Questions regarding password-based authentication and password management

learn more… | top users | synonyms (1)

2
votes
4answers
600 views

sudo without password - security? [duplicate]

Possible Duplicate: What specific vulnerabilities am I creating by disabling the sudo password? I'm involved yet again in the old argument on whether sudo without password is secure enough ...
2
votes
1answer
381 views

A local, centralized, secure way to store FTP login data, including passwords

I want to be able to store the login details all of my remote FTP accounts in one place, securely. Then I'd like clients like autofs/curlftpfs, Filezilla, etc to use this one store of passwords. I'm ...
2
votes
1answer
517 views

retrieve password on remote server

I normally ssh into a remote server, for which I previously set an option that allows me not to type my password every time. Now that I forgot it, is there any way to retrieve it?
2
votes
1answer
58 views

su not asking for password

My su does not ask for password. When I run su it simply logs me in to root. I tried su - root then it asks for password. Now, because of this kdesu runs applications with root rights without ...
2
votes
3answers
514 views

Why is the 'sudo' password different than the 'su root' password

On my personal machine, I often type sudo in front of certain commands in order to accomplish administrative tasks. I had hoped to avoid doing this throughout the day, by typing su root and providing ...
2
votes
2answers
91 views

change regular user's password with root access

I have Ubuntu installed on a Raspberry pi. I have a normal user pi, but I forgot the password. However, I do have root access. How would I change pi's password using root?
2
votes
2answers
122 views

How does a BIOS password work?

I have created a BIOS password. I use the Dvorak keyboard layout. When I switch my keyboard layout to Qwerty and restart, and then type password in with the different layout, there is no change. ...
2
votes
2answers
327 views

Using for loop to brute-force a password

I just wanted to brute-force my old router but the for-loop was really amateur style. How to write a nice for-loop, if I only know the charaters included? Found already that page but it does not ...
2
votes
1answer
213 views

How to change the forgotten root password?

I am very new to Debian linux, I forgot my root password...actually I think I know what it is because it is the same password I have for pretty much everything but in the Terminal in tell me "Sorry, ...
2
votes
1answer
710 views

Apache boot without asking for passwd

So I'm maintaining a server which has a verified SSL certificate setup, however there is a password on the private key and so whenever apache is reboot, we get a message asking for the password. This ...
2
votes
1answer
142 views

Where can I find a reference to the format of the comment field (field 5) of the /etc/passwd file?

In the /etc/passwd file on my system, the "comment" field, field 5, is inconsistent in its contents. I thought that I could extract it to get the full name of the user. fullname=`awk -F: '$1 == name ...
2
votes
3answers
3k views

debian not accepting administrative password

I have XFCE Debian on an old PowerPC PowerBook G4. When I go to open Synaptic Package Manager, a window pops up asking for my administrative password. I enter the password I normally use for sudo in ...
2
votes
1answer
61 views

Root Password Policy and Refresh

Unfortunately the infrastructure I work in has static root passwords that are very rarely refreshed. So people leaving the company will have our root passwords and it can potentially be leaked to ...
2
votes
2answers
61 views

User created without a password behaves as if he had one

Inside one of my scripts, I created an user based on a directory arrangement on another machine. The thing is that this user, created without a password, behaves just as he had one : he has sudo ...
2
votes
3answers
135 views

proper configuration of visudo NOPASSWD for bash backup script

The abstract question is: If script x calls program y, do I need a NOPASSWD entry in /etc/sudoers for x, y or both x & y? (And can x then call sudo -v without a password?) Details: I'm trying ...
2
votes
2answers
4k views

rsync without prompt for password

I need to execute rsync, without it prompting me for password. I've seen in rsync manpage that it doesn't allow specifying the password as command line argument. But I noticed that it allows ...
2
votes
1answer
1k views

Unix last password change date

My understanding is that the last change date(in /etc/shadow) is the number of days since 01/01/1970 that the password was changed, but I'm seeing numbers like 19708 which translate to 17/12/2023 ...
2
votes
2answers
188 views

Equivalent of “passwd -sa” in RHEL?

