Questions regarding password-based authentication and password management

learn more… | top users | synonyms

4
votes
1answer
1k views

Why ssh-copy-id prompts for the local user password three times?

Noticed from my previous question that when trying to copy an SSH public key to a remote host via ssh-copy-id, I am prompted for the local user password three times: ssh-copy-id myuser@myserver ...
4
votes
2answers
2k views

Two-step remote ssh without password

I'm looking to ssh from my localhost to a remote server, and from there to a remote computer. I currently have it set up so that the remote computer and remote server have passwordless ssh-ing set up ...
4
votes
2answers
53 views

Understand the PasswordAuthentication in sshd configuration

I have an OpenSSH server which supports only password authentication: [martin@ ~]$ ssh -v 10.10.1.183 -l root OpenSSH_5.2p1 FreeBSD-20090522, OpenSSL 0.9.8k 25 Mar 2009 debug1: Reading configuration ...
4
votes
2answers
173 views

how to prevent a buffer from swap

this question is specific to Unix and Linux. but it is programming and security, too. my program will get a clear password or decryption key by one of a few ways (decrypting a password file, asking ...
4
votes
1answer
6k views

Expired password and SSH key based login with UsePAM yes

There is a SLES 11 machine. The users logs in via SSH and pubkey (mixed, some user uses password, some use ssh key) The sshd_config has: UsePAM yes PasswordAuthentication yes PubkeyAuthentication ...
4
votes
2answers
401 views

How can I check GMail messages with prompt for password from a script?

I'm using zsh on Ubuntu 14.04 over SSH using Putty and I'm setting up the key bindings for my keyboard. Because zsh doesn't seem to make use of my function keys I thought I'd setup scripts to do ...
4
votes
2answers
18k views

Change Password of a user in /etc/shadow

I would like to change the password of a user in the /etc/shadow. I can't use password changing programs like passwd. It must be done by editing the /etc/shadow. The /etc/shadow is on a mounted hard ...
4
votes
1answer
305 views

Can linux use a mix of SHA-1 and CRYPT passwords?

We have an automated sync-routine that uses useradd to create new users on a Ubuntu 10.04 machine. The application launching the routine provided both username and CRYPT-encrypted password. However, ...
4
votes
1answer
1k views

Debian wake up from suspend password

I am using Debian Squeeze. When I suspend my laptop and wake it up again later, it doesn't ask for the system password. How do I fix this?
4
votes
1answer
214 views

How to recover encrypted /home/ folder in Linux Mint 17.2

The issue: I changed my password earlier today, but I must've made a typo, because I couldn't log in afterwards. I booted into the Grub menu and started a passwordless root shell to reset my password. ...
4
votes
1answer
74 views

security model of Linux password entry

Whenever a Windows application wants to do something requiring administrator privileges, my screen goes black and a prompt comes up, asking if I want to grant administrator privileges. I understand ...
4
votes
1answer
784 views

How can I decrypt my encrypted /home partition?

A year ago I installed Linux Mint 17 on my laptop. I partitioned the HDD and separated the system (/ mount point) and the data (/home mount point). I chose to encrypt the whole /home using the basic ...
4
votes
1answer
144 views

password store storing some passwords in plain text

I red about the password management program pass in a question on this forum and decided to try it. I installed from the download page (tarball 1.6.3). I created some test entries and then some real ...
4
votes
3answers
441 views

Usage of pinentry with keepass2 for gpg mail encryption

Debian Jessie, XFCE 4.10, KeePass2, IceDove (with Enigmail).. I'm using KeePass2 generated passwords for my gpg private key, to de/encrypt mails. Icedove is my client which uses the enigmail. As ...
4
votes
2answers
253 views

Using $ in a password

Lets assume that password of my server is Abcd$1234 I am trying to ftp a file from other server to my server using the following in shell script ftp -inv (IP) << EOF user Username Abcd$1234 ...
4
votes
1answer
185 views

Where are passwords stored and how are they encrypted in OS X?

