Questions regarding password-based authentication and password management

learn more… | top users | synonyms

3
votes
1answer
113 views

How to blacklist common passwords on UNIX systems?

If we have a file on a server (Linux, AIX, etc) that contains the common passwords, how can we filter passwords based on this?
3
votes
1answer
845 views

gnome-keyring-daemon: insufficient process capabilities, unsecure memory might get used

I would like to manage my ssh passwork with gnome-keyring. I am on Ubuntu 12.04.3 LTS, gnome3. I don't have root access to the system. The question is in the title indeed: gnome-keyring-daemon: ...
3
votes
2answers
4k views

Subversion (svn) doesn't store passwords in gnome-keyring

I fight with svn since 2 hours to store my password inside the gnome keyring, but nothing worked. I'm on a fresh installed archlinux system with the following packages installed: acl 2.2.52-1 ...
3
votes
1answer
269 views

Solaris/OpenIndiana: Password for roles?

I've been gently experimenting with roles in Solaris, and wonder a bit about setting a password for it. I want the role I've created to be used by several users, so setting password to the same as ...
3
votes
1answer
410 views

Is it a bad idea to add myself to the sudo group?

Members of the sudo group in my Debian install can execute anything without entering a password. This is convenient, but seems like a bad idea. NOTE: My computer is an ordinary desktop, not a server ...
3
votes
1answer
2k views

Can I automate mounting a cifs share without storing my password in plaintext?

I currently use a script which contains commands along the lines of sudo /sbin/mount.cifs $SERVER_SHARE $MOUNT -o username=$DOMAIN_$USER,uid=$USER,gid=$USER,file_mode=0664,dir_mode=0775 to mount my ...
3
votes
1answer
5k views

Brute force access to a Firebird database?

Ok, so here's the deal. When migrating a certain product with terrible documentation to another database type, my Firebird database was deleted. I then proceeded to recover it from the filesystem ...
3
votes
2answers
11k views

Will a users password expire if I set the “maxexpired” to “-1”? [maxage not 0] - AIX

So under AIX 6, according to "lsuser" the user has the following settings: maxexpired=-1 maxage=2 So this means that 2 weeks after the last password update of the user the password will expire, but ...
3
votes
1answer
2k views

Why does a user get prompted for password under AIX?

Users get prompted for password, and according to the lsuser -f username output: expires=0 maxexpired=-1 maxage=13 users shouldn't be prompted for changing password. Why does he has a change ...
3
votes
1answer
908 views

Change default for Nautilus (file_manager) from “Forget password immediately”?

When opening a tab which needs to mount a Samba share, Nautilus 2.30.1 displays a window: Password required for share xxx on localhost Password: [ ] (*) Forget password immediately ( ) ...
3
votes
2answers
36 views

Feedback when entering passwords, without revealing length

I often SSH into a machine and use sudo on it. When entering passwords, I'm always afraid that another window will steal the focus. However, I don't want to display asterisks (with pwfeedback, for ...
3
votes
2answers
110 views

How to generate a CSR for attaching SSL certificate to the site? [duplicate]

How can I generate a CSR for attaching SSL certificate to the site? In various articles about installing SSL certificates are described different ways of generating private key and CSR. That's like ...
3
votes
1answer
148 views

OS X FileVault 2 duress password

I've been attempting to add a custom script to run after the FileVault password is entered on login that will check whether it a 'special password' that will run a script in the background after ...
3
votes
1answer
137 views

How to use my login password to do two things

I have a CIFS drive that I mount regularly, and it requires a password for it. Since it's annoying to type my password every time, I wrote a script that sets the PASSWD environment variable, mounts ...
3
votes
3answers
29 views

Sudo-like remembrance of passwords for own scripts

I have a script which requires a password for authenticating a web service. A single password for a pre-defined user will suffice, and the password should if possible be stored securely (not plain ...
3
votes
1answer
61 views

Is it possible to convert linux salted sha512 password hash to LDAP format?