I feel a little silly having to ask this, but: In Solaris you can issue a passwd -sa command which gives you (more or less) the same output as passwd -S userName does, except it prints out the status ...
2
votes
1answer
497 views

wpa_supplicant store password as hash (WPA-EAP with phase2=“auth=PAP”)

Is there a way to store my password in /etc/wpa_supplicant/wpa_supplicant.conf as some hash instead of plaintext? By "password" I refer here to the password used for phase2 authentification. I do not ...
2
votes
2answers
49 views

Making su ask for password multiple times

Is there some way to make su ask for the password again in case of a wrong password (just as sudo does)? Initially I thought of this: while ! su -c foo; do read -n 1 -p "Retry(y/n)?" ch if [[ ...
2
votes
1answer
171 views

How may I distinguish encryption algorithm of htpasswd?

I have an apache web server running on Debian Linux and I secure a certain directory with htaccess. I have no history or knowledge how the .htpasswd file was created. Apache documentations says that ...
2
votes
2answers
4k views

Avoid “Authentication token manipulation error” on password change

I'm implementing a security policy that will force the users to introduce stricter passwords when they change their own: The /etc/pam.d/passwd configuration file is: #%PAM-1.0 auth include ...
2
votes
1answer
9k views

How to lock users after 5 unsuccessful login tries?

How to lock users after 5 unsuccessful login tries? I gathered a few distributions/versions to how to do it, but I can't test it. RHEL4: by adding the: auth required ...
2
votes
1answer
125 views

Nemo: Forget encryption password

I have mounted an encrypted disk by selecting it in Nemo (1.1.2), then typing a password. I can unmount the disk using Nemo, but now it can be remounted without requiring the password. Probably ...
2
votes
1answer
245 views

password problem when feeding a remote file into diff

When I want to compare a local file with a remote file, any of these usually works: $ ssh remote cat file | diff file - $ diff file <(ssh remote cat file) However, sometimes (especially when the ...
2
votes
1answer
2k views

Brute force access to a Firebird database?

Ok, so here's the deal. When migrating a certain product with terrible documentation to another database type, my Firebird database was deleted. I then proceeded to recover it from the filesystem ...
2
votes
1answer
688 views

root password changed automatically

I have my system on dual boot (win7 and RHEL 6). I have 2 user account on RHEL 6. A normal user and a root user. I put passwords of both accounts same. It was working fine from 5 6 days. Yesterday I ...
2
votes
1answer
20 views

Credential in PPD file: Is there a way to hide it?

We have a copying machine that can be used as a printer. In order to do that, I have to provide a credential in plain in the Xerox.ppd file. Problem: Any user on the system can grep credential ...
2
votes
3answers
2k views

How to Use Encrypted password in shell script AIX

I had written a shell script that will connect with the Database to perform some operations This is my sample code #!/usr/bin/ksh . /home/ram/.profile sqlplus username/pwd@TNS<<EOF select ...
2
votes
1answer
91 views

How do I avoid echoing password (two simultaneous prompts)?

The command I'm talking about is this: mysqldump -u root -p DB | mysql -u root -p DB2 And here's the output: Enter password: Enter password: MYPASS As far as I can tell, after I enter first ...
2
votes
1answer
790 views

Subversion (svn) doesn't store passwords in gnome-keyring

I fight with svn since 2 hours to store my password inside the gnome keyring, but nothing worked. I'm on a fresh installed archlinux system with the following packages installed: acl 2.2.52-1 ...
2
votes
1answer
550 views

Where does Samba 4 store user passwords?

Where does Samba 4 store user passwords? How can I import my password hashes from Samba 3 in Samba 4? I am using my own LDAP server with samba 3, and the password hash is stored within the ...
2
votes
1answer
428 views

How to password-less log on via ssh alias

Suppose I have access to pc via a server. I can directly log-on to pc by using How do I connect to a pc through another pc using ssh Such that my .ssh/config looks like: Host short Hostname pc User ...
2
votes
1answer
2k views

How to enter/choose session after logout without password in (Linux Mint) Xfce?

