Questions regarding password-based authentication and password management

learn more… | top users | synonyms (1)

35
votes
9answers
4k views

How to trigger a system self destruct with a certain password is entered

How do I configure my system to destroy all personal data when a certain password is entered? The motivation behind this being NSA stuff. I imagine there being three primary usage cases. At login, ...
1
vote
1answer
678 views

How do I change login shell to nologin for an LDAP user RHEL 6?

yum install ypchsh and yum install ldapmodify both don't find a package. I only want to change the shell for certain ldap users on this one server. Someone please help, I can't seem to figure this ...
4
votes
2answers
3k views

Deleting a samba user: pbdedit vs. smbpasswd, what's the difference?

What is the difference between $ pdbedit -x and $ smbpasswd -x to delete samba users?
0
votes
1answer
1k views

Setting up the superuser password for the first time

How can I set up the super user password for the first time in Zorin OS, since the installer didn't ask me to provide one. I have experience with Fedora and openSUSE, but they asked me for the ...
1
vote
2answers
1k views

Edit home directory for an LDAP user in Linux

I have an LDAP user who accesses a server based on having the appropriate LDAP host attribute via sssd. This user does not show up in /etc/passwd because he is not local. How do I modify his home ...
-4
votes
1answer
131 views

Copy content of an file “passwd” to an file userlist.txt [closed]

The problem is that the file passwd hasn't got any tag like .txt or so. So I can't copy the content by passed > userlist.txt.
1
vote
1answer
283 views

securely automating a script which requires a key to do its task

I have a script that downloads bank transactions to store in a database. To get these transactions requires a password for each account. The database is encrypted and requires a key to access it. All ...
2
votes
3answers
968 views

How to do svn update without password on crontab [closed]

I'm new to svn and ssh. I'm trying to do svn update of 5 repositories in my local system every 3 hours on crontab. So, to achieve this I have setup ssh passwordless login using the below steps: ...
0
votes
2answers
145 views

Resetting password of another Linux [duplicate]

I have an external hdd partitioned into two. One of the partitions has Linux (Ubuntu) installed on it (bootable). The thing is I have forgotten the password of it's user (single user). How can I ...
1
vote
2answers
902 views

getent passwd when nsswitch passwd setting is: files ldap

If /etc/nsswitch.conf has: passwd: files ldap this line in it, and I do getent passwd will it first run down the /etc/passwd list and then go through every user in LDAP? That seems to be ...
6
votes
3answers
167 views

Passwords for newly created users?

I am fairly new to Linux and I have question regarding users. When I use the useradd command I don't specify a password. I must use the passwd command afterwards. Does this mean that the user is ...
2
votes
3answers
2k views

What command should I run after making changes to /etc/passwd file

I have made some changes to /etc/passwd file ,now I wanted to see if the effect of changes taken place or not .What command should I run for that. For example after making change to ...
2
votes
2answers
96 views

change regular user's password with root access

I have Ubuntu installed on a Raspberry pi. I have a normal user pi, but I forgot the password. However, I do have root access. How would I change pi's password using root?
2
votes
0answers
948 views

Changing Samba/LDAP password with passwd

We've installed CentOS Directory Server (389 DS) and have Samba using it as a backend. This works great except that when enabling password syncing in the smb.conf it is only synced one way. I could ...
1
vote
3answers
955 views

Change a Password is not successfull on ubuntu 12.04

i am trying to set a new password for linux Ubuntu 12.04,but on running command its giving something like this $passwd Changing password for ubuntu. (current) UNIX password: Enter new UNIX password: ...
2
votes
2answers
197 views

How does a BIOS password work?

I have created a BIOS password. I use the Dvorak keyboard layout. When I switch my keyboard layout to Qwerty and restart, and then type password in with the different layout, there is no change. ...
0
votes
1answer
39 views

Login retrieval in osx [duplicate]

I got an old Mac G4 (powerPC) from the company who wanted to put it in a bin. The company agreed that I can take it home for private use. It is running an early version of OSX but because it is old ...
1
vote
2answers
218 views

Why can I access all my files without a password when booting with a Chakra Linux live CD?

