Questions regarding password-based authentication and password management

learn more… | top users | synonyms (1)

3
votes
2answers
130 views

Why should you NEVER edit the /etc/shadow file directly?

In another answer here on UNIX & Linux Stack Exchange Michael D Parker wrote, in response to someone saying that doing so was "safe", that:Usually you should NEVER edit the /etc/shadow file ...
3
votes
1answer
34 views

How passwd command from non-root account succeeds

I am trying to change my password as a non root user : passwd The data is updated in /etc/shadow, but checking the permission i get: ---------- 1 root root 6076 Jan 27 17:14 /etc/shadow cat ...
3
votes
1answer
260 views

SSH for user without a login password

I have created a user without a password $getent passwd logcoll logcoll:x:998:999:Log Collector,,,:/var/backups/logcoll:/bin/sh This user has no password, and this machine requires users to login ...
3
votes
1answer
75 views

Export passwords from the `pass` password manager

I've been using the pass password manager for a year or so now, and it's awesome, but sometimes I like to test other password managers and then I need my passwords back. So far I've just been adding ...
3
votes
2answers
217 views

How can I check GMail messages with prompt for password from a script?

I'm using zsh on Ubuntu 14.04 over SSH using Putty and I'm setting up the key bindings for my keyboard. Because zsh doesn't seem to make use of my function keys I thought I'd setup scripts to do ...
3
votes
1answer
2k views

Debian Log In Failure With Correct Password

So I have a Debian distro at home (considering getting ubuntu), and I can't login. When I use the correct password is does this thing where it makes it look like it's going to login, and then it ...
3
votes
1answer
833 views

Debian wake up from suspend password

I am using Debian Squeeze. When I suspend my laptop and wake it up again later, it doesn't ask for the system password. How do I fix this?
3
votes
1answer
34 views

How to blacklist common passwords on UNIX systems?

If we have a file on a server (Linux, AIX, etc) that contains the common passwords, how can we filter passwords based on this?
3
votes
2answers
124 views

Is it possible to change passwords temporarily?

I have a Linux system with several users. I don't know their passwords, nor do I want to know them. I have to do a batch copy of some of their directories over SSH, with their account and password. ...
3
votes
1answer
148 views

Solaris/OpenIndiana: Password for roles?

I've been gently experimenting with roles in Solaris, and wonder a bit about setting a password for it. I want the role I've created to be used by several users, so setting password to the same as ...
3
votes
1answer
341 views

Is it a bad idea to add myself to the sudo group?

Members of the sudo group in my Debian install can execute anything without entering a password. This is convenient, but seems like a bad idea. NOTE: My computer is an ordinary desktop, not a server ...
3
votes
1answer
263 views

Can linux use a mix of SHA-1 and CRYPT passwords?

We have an automated sync-routine that uses useradd to create new users on a Ubuntu 10.04 machine. The application launching the routine provided both username and CRYPT-encrypted password. However, ...
3
votes
1answer
2k views

Can I automate mounting a cifs share without storing my password in plaintext?

I currently use a script which contains commands along the lines of sudo /sbin/mount.cifs $SERVER_SHARE $MOUNT -o username=$DOMAIN_$USER,uid=$USER,gid=$USER,file_mode=0664,dir_mode=0775 to mount my ...
3
votes
2answers
8k views

Will a users password expire if I set the “maxexpired” to “-1”? [maxage not 0] - AIX

So under AIX 6, according to "lsuser" the user has the following settings: maxexpired=-1 maxage=2 So this means that 2 weeks after the last password update of the user the password will expire, but ...
3
votes
1answer
1k views

Why does a user get prompted for password under AIX?

Users get prompted for password, and according to the lsuser -f username output: expires=0 maxexpired=-1 maxage=13 users shouldn't be prompted for changing password. Why does he has a change ...
3
votes
1answer
765 views

Change default for Nautilus (file_manager) from “Forget password immediately”?