I have Linux Mint 14 Xfce (4.10) and have also installed LXDE desktop, so I can choose between these sessions if I want. Normally I would set one as default and at startup I am not asked for ...
2
votes
1answer
866 views

I try to add passwords to the “pass” password manager. But my attempts fail with “no public key” GPG errors. Why?

I am trying to install Pass: the standard Unix password manager, however, when I try to add passwords to the appliation I get these errors gpg: Kelly's Passwords: skipped: No public key gpg: [stdin]: ...
2
votes
1answer
172 views

Security drawbacks of disabling tty password check

I found that, in /etc/inittab, this modification (-a username) for the user u disables the login/password check for all tty:s: 1:2345:respawn:/sbin/getty -a u 38400 tty1 2:23:respawn:/sbin/getty -a u ...
2
votes
1answer
4k views

How to list and filter Samba users that need a password change?

Apparently, I can find out whether a Samba user needs a password change or not with the following command: pdbedit -v -u userid | grep "Password must change" I also see I can list all the Samba ...
2
votes
1answer
2k views

How to set a new password from bash?

I'm using busybox with a limited passwd (I don't have --stdin option) and without chpasswd and I need to change the password of an user from bash. Here is my best result: echo newpassword > ...
2
votes
1answer
792 views

gnome-screensaver-command --lock, hide password

If I lock the screen using gnome-screensaver (gnome-screensaver-command --lock) and enter the password, a big dot is shown instead of each character. Is it possible to change this behaviour such that ...
2
votes
0answers
101 views

Why sudo won't remember my password?

I use sudo in many systems, but I have one of them that makes me type my password each time I run sudo. All the others remember it for a while. This is debian 7.4 wheezy and sudo 1.8.5 I found this : ...
2
votes
0answers
27 views

Getting non-stored password from Icedove

I've recently changed my mail password (because of Heartbleed), but I've forgotten the new one. When entering the new password in Icedove, I didn't think of clicking "remember password", but the ...
2
votes
1answer
310 views

Why does pam_mount ask for password?

I used the pam-auth-update tool in order to enable some pam configuration profiles: PAM configuration PAM profiles to enable: [*] encfs encrypted home directories [*] Unix ...
2
votes
1answer
939 views

Deleting a samba user: pbdedit vs. smbpasswd, what's the difference?

What is the difference between $ pdbedit -x and $ smbpasswd -x to delete samba users?
2
votes
0answers
567 views

Changing Samba/LDAP password with passwd

We've installed CentOS Directory Server (389 DS) and have Samba using it as a backend. This works great except that when enabling password syncing in the smb.conf it is only synced one way. I could ...
2
votes
1answer
104 views

How to run john parallel on several CPU's?

If I use: john --incremental UNSHADOWEDFILE then I can see it uses only 1 CPU. How can I set john to use several CPU's for finding the weak passwords? (need to find weak ones faster because of an ...
2
votes
0answers
386 views

Validate Password for user account from shell script

Application is for a multiple server standardization script Looking for a way in a shell script to check if the password for an OS account (AIX) matches a standardized plain text password. The ...
2
votes
0answers
436 views

Getting a short wifi password to work on Linux Mint

Wifi password became a problem to me. My wifi password consists of only 4 letters but my Linux Mint 12 is expecting more than 7 letters - until then connect button is disabled. Can I work around this ...
2
votes
3answers
506 views

How to do svn update without password on crontab [closed]

I'm new to svn and ssh. I'm trying to do svn update of 5 repositories in my local system every 3 hours on crontab. So, to achieve this I have setup ssh passwordless login using the below steps: ...
2
votes
3answers
1k views

newgrp asks for password [duplicate]

I don't understand why newgrp prompts me for password when I want to change my group. I don't even know what password it is asking for but certainly not mine (user clime). $ id uid=500(clime) ...
1
vote
6answers
427 views

Program a file to self-destruct at a given time

Does anyone know whether there is a command in linux that can set attributes to file so that the file can disappear after certain time. For example, if I set one attribute to file as "1/1/2015", so ...