The other day I burned a Chakra Linux iso on a dvd. When I booted into a live session I was able to access all my regular data. In dolphin when clicking on the icon belonging to my /home/user ...
2
votes
2answers
516 views

Using for loop to brute-force a password

I just wanted to brute-force my old router but the for-loop was really amateur style. How to write a nice for-loop, if I only know the charaters included? Found already that page but it does not ...
2
votes
3answers
454 views

What happens if I delete all user passwords?

I have a Fedora VPS with a root user that has no password. I login with SSH keys. I had another, less privileged account on that server, used for web administration. I've now deleted its password ...
2
votes
1answer
334 views

Can't sudo after lock password, can I recover from that?

After setup ubuntu with default settings, It allows user to login with password, so I use passwd -l [username] to forbid password login both in ssh and console. But when I use sudo to execute ...
3
votes
2answers
59 views

Whose password should I enter?

Authentication is required to perform this action. Whose password should I enter? Mine? Root's? I can never tell. ...
19
votes
3answers
412 views

Typical use case for a group password

I checked more than half a century worth Unix experience and neither my colleagues, nor myself has ever set a password on a group (sg and gpasswd). What would be a typical use case for a group ...
2
votes
1answer
310 views

How may I distinguish encryption algorithm of htpasswd?

I have an apache web server running on Debian Linux and I secure a certain directory with htaccess. I have no history or knowledge how the .htpasswd file was created. Apache documentations says that ...
1
vote
3answers
1k views

How to gain root privileges for specific user if we have root password? [closed]

Can someone suggest how can I change process privileges in Linux to root ? Assume, I have a normal process running under some user-consider me. Now my script should create some users using 'useradd' ...
2
votes
1answer
2k views

Unix last password change date

My understanding is that the last change date(in /etc/shadow) is the number of days since 01/01/1970 that the password was changed, but I'm seeing numbers like 19708 which translate to 17/12/2023 ...
12
votes
4answers
2k views

Can you give a user account multiple passwords?

I want to assign 2 passwords to a single account. What I want to know is 1) is this possible, and 2) what are the security implications of this? The reason I want to do this is because I'm currently ...
4
votes
1answer
9k views

How to set password for users in AIX using single line command?

Is there any way in which I can set the password for a newly created user account in AIX in a one line command? I don't want to give any prompt to the user. If there is a command, it should set the ...
5
votes
2answers
599 views

How to disable the try again password in ssh command

I want the ssh command to only allow one chance in typing the password, if the password was wrong at the first time the ssh will return Permission denied (publickey......). Is there a flag that ...
2
votes
1answer
2k views

Subversion (svn) doesn't store passwords in gnome-keyring

I fight with svn since 2 hours to store my password inside the gnome keyring, but nothing worked. I'm on a fresh installed archlinux system with the following packages installed: acl 2.2.52-1 ...
3
votes
1answer
2k views

Resetting password in Linux Mint when disk is encrypted

I have a system (VM, actually) with Linux Mint 15 on it. The disk is encrypted, but I remember that password -- just not the password for my account. I've tried changing the command in GRUB from ro ...
6
votes
4answers
229 views

How to log into database via script securely?

I am wondering about whether it is acceptable (security-wise) to have database login credentials (user/pass) set in an environment variable or passed in as a command-line parameter? Both of these ...
5
votes
2answers
808 views

How to see password as we type it

In debian wheezy terminal i type su - It ask for password, which i type but it dont show anything as Password: I want to it to show at least some asterisks as the placeholder for the password ...
1
vote
5answers
16k views

How to Reset Forgotten Root Password in Fedora 19 from GRUB

YES, FEDORA 19. I saw a lot of information about how to do it but doesn't work with this version. All the tutorials explain the method for older versions of Fedora, i didn't found anything about ...
4
votes
1answer
119 views

Where are passwords stored and how are they encrypted in OS X?