When opening a tab which needs to mount a Samba share, Nautilus 2.30.1 displays a window: Password required for share xxx on localhost Password: [ ] (*) Forget password immediately ( ) ...
3
votes
1answer
93 views

How to use my login password to do two things

I have a CIFS drive that I mount regularly, and it requires a password for it. Since it's annoying to type my password every time, I wrote a script that sets the PASSWD environment variable, mounts ...
3
votes
2answers
10k views

Change Password of a user in /etc/shadow

I would like to change the password of a user in the /etc/shadow. I can't use password changing programs like passwd. It must be done by editing the /etc/shadow. The /etc/shadow is on a mounted hard ...
3
votes
1answer
1k views

Why does pam_mount ask for password?

I used the pam-auth-update tool in order to enable some pam configuration profiles: PAM configuration PAM profiles to enable: [*] encfs encrypted home directories [*] Unix ...
3
votes
0answers
108 views

Restrict usage of the same password during a time period

I need to configure a server with some requisites on the password changing: in addition to other requisites, I need to ensure that, on a password change, it is not repeated (last 5 passwords) and ...
3
votes
0answers
430 views

ZIP password finders for Linux?

I'm trying to extract ZIP files for an encrypted archive I've forgotten the password for. So far I've found the tool fcrackzip which does what I want, but its own manpage states that it has numerous ...
2
votes
8answers
3k views

How to give a normal user permission to change root password

Please do not ask why, but is it possible to do it? p/s: I know it's not a good thing, let's just say someone from the top management who is computer illiterate want some sort of control over the ...
2
votes
2answers
2k views

How to get hashed password in /etc/shadow using getpwnam()?

Apparently there is a function (getpwnam) that given a username, will return the appropriate entry in /etc/passwd with the other details for that user (shell, uid, gid, etc.). However, I have no idea ...
2
votes
3answers
712 views

Do all Linux distro's use the same cryptographic hash function?

Do all Linux distro's use same Cryptographic hash function? If yes, is it provided with the kernel itself? EDIT:- I refer to the function mainly used for storing user login passwords.
2
votes
4answers
1k views

Can separate unix accounts share a username but have separate passwords?

On unix systems, each separate user account has a unique username. Passwords, then, are not unique - every distinct user could have the same exact password. I want to do the converse. I want one ...
2
votes
6answers
160 views

What are the Implications of Passwordless SSH

If UNIX users reach servers via SSH, and we only want to allow pubkey logins, are there any other items that need to be added to this list, that I should be concerned with? Allow pubkey login in ...
2
votes
3answers
625 views

chroot permission denied! But Im root!

I am trying to chroot into an old HD to change a forgotten password, but chroot says permission denied? what gives? I am root! The harddrive I am trying to chroot into is an old version of edUbuntu ...
2
votes
3answers
8k views

Lost password for a user on a Linux Server: How reset it?

On a Server an user 16040 has lost his password. I have password for root but don't have password for user 16040. How can I reset his password? With passwd 16040, unix ask me current password that I ...
2
votes
2answers
539 views

How is using a public-key for logging in to SSH any better than using a password?

I'm not asking about password vs key authentication. I've seen a few times (and even Amazons AWS) says that even if SSH has a major vulnerability that key authentication would make such an exploit ...
2
votes
2answers
136 views

Will I be prompted for the sudo password a second time?

This is what I plan to do: #!/bin/bash sudo -i <<'EOF' iptables-save | awk '/^[*]/ { print $1 } /^:[A-Z]+ [^-]/ { print $1 " ACCEPT" ; } /COMMIT/ { print $0; ...
2
votes
3answers
23k views

Kali Linux: On install, designated root password cannot login - incorrect password

I found an old laptop lying around and I figured I would install Kali Linux on it to learn more about penetration testing and to try to break into my servers for practice and learning more about ...
2
votes
1answer
430 views

Setting the root password vs. sudo -i

Should one always set a root password, or is sudo -i acceptable? Two problems is in reading other posts (maybe junk I realize): sudo -i eliminates the need for a password. Isn't that a problem for ...
2
votes
2answers
8k views

How to remove root password on Debian?