I know that on a Linux system passwords are stored in /etc/shadow and are salted and encrypted using a one way hashing algorithm like MD5, SHA-256 or SHA-512. It looks like there is no /etc/shadow ...
4
votes
1answer
1k views

Validate AIX Password for root from script

Looking for a way in a shell script to validate the password for for root on an (AIX) matches a standardized plain text password. This query is similar to another one on this site. I have access to ...
4
votes
1answer
2k views

Password expiry in Samba v3.0

I'm trying to setup a Samba server which asks new users to change their password on their first login and makes passwords expire after 90 days. I was able to setup the 90 days expiry date but the ...
4
votes
1answer
86 views

Prevent users changing password in FreeBSD

How can I prevent a user to change its password in FreeBSD. In Linux i can do this by using chage -m 99999 <username> where chage is found in shadow-utils Reason for this is I created one shell ...
3
votes
7answers
5k views

Hiding Password in Shell Scripts

How can I hide a password in shell scripts? There are a number of scripts that are accessing database. If we open the script others also aware the username and password. So if anyone knows how to hide ...
3
votes
3answers
313 views

How to mask passwords in 'watch' command?

I am using watch to monitor the progress of a MySQL replication slave. The way I have it set up now, the password shows up in the header of the watch output. I am not exceedingly worried that someone ...
3
votes
2answers
5k views

Second field in /etc/shadow

If the second field of the /etc/shadow file is set to !!, does it mean that the account is disabled? Or does it mean that the account is active with no password assigned?
3
votes
4answers
2k views

Why can't I echo the password to fetchmail?

I'm trying to configure a fetchmail. Before I deal with the syntax of fetchmailrc ( I discovered that the level of bugginess of a problem is synergistic with the number of different aspects of the ...
3
votes
2answers
2k views

show entered new password in unix “passwd” command

Is is possible to run the passwd command with an option to show the newly entered passwords? By default it doesn't show what I type and I don't want this. [dave@hal9000 ~]$ passwd Changing password ...
3
votes
3answers
109 views

How to set a password that violates password constraints without changing constraints using sudo

I have root access on a machine shared by others. I think the password constraints are absurd, they are overly excessive in how they mandate the use and ordering of non word characters and make ...
3
votes
2answers
228 views

Physically override linux credentials

Say someone gains physical access to my computer, and they want to login to my account and see everything I have. Is it possible that they take the hard-drive out of my computer, modify the file ...
3
votes
3answers
9k views

How to Create a Encrypted Password

I want to know how can I create a encrypted password in Ubuntu 14.04 TLS. Tried this: makepasswd --crypt-md5 password_here Did not worked for me throwing this Error sysadmin@localhost:~$ ...
3
votes
1answer
1k views

sudo command executes without prompting for password

For some reason, I suddenly do not need to enter the password when issuing sudo some_cmd. Entered command just runs without ever prompting password, even if I am not logged in as user root. Commands ...
3
votes
4answers
3k views

passing passwords to a script

I want to scp a file to a remote host, and from there, run a command on the file, and exit the remote session. If I write a usual script, call scp and then ssh, I am prompted to enter two passwords. ...
3
votes
2answers
5k views

Ubuntu password policy

I want to set the system-wide password policy on an Ubuntu 12.04 LTS server. Googling around, a lot of people point to this (very old) document: ...
3
votes
2answers
656 views

How to make a folder request root password to view execute?

I am running Ubuntu 10.04 LTS. I want to use my laptop to play music in a party. MY screensaver does not need a password to deactivate. I would like to allow people to use my computer to play the ...
3
votes
2answers
1k views

Is Open LDAP meant to work with the passwd command for Linux?

I've implemented an Open LDAP server in OpenSuSE 11.2 via the YaST GUI. I'm having success logging in from the local machine and other machines via LDAP. I am able to change LDAP user passwords via ...
3
votes
3answers
1k views

Why does this password fail AIX and Solaris rules

Had to reset my password on a couple of client servers today, and despite following the rules I get the message "Your password failed to meet: minimum of 2 non-alphabetic characters" back from the ...
3
votes
2answers
63 views

Whose password should I enter?