I know that on a Linux system passwords are stored in /etc/shadow and are salted and encrypted using a one way hashing algorithm like MD5, SHA-256 or SHA-512. It looks like there is no /etc/shadow ...
3
votes
1answer
123 views

Solaris/OpenIndiana: Password for roles?

I've been gently experimenting with roles in Solaris, and wonder a bit about setting a password for it. I want the role I've created to be used by several users, so setting password to the same as ...
0
votes
1answer
242 views

Can the ~/.john/john.pot file be used forever?

If I use john for getting weak passwords in ex.: 2010, then can I use the john.pot file later or there could be situations when the hash is the same, but the passwords differ?
1
vote
1answer
1k views

ssh-agent: How to set it up so my CentOS server will only ask for passphrase once?

On my Macbook, my SSH private key is encrypted, but I never have to re-enter the passphrase even if I reboot the machine. The system must be unlocking it along with my user account. Is it possible ...
5
votes
1answer
2k views

Changing password in multiple boxes using script

I'm working in a environment which has around 400 AIX boxes. I don't have root access and I'm a normal user. The environment has no LDAP kind of centralized mechanism for authentication so the ...
6
votes
1answer
302 views

Any random password results in successful login on tty

I can login to my machine (FreeBSD 9.1-RELEASE) for any user (for example: root or operator or any that exists in /etc/passwd) with any random password that I type... I tried to reset password for ...
-1
votes
1answer
603 views

SSH key based login bypasses password policies

I noticed that logins via an SSH key bypass the LDAP password policies (password ageing, password warning, and password lockout due to failed attempts, etc). Is there any way to force key-based ssh ...
1
vote
2answers
136 views

Different configurations for ssh client depending on ip address or hostname

I have this in my ~/.ssh/config directory: Host 12.34.56.78 IdentityFile ~/.ssh/my_identity_file When I ssh to 12.34.56.78, everything works fine. I'm asked for the passphrase for ...
11
votes
1answer
17k views

Manually generate password for /etc/shadow [duplicate]

I need to manually edit /etc/shadow to change the root password inside of a virtual machine image. Is there a command-line tool that takes a password and generates an /etc/shadow compatiable password ...
5
votes
2answers
2k views

Graphically ask for password in a bash script and retain default sudo timeout setting

The sudo -A (SUDO_ASKPASS) option apparently causes sudo to lose the timeout (e.g., timestamp_timeout) setting. I want to use the sudo -A option but I want to retain the default timeout (e.g., 15 ...
1
vote
1answer
94 views

kinit returns error salt type 3 unsupported on FreeBSD 9.1-RELEASE install

When attempting to run kinit to log into a Kerberos V5 realm I get the following error on a default install FreeBSD 9.1-RELEASE kinit: krb5_get_init_creds: salt type 3 not supported Any ideas?
3
votes
1answer
317 views

Is it a bad idea to add myself to the sudo group?

Members of the sudo group in my Debian install can execute anything without entering a password. This is convenient, but seems like a bad idea. NOTE: My computer is an ordinary desktop, not a server ...
3
votes
1answer
507 views

sudo command executes without prompting for password

For some reason, I suddenly do not need to enter the password when issuing sudo some_cmd. Entered command just runs without ever prompting password, even if I am not logged in as user root. Commands ...
4
votes
2answers
7k views

Avoid “Authentication token manipulation error” on password change

I'm implementing a security policy that will force the users to introduce stricter passwords when they change their own: The /etc/pam.d/passwd configuration file is: #%PAM-1.0 auth include ...
1
vote
1answer
3k views

can't ssh into remote host with root, password incorrect

I have a remote host, previously I can ssh into it with root and password ssh root@remote_host or I ssh into it first using a regular user account ssh esolve@remote_host and then su root and ...
4
votes
3answers
432 views

Securely feeding a program with a password

After understanding the problem with using a password in the command line, I need to find a way of feeding a program with a password without it being a problem (without the password being recorded ...