I'm running Debian in a virtual machine and for convenience I would like to remove the password on root (since it doesn't really matter what happens to this box). Internet hasn't been too helpful on ...
2
votes
4answers
2k views

Change password in headless mode

I am building a script to fully automate a VPS setup, and I need to change the root password. I would like to avoid typing it as the script is running through SSH. Is there a way to redirect an ...
2
votes
3answers
652 views

What happens if I delete all user passwords?

I have a Fedora VPS with a root user that has no password. I login with SSH keys. I had another, less privileged account on that server, used for web administration. I've now deleted its password ...
2
votes
2answers
378 views

Finding root password

I installed a Ubuntu and it only has a user. I can login to the system without login. It doesn't ask me for un/pwd. but when I am in, and I want to run some commands as root (sudo), it ask for ...
2
votes
4answers
682 views

sudo without password - security? [duplicate]

Possible Duplicate: What specific vulnerabilities am I creating by disabling the sudo password? I'm involved yet again in the old argument on whether sudo without password is secure enough ...
2
votes
1answer
435 views

A local, centralized, secure way to store FTP login data, including passwords

I want to be able to store the login details all of my remote FTP accounts in one place, securely. Then I'd like clients like autofs/curlftpfs, Filezilla, etc to use this one store of passwords. I'm ...
2
votes
1answer
113 views

Why 'mkpasswd -m sha-512' produce different result every time it is called?

I am using this function to create a password in the shadow file $ mkpasswd -m sha-512 password $6$o50n4EfNOBzfs$K5l5AcOI5e0I9n2df0LmR11OLSPKSVM6AGBOnWVfDDfMubb46MrAj0zehdLNEoYzD2fj5q4XUdDwexj/dWLHy/ ...
2
votes
1answer
88 views

upload and dowload the files from server without giving password

I want to download the file from sever by using cron job, so I need to use scp command without giving password by keyword. How do I do so?
2
votes
1answer
102 views

Hash in the shadow file, but no password?

A very strange thing happened: There is a user that has a HASH: [root@notebook /home/username/Desktop/b/a] cat passwd-machine foo:x:2229:3001:,,,System,fooo,-,userid for ...
2
votes
1answer
327 views

su not asking for password

My su does not ask for password. When I run su it simply logs me in to root. I tried su - root then it asks for password. Now, because of this kdesu runs applications with root rights without ...
2
votes
1answer
4k views

Debian Live-CD user password

I am trying to use Debian live from an USB, however I do not succeed in logging in… What is the standard user and password to get access? I have tried searching this question on the internet and ...
2
votes
2answers
103 views

change regular user's password with root access

I have Ubuntu installed on a Raspberry pi. I have a normal user pi, but I forgot the password. However, I do have root access. How would I change pi's password using root?
2
votes
2answers
244 views

How does a BIOS password work?

I have created a BIOS password. I use the Dvorak keyboard layout. When I switch my keyboard layout to Qwerty and restart, and then type password in with the different layout, there is no change. ...
2
votes
2answers
732 views

Using for loop to brute-force a password

I just wanted to brute-force my old router but the for-loop was really amateur style. How to write a nice for-loop, if I only know the charaters included? Found already that page but it does not ...
2
votes
1answer
741 views

wpa_supplicant store password as hash (WPA-EAP with phase2=“auth=PAP”)

Is there a way to store my password in /etc/wpa_supplicant/wpa_supplicant.conf as some hash instead of plaintext? By "password" I refer here to the password used for phase2 authentification. I do not ...
2
votes
1answer
1k views

Apache boot without asking for passwd

So I'm maintaining a server which has a verified SSL certificate setup, however there is a password on the private key and so whenever apache is reboot, we get a message asking for the password. This ...
2
votes
1answer
176 views

Where can I find a reference to the format of the comment field (field 5) of the /etc/passwd file?

In the /etc/passwd file on my system, the "comment" field, field 5, is inconsistent in its contents. I thought that I could extract it to get the full name of the user. fullname=`awk -F: '$1 == name ...
2
votes
3answers
4k views

debian not accepting administrative password

I have XFCE Debian on an old PowerPC PowerBook G4. When I go to open Synaptic Package Manager, a window pops up asking for my administrative password. I enter the password I normally use for sudo in ...