Questions regarding password-based authentication and password management

learn more… | top users | synonyms (1)

3
votes
4answers
2k views

passing passwords to a script

I want to scp a file to a remote host, and from there, run a command on the file, and exit the remote session. If I write a usual script, call scp and then ssh, I am prompted to enter two passwords. ...
3
votes
2answers
4k views

Ubuntu password policy

I want to set the system-wide password policy on an Ubuntu 12.04 LTS server. Googling around, a lot of people point to this (very old) document: ...
3
votes
2answers
620 views

How to make a folder request root password to view execute?

I am running Ubuntu 10.04 LTS. I want to use my laptop to play music in a party. MY screensaver does not need a password to deactivate. I would like to allow people to use my computer to play the ...
3
votes
2answers
957 views

Is Open LDAP meant to work with the passwd command for Linux?

I've implemented an Open LDAP server in OpenSuSE 11.2 via the YaST GUI. I'm having success logging in from the local machine and other machines via LDAP. I am able to change LDAP user passwords via ...
3
votes
3answers
1k views

Why does this password fail AIX and Solaris rules

Had to reset my password on a couple of client servers today, and despite following the rules I get the message "Your password failed to meet: minimum of 2 non-alphabetic characters" back from the ...
3
votes
2answers
60 views

Whose password should I enter?

Authentication is required to perform this action. Whose password should I enter? Mine? Root's? I can never tell. ...
3
votes
4answers
257 views

SSH asking for password after ssh-copy-id

I created a key on my machine with ssh-keygen. I copied the key to remote machine using ssh-copy-id. Tried to connect to remote machine but it asked me the password. Both machines are ubuntu (local ...
3
votes
1answer
791 views

retrieve password on remote server

I normally ssh into a remote server, for which I previously set an option that allows me not to type my password every time. Now that I forgot it, is there any way to retrieve it?
3
votes
1answer
1k views

Does OpenBSD use bcrypt by default?

http://codahale.com/how-to-safely-store-a-password/ with what does OpenBSD store the password by default? They say bcrypt is way more secure then hashing. I googled' it and obsd supports bcrypt, but ...
3
votes
1answer
2k views

Resetting password in Linux Mint when disk is encrypted

I have a system (VM, actually) with Linux Mint 15 on it. The disk is encrypted, but I remember that password -- just not the password for my account. I've tried changing the command in GRUB from ro ...
3
votes
1answer
423 views

How to disable timeout of password prompt for partition decryption during boot?

I have a computer running OpenSUSE 12.1, 64-bit, default install. How it works currently: I turn on the computer It goes through the boot process At some point during boot, I am asked for password ...
3
votes
1answer
504 views

What triggers this screen prompt “Screen used by <username> on host01.”?

Every now and then some key combination clears my working (Gnu) screen and brings up this message: Screen used by <username> on host01 Password: What key combination causes this and what does ...
3
votes
2answers
795 views

Where does Samba 4 store user passwords?

Where does Samba 4 store user passwords? How can I import my password hashes from Samba 3 in Samba 4? I am using my own LDAP server with samba 3, and the password hash is stored within the ...
3
votes
1answer
1k views

Can pwgen output passwords of a certain length?

I'm using the command line tool pwgen to generate passwords because I love the repeatability you get with the sha1 command line flag. To quote the man page: -H, --sha1=/path/to/file[#seed] ...
3
votes
1answer
366 views

Is it a good idea to use pwsafe - a password manager not updated since 2005?