We have an LDAP server which stores passwords and other user data. The server is not used for authentication of client machines though but only for authentication of client apps. So users change their ...
3
votes
1answer
38 views

Unlock the encrypted Volumes after restarting the server via SSH

I used the sudo shutdown -r to restart my Mac server via SSH. However, after restarting the server, I discovered that two volumes are offline due to encryption. What I am trying to do is input the ...
3
votes
1answer
60 views

Printing through a Samba server without recording the password in plaintext

I need to access a printer through a Samba server. In CUPS, I could make it work by entering a device location such as smb://username:password@hostname/printer_name. However, it would mean for my ...
3
votes
1answer
653 views

how to verify if root password changed correctly

I have an OpsWare task, that changes root passwords on a massive number of servers, by replacing the root's password hash in /etc/shadow file. I need a script of some sort, which preferably runs ...
3
votes
1answer
254 views

Why sudo won't remember my password?

I use sudo in many systems, but I have one of them that makes me type my password each time I run sudo. All the others remember it for a while. This is debian 7.4 wheezy and sudo 1.8.5 I found this : ...
3
votes
0answers
2k views

Changing Samba/LDAP password with passwd

We've installed CentOS Directory Server (389 DS) and have Samba using it as a backend. This works great except that when enabling password syncing in the smb.conf it is only synced one way. I could ...
3
votes
0answers
123 views

Restrict usage of the same password during a time period

I need to configure a server with some requisites on the password changing: in addition to other requisites, I need to ensure that, on a password change, it is not repeated (last 5 passwords) and ...
3
votes
3answers
3k views

Shell script to become root

How can we write a shell script to become root? That is I donot want to input the password at prompt it should be within the script itself. I was trying to make but failed to do so.Is it possible, if ...
3
votes
0answers
440 views

ZIP password finders for Linux?

I'm trying to extract ZIP files for an encrypted archive I've forgotten the password for. So far I've found the tool fcrackzip which does what I want, but its own manpage states that it has numerous ...
2
votes
8answers
4k views

How to give a normal user permission to change root password

Please do not ask why, but is it possible to do it? p/s: I know it's not a good thing, let's just say someone from the top management who is computer illiterate want some sort of control over the ...
2
votes
6answers
4k views

Hiding Password in Shell Scripts

How can I hide a password in shell scripts? There are a number of scripts that are accessing database. If we open the script others also aware the username and password. So if anyone knows how to hide ...
2
votes
5answers
868 views

How to add a password to a BASH script

I want to create a script to run the following BASH command: mysqldump -u [username] -p [db_name] > [path to backup file] Which results in a backup file. When running this in BASH, it prompts ...
2
votes
3answers
2k views

Do all Linux distributions use the same cryptographic hash function?

Do all Linux distributions use the same cryptographic hash function? If yes, is it provided with the kernel itself? EDIT:- I refer to the function mainly used for storing user login passwords.
2
votes
2answers
2k views

How to get hashed password in /etc/shadow using getpwnam()?

Apparently there is a function (getpwnam) that given a username, will return the appropriate entry in /etc/passwd with the other details for that user (shell, uid, gid, etc.). However, I have no idea ...
2
votes
4answers
2k views

Can separate unix accounts share a username but have separate passwords?

On unix systems, each separate user account has a unique username. Passwords, then, are not unique - every distinct user could have the same exact password. I want to do the converse. I want one ...
2
votes
6answers
233 views

What are the Implications of Passwordless SSH

If UNIX users reach servers via SSH, and we only want to allow pubkey logins, are there any other items that need to be added to this list, that I should be concerned with? Allow pubkey login in ...
2
votes
2answers
13k views

can't ssh into remote host with root, password incorrect

I have a remote host, previously I can ssh into it with root and password ssh root@remote_host or I ssh into it first using a regular user account ssh esolve@remote_host and then su root and ...
2
votes
2answers
1k views

How is using a public-key for logging in to SSH any better than using a password?

I'm not asking about password vs key authentication. I've seen a few times (and even Amazons AWS) says that even if SSH has a major vulnerability that key authentication would make such an exploit ...
2
votes
5answers
16k views

Is there some default password for a new user in Linux?