Authentication is required to perform this action. Whose password should I enter? Mine? Root's? I can never tell. ...
3
votes
1answer
3k views

Apache boot without asking for passwd

So I'm maintaining a server which has a verified SSL certificate setup, however there is a password on the private key and so whenever apache is reboot, we get a message asking for the password. This ...
3
votes
4answers
310 views

SSH asking for password after ssh-copy-id

I created a key on my machine with ssh-keygen. I copied the key to remote machine using ssh-copy-id. Tried to connect to remote machine but it asked me the password. Both machines are ubuntu (local ...
3
votes
1answer
1k views

retrieve password on remote server

I normally ssh into a remote server, for which I previously set an option that allows me not to type my password every time. Now that I forgot it, is there any way to retrieve it?
3
votes
1answer
1k views

Does OpenBSD use bcrypt by default?

http://codahale.com/how-to-safely-store-a-password/ with what does OpenBSD store the password by default? They say bcrypt is way more secure then hashing. I googled' it and obsd supports bcrypt, but ...
3
votes
1answer
3k views

Resetting password in Linux Mint when disk is encrypted

I have a system (VM, actually) with Linux Mint 15 on it. The disk is encrypted, but I remember that password -- just not the password for my account. I've tried changing the command in GRUB from ro ...
3
votes
1answer
2k views

Can pwgen output passwords of a certain length?

I'm using the command line tool pwgen to generate passwords because I love the repeatability you get with the sha1 command line flag. To quote the man page: -H, --sha1=/path/to/file[#seed] ...
3
votes
1answer
4k views

Difference between passwd and passwd- file [duplicate]

Possible Duplicate: Who creates /etc/{group,gshadow,passwd,shadow}-? I have a strange passwd- file in /etc, notice the trailing dash: root@ubuntu:~# ls /etc/passw* /etc/passwd ...
3
votes
1answer
514 views

How to disable timeout of password prompt for partition decryption during boot?

I have a computer running OpenSUSE 12.1, 64-bit, default install. How it works currently: I turn on the computer It goes through the boot process At some point during boot, I am asked for password ...
3
votes
1answer
141 views

Same salt/hash value in /etc/shadow

Looking in /etc/shadow, I can see several users that have the exact same salt and hash value (and thus password). How could the system end up like this? Does this mean the password was not ...
3
votes
2answers
1k views

Where does Samba 4 store user passwords?

Where does Samba 4 store user passwords? How can I import my password hashes from Samba 3 in Samba 4? I am using my own LDAP server with samba 3, and the password hash is stored within the ...
3
votes
1answer
395 views

Is it a good idea to use pwsafe - a password manager not updated since 2005?

I'm looking for a command-line Linux password-manager. It appears that pwsafe is the program most commonly used. However, its latest update was in 2005. Is it a good idea to use this? Has it been so ...
3
votes
1answer
35 views

groupadd -p Not Recommended?

I have a question about groupadd, specifically with password (-p). It says it is not recommended, "This option is not recommended because the password (or encrypted password) will be visible by users ...
3
votes
1answer
3k views

Policy in /etc/pam.d/password-auth is not being enforced

I've updated login.defs and password-auth to include a minimum length on passwords (12), but the minlen is not being enforced when I attempt to change a user's password with passwd. None of the ...
3
votes
1answer
256 views

How passwd command from non-root account succeeds

I am trying to change my password as a non root user : passwd The data is updated in /etc/shadow, but checking the permission i get: ---------- 1 root root 6076 Jan 27 17:14 /etc/shadow cat ...
3
votes
2answers
2k views

Where does Linux store Wifi passwords?

I am going to write a simple replacement for Ubunutu's NetworkManager. Is there any place where the Wifi network passwords would be stored in Linux? I know about ...
3
votes
1answer
915 views

SSH for user without a login password

I have created a user without a password $getent passwd logcoll logcoll:x:998:999:Log Collector,,,:/var/backups/logcoll:/bin/sh This user has no password, and this machine requires users to login ...