I'm looking for a command-line Linux password-manager. It appears that pwsafe is the program most commonly used. However, its latest update was in 2005. Is it a good idea to use this? Has it been so ...
3
votes
1answer
518 views

Policy in /etc/pam.d/password-auth is not being enforced

I've updated login.defs and password-auth to include a minimum length on passwords (12), but the minlen is not being enforced when I attempt to change a user's password with passwd. None of the ...
3
votes
1answer
59 views

How passwd command from non-root account succeeds

I am trying to change my password as a non root user : passwd The data is updated in /etc/shadow, but checking the permission i get: ---------- 1 root root 6076 Jan 27 17:14 /etc/shadow cat ...
3
votes
1answer
479 views

SSH for user without a login password

I have created a user without a password $getent passwd logcoll logcoll:x:998:999:Log Collector,,,:/var/backups/logcoll:/bin/sh This user has no password, and this machine requires users to login ...
3
votes
1answer
164 views

Export passwords from the `pass` password manager

I've been using the pass password manager for a year or so now, and it's awesome, but sometimes I like to test other password managers and then I need my passwords back. So far I've just been adding ...
3
votes
2answers
273 views

How can I check GMail messages with prompt for password from a script?

I'm using zsh on Ubuntu 14.04 over SSH using Putty and I'm setting up the key bindings for my keyboard. Because zsh doesn't seem to make use of my function keys I thought I'd setup scripts to do ...
3
votes
1answer
3k views

Debian Log In Failure With Correct Password

So I have a Debian distro at home (considering getting ubuntu), and I can't login. When I use the correct password is does this thing where it makes it look like it's going to login, and then it ...
3
votes
1answer
908 views

Debian wake up from suspend password

I am using Debian Squeeze. When I suspend my laptop and wake it up again later, it doesn't ask for the system password. How do I fix this?
3
votes
1answer
34 views

security model of Linux password entry

Whenever a Windows application wants to do something requiring administrator privileges, my screen goes black and a prompt comes up, asking if I want to grant administrator privileges. I understand ...
3
votes
1answer
57 views

How to blacklist common passwords on UNIX systems?

If we have a file on a server (Linux, AIX, etc) that contains the common passwords, how can we filter passwords based on this?
3
votes
2answers
237 views

Is it possible to change passwords temporarily?

I have a Linux system with several users. I don't know their passwords, nor do I want to know them. I have to do a batch copy of some of their directories over SSH, with their account and password. ...
3
votes
1answer
185 views

Solaris/OpenIndiana: Password for roles?

I've been gently experimenting with roles in Solaris, and wonder a bit about setting a password for it. I want the role I've created to be used by several users, so setting password to the same as ...
3
votes
1answer
358 views

Is it a bad idea to add myself to the sudo group?

Members of the sudo group in my Debian install can execute anything without entering a password. This is convenient, but seems like a bad idea. NOTE: My computer is an ordinary desktop, not a server ...
3
votes
1answer
2k views

Can I automate mounting a cifs share without storing my password in plaintext?

I currently use a script which contains commands along the lines of sudo /sbin/mount.cifs $SERVER_SHARE $MOUNT -o username=$DOMAIN_$USER,uid=$USER,gid=$USER,file_mode=0664,dir_mode=0775 to mount my ...
3
votes
2answers
8k views

Will a users password expire if I set the “maxexpired” to “-1”? [maxage not 0] - AIX

So under AIX 6, according to "lsuser" the user has the following settings: maxexpired=-1 maxage=2 So this means that 2 weeks after the last password update of the user the password will expire, but ...
3
votes
1answer
1k views

Why does a user get prompted for password under AIX?

Users get prompted for password, and according to the lsuser -f username output: expires=0 maxexpired=-1 maxage=13 users shouldn't be prompted for changing password. Why does he has a change ...
3
votes
1answer
813 views

Change default for Nautilus (file_manager) from “Forget password immediately”?

When opening a tab which needs to mount a Samba share, Nautilus 2.30.1 displays a window: Password required for share xxx on localhost Password: [ ] (*) Forget password immediately ( ) ...
3
votes
1answer
98 views

OS X FileVault 2 duress password

I've been attempting to add a custom script to run after the FileVault password is entered on login that will check whether it a 'special password' that will run a script in the background after ...
3
votes
1answer
199 views

How can I decrypt my encrypted /home partition?