I am a Windows user gradually moving towards Linux. In Windows we have an option of either having or not having some password for a user. Once we do not put a password we can directly log in to the ...
2
votes
2answers
173 views

Will I be prompted for the sudo password a second time?

This is what I plan to do: #!/bin/bash sudo -i <<'EOF' iptables-save | awk '/^[*]/ { print $1 } /^:[A-Z]+ [^-]/ { print $1 " ACCEPT" ; } /COMMIT/ { print $0; ...
2
votes
3answers
1k views

What happens if I delete all user passwords?

I have a Fedora VPS with a root user that has no password. I login with SSH keys. I had another, less privileged account on that server, used for web administration. I've now deleted its password ...
2
votes
1answer
565 views

Setting the root password vs. sudo -i

Should one always set a root password, or is sudo -i acceptable? Two problems is in reading other posts (maybe junk I realize): sudo -i eliminates the need for a password. Isn't that a problem for ...
2
votes
4answers
2k views

Change password in headless mode

I am building a script to fully automate a VPS setup, and I need to change the root password. I would like to avoid typing it as the script is running through SSH. Is there a way to redirect an ...
2
votes
3answers
88 views

What does it mean a ! before the username field in /etc/passwd?

After doing some googling I could not find why in the /etc/passwd shows a ! at the beginning of the line. It looks like this: !user:x:0:0:user:/home/user:/bin/bash any ideas? my only guess is ...
2
votes
2answers
543 views

Finding root password

I installed a Ubuntu and it only has a user. I can login to the system without login. It doesn't ask me for un/pwd. but when I am in, and I want to run some commands as root (sudo), it ask for ...
2
votes
4answers
782 views

sudo without password - security? [duplicate]

Possible Duplicate: What specific vulnerabilities am I creating by disabling the sudo password? I'm involved yet again in the old argument on whether sudo without password is secure enough ...
2
votes
1answer
578 views

A local, centralized, secure way to store FTP login data, including passwords

I want to be able to store the login details all of my remote FTP accounts in one place, securely. Then I'd like clients like autofs/curlftpfs, Filezilla, etc to use this one store of passwords. I'm ...
2
votes
2answers
84 views

Avoiding plain-text password in http_proxy

I am behind a corporate firewall, which brings lots of pains in the area of proxies. There are two main approaches I've found to work: Use Cntlm at the cost of not being able to connect (from the ...
2
votes
2answers
128 views

Add a user wthout password but with SSH and public key

I want to add a user to Red Hat Linux that will not use a password for logging in, but instead use a public key for ssh. This would be on the command line.
2
votes
2answers
1k views

How strong is the encryption of a zip file in Linux Mint

Zip encryption has had often a bad reputation of being weak, but some would argue that a zip file encrypted using certain algorithms (such as by using AES), together with strong password, is really ...
2
votes
1answer
235 views

upload and dowload the files from server without giving password

I want to download the file from sever by using cron job, so I need to use scp command without giving password by keyword. How do I do so?
2
votes
1answer
307 views

Hash in the shadow file, but no password?

A very strange thing happened: There is a user that has a HASH: [root@notebook /home/username/Desktop/b/a] cat passwd-machine foo:x:2229:3001:,,,System,fooo,-,userid for ...
2
votes
1answer
1k views

su not asking for password

My su does not ask for password. When I run su it simply logs me in to root. I tried su - root then it asks for password. Now, because of this kdesu runs applications with root rights without ...
2
votes
1answer
7k views

Resetting password expiry date by number of days instead of specifying date

Is there a way with either commands passwd or chage to force the password to expire 90 days from the time of command execution? I know I can do it by date, such as: chage -E "2014-07-31" userid ...
2
votes
3answers
2k views

proper configuration of visudo NOPASSWD for bash backup script

The abstract question is: If script x calls program y, do I need a NOPASSWD entry in /etc/sudoers for x, y or both x & y? (And can x then call sudo -v without a password?) Details: I'm trying ...