh root@remote_host or I ssh into it first using a regular user account ssh esolve@remote_host and then su root and ...
3
votes
3answers
414 views

Securely feeding a program with a password

After understanding the problem with using a password in the command line, I need to find a way of feeding a program with a password without it being a problem (without the password being recorded ...
26
votes
3answers
2k views

Why shouldn't someone use passwords in the command line?

Why do people fear writing passwords in the command line? The history file is located in ~/.history, so it's available only to the user who executed the commands (and root).
2
votes
1answer
14k views

How to lock users after 5 unsuccessful login tries?

How to lock users after 5 unsuccessful login tries? I gathered a few distributions/versions to how to do it, but I can't test it. RHEL4: by adding the: auth required ...
4
votes
1answer
272 views

How to change the forgotten root password?

I am very new to Debian linux, I forgot my root password...actually I think I know what it is because it is the same password I have for pretty much everything but in the Terminal in tell me "Sorry, ...
3
votes
0answers
103 views

Restrict usage of the same password during a time period

I need to configure a server with some requisites on the password changing: in addition to other requisites, I need to ensure that, on a password change, it is not repeated (last 5 passwords) and ...
2
votes
1answer
133 views

How to run john parallel on several CPU's?

If I use: john --incremental UNSHADOWEDFILE then I can see it uses only 1 CPU. How can I set john to use several CPU's for finding the weak passwords? (need to find weak ones faster because of an ...
14
votes
2answers
1k views

How long is the password for executing a command with sudo cached?

If I run a command which requires root privileges with sudo, I will be asked to enter the current user's password. After that for a while, if I execute the same sort of commands with sudo, I won't be ...
3
votes
2answers
7k views

Change Password of a user in /etc/shadow

I would like to change the password of a user in the /etc/shadow. I can't use password changing programs like passwd. It must be done by editing the /etc/shadow. The /etc/shadow is on a mounted hard ...
2
votes
2answers
232 views

Equivalent of “passwd -sa” in RHEL?

I feel a little silly having to ask this, but: In Solaris you can issue a passwd -sa command which gives you (more or less) the same output as passwd -S userName does, except it prints out the status ...
2
votes
1answer
152 views

Nemo: Forget encryption password

I have mounted an encrypted disk by selecting it in Nemo (1.1.2), then typing a password. I can unmount the disk using Nemo, but now it can be remounted without requiring the password. Probably ...
1
vote
0answers
665 views

samba 4 force user

I have a directory with files owned by Linux user quux. I want to give access to it over CIFS using Samba 4 for two persons so they have different usernames foo and bar and passwords but access the ...
2
votes
1answer
609 views

wpa_supplicant store password as hash (WPA-EAP with phase2=“auth=PAP”)

Is there a way to store my password in /etc/wpa_supplicant/wpa_supplicant.conf as some hash instead of plaintext? By "password" I refer here to the password used for phase2 authentification. I do not ...
15
votes
2answers
2k views

SSH ignores characters after correct password string?

Remote machine 10.10.10.1 has password "asdFGH12" for user named "user". I'm able to log in even if I type in password "asdFGH12dasdkjlkjasdus" or any other characters after the "asdFGH12" string. $ ...
2
votes
1answer
633 views

Where does Samba 4 store user passwords?

Where does Samba 4 store user passwords? How can I import my password hashes from Samba 3 in Samba 4? I am using my own LDAP server with samba 3, and the password hash is stored within the ...
1
vote
1answer
1k views

luksOpen: No key available with this passphrase

I've created a encrypted volume with LUKS at home and was looking to use it at work too. Unfortunately, that's not possible. Whyever, I'm unable to access the encrypted data on any other computer than ...
2
votes
1answer
548 views

How to password-less log on via ssh alias

Suppose I have access to pc via a server. I can directly log-on to pc by using How do I connect to a pc through another pc using ssh Such that my .ssh/config looks like: Host short Hostname pc User ...
1
vote
1answer
998 views

Rehashing /etc/shadow. Can I force NIS users to change password?

I'm currently migrating a CentOS environment to a Debian one. The users log in over the network using NIS. I was hoping to copy /etc/shadow from my old server to my new one so that we can offer ...
1
vote
1answer
397 views

How to safely put user typed password into a file?

Is there any way to put the password typed by user into a file (either in Unix or in expect). read -s -p "enter password" input echo $input > file Is the above code safe? I want to use that ...
3
votes
1answer
952 views

Can pwgen output passwords of a certain length?

I'm using the command line tool pwgen to generate passwords because I love the repeatability you get with the sha1 command line flag. To quote the man page: -H, --sha1=/path/to/file[#seed] ...
4
votes
2answers
156 views

Determining the Password Status of a User

I have a debian box that I connect to via SSH. I have removed the password from the users root, and my personal account using the instructions here, and set up a public/private key pair so I can log ...
2
votes
3answers
1k views

newgrp asks for password [duplicate]

I don't understand why newgrp prompts me for password when I want to change my group. I don't even know what password it is asking for but certainly not mine (user clime). $ id uid=500(clime) ...
2
votes
1answer
381 views

Setting the root password vs. sudo -i

Should one always set a root password, or is sudo -i acceptable? Two problems is in reading other posts (maybe junk I realize): sudo -i eliminates the need for a password. Isn't that a problem for ...
2
votes
1answer
3k views

How to enter/choose session after logout without password in (Linux Mint) Xfce?

I have Linux Mint 14 Xfce (4.10) and have also installed LXDE desktop, so I can choose between these sessions if I want. Normally I would set one as default and at startup I am not asked for ...