A year ago I installed Linux Mint 17 on my laptop. I partitioned the HDD and separated the system (/ mount point) and the data (/home mount point). I chose to encrypt the whole /home using the basic ...
3
votes
1answer
105 views

How to use my login password to do two things

I have a CIFS drive that I mount regularly, and it requires a password for it. Since it's annoying to type my password every time, I wrote a script that sets the PASSWD environment variable, mounts ...
3
votes
2answers
44 views

How to generate a CSR for attaching SSL certificate to the site? [duplicate]

How can I generate a CSR for attaching SSL certificate to the site? In various articles about installing SSL certificates are described different ways of generating private key and CSR. That's like ...
3
votes
0answers
198 views

Why sudo won't remember my password?

I use sudo in many systems, but I have one of them that makes me type my password each time I run sudo. All the others remember it for a while. This is debian 7.4 wheezy and sudo 1.8.5 I found this : ...
3
votes
1answer
2k views

Why does pam_mount ask for password?

I used the pam-auth-update tool in order to enable some pam configuration profiles: PAM configuration PAM profiles to enable: [*] encfs encrypted home directories [*] Unix ...
3
votes
0answers
113 views

Restrict usage of the same password during a time period

I need to configure a server with some requisites on the password changing: in addition to other requisites, I need to ensure that, on a password change, it is not repeated (last 5 passwords) and ...
3
votes
0answers
436 views

ZIP password finders for Linux?

I'm trying to extract ZIP files for an encrypted archive I've forgotten the password for. So far I've found the tool fcrackzip which does what I want, but its own manpage states that it has numerous ...
2
votes
8answers
3k views

How to give a normal user permission to change root password

Please do not ask why, but is it possible to do it? p/s: I know it's not a good thing, let's just say someone from the top management who is computer illiterate want some sort of control over the ...
2
votes
2answers
2k views

How to get hashed password in /etc/shadow using getpwnam()?

Apparently there is a function (getpwnam) that given a username, will return the appropriate entry in /etc/passwd with the other details for that user (shell, uid, gid, etc.). However, I have no idea ...
2
votes
3answers
1k views

Do all Linux distro's use the same cryptographic hash function?

Do all Linux distro's use same Cryptographic hash function? If yes, is it provided with the kernel itself? EDIT:- I refer to the function mainly used for storing user login passwords.
2
votes
4answers
1k views

Can separate unix accounts share a username but have separate passwords?

On unix systems, each separate user account has a unique username. Passwords, then, are not unique - every distinct user could have the same exact password. I want to do the converse. I want one ...
2
votes
6answers
179 views

What are the Implications of Passwordless SSH

If UNIX users reach servers via SSH, and we only want to allow pubkey logins, are there any other items that need to be added to this list, that I should be concerned with? Allow pubkey login in ...
2
votes
3answers
2k views

/etc/shadow : how to generate $6$ 's encrypted password?

In /etc/shadow file there are encrypted password. Encrypted password is no longer crypt(3) or md5 "type 1" format. (according to this previous answer) Now I have a ...
2
votes
2answers
9k views

How to remove root password on Debian?

I'm running Debian in a virtual machine and for convenience I would like to remove the password on root (since it doesn't really matter what happens to this box). Internet hasn't been too helpful on ...
2
votes
2answers
702 views

How is using a public-key for logging in to SSH any better than using a password?

I'm not asking about password vs key authentication. I've seen a few times (and even Amazons AWS) says that even if SSH has a major vulnerability that key authentication would make such an exploit ...
2
votes
2answers
156 views

Will I be prompted for the sudo password a second time?

This is what I plan to do: #!/bin/bash sudo -i <<'EOF' iptables-save | awk '/^[*]/ { print $1 } /^:[A-Z]+ [^-]/ { print $1 " ACCEPT" ; } /COMMIT/ { print $0; ...
2
votes
3answers
33k views

Kali Linux: On install, designated root password cannot login - incorrect password

I found an old laptop lying around and I figured I would install Kali Linux on it to learn more about penetration testing and to try to break into my servers for practice and learning more about ...
2
votes
3answers
810 views

What happens if I delete all user passwords?

I have a Fedora VPS with a root user that has no password. I login with SSH keys. I had another, less privileged account on that server, used for web administration. I've now deleted its password ...