Questions regarding password-based authentication and password management

learn more… | top users | synonyms

1
vote
1answer
19 views

Why is /etc/shadow shortening the password that I've set with the command: useradd -p?

[root@P-dude dude]# useradd -p **$6$Ic2PVlwi$2nf.IRWTMy0FHrPza6mh5wjomwbYtIIxnzxPZL7yg8SsvOdbjEpoI0G8uy7AqduYKQOn2R/rnnaalRmfPMy.a0** bwong20 [root@P-dude dude]# cat /etc/shadow | grep bwong20 ...
2
votes
1answer
23 views

Can I make it so that all new users created in the future will have an expired password by default? [duplicate]

I want to make it so that every time anyone creates a new user on my system that user will be forced to set a password during their first login. I can't find anything in /etc/login.defs that will do ...
2
votes
2answers
13k views

can't ssh into remote host with root, password incorrect

I have a remote host, previously I can ssh into it with root and password ssh root@remote_host or I ssh into it first using a regular user account ssh esolve@remote_host and then su root and ...
3
votes
3answers
40 views

Sudo-like remembrance of passwords for own scripts

I have a script which requires a password for authenticating a web service. A single password for a pre-defined user will suffice, and the password should if possible be stored securely (not plain ...
65
votes
2answers
8k views

I accidentally typed my password into the login field, is it still secure?

I was looking down at my keyboard and typed my password in because I thought I had already typed my login name. I pressed Enter, then when it asked for the password I pressed Ctrl+c. Should I take ...
2
votes
2answers
28 views

Hiding passwords in wpa_supplicant.conf with WPA-EAP and MSCHAP-v2

My wpa_supplicant.conf looks like this: network={ ssid="Some name" scan_ssid=1 key_mgmt=WPA-EAP eap=PEAP identity="my-user-id" password="(clear text password here)" ...
3
votes
2answers
36 views

Feedback when entering passwords, without revealing length

I often SSH into a machine and use sudo on it. When entering passwords, I'm always afraid that another window will steal the focus. However, I don't want to display asterisks (with pwfeedback, for ...
0
votes
1answer
13 views

KSH password generator

How to make sure the generated passwords contains all these special characters: ?!/=\? Currently I'm using: pwd_usr["$i"]=`cat /dev/urandom|tr -dc "a-zA-Z0-9-_\?\!\=\/\"|fold -w 15|head -n 1` But ...
0
votes
1answer
766 views

Linux Mint MATE: Disable encrypted volume password dialog

I'm running the MATE edition of Linux Mint on my laptop. I have an external USB disk with a LUKS container on it. The USB disk is connected to the laptop's docking station. Whenever I connect the ...
2
votes
2answers
1k views

How do I edit the hotspot configuration for Network Manager?

Running Arch/Linux with everything up-to-date and I use network manager's built-in hotspot function to share my Internet. I'm trying to edit the configuration (mostly the password, as I don't like ...
11
votes
4answers
18k views

Allow user1 to “su - user2” without password

I need to allow user martin to switch to user martin-test without password su - martin-test I think this can be configured in /etc/pam.d/su. There are already some lines in that file which can be ...
0
votes
1answer
33 views

rsync over ssh without typing the password each time [duplicate]

I got a bash script to synchronize data between two computers. It works fine but I have to type my password every time the rsync command is called. #!/bin/bash sourceIP="192.168.178.128" ...
0
votes
1answer
34 views

How can I avoid being prompted for a password in this script? [duplicate]

I’m using Amazon Linux. If I login as my “otheruser” user, and create a script, test.sh, with this text sleep 5 ; sudo reboot now I can login and run the script like so … [davea@mydevbox ~]$ sudo ...
0
votes
1answer
16 views

What's the difference between lpasswd and passwd commands?

Studying the CentOS/RHEL sysadmin manual, I can't understand if there are or what are the differences between these commands.
6
votes
2answers
8k views

export HTTP_PROXY and special characters in passwd

Suppose for the sake of argument my password below is abc123@ I need to authenticate my linux machine through a corporate proxy to get patches and updates... normally I'd use this: export ...
0
votes
0answers
38 views

Centos 7 root passwd reset

I was stupid enough to log my root password on one spot and that crashed so I lost my root password to my server. I followed the guild of ...
20
votes
8answers
22k views

How do you create a user with no password?

In os X it's possible to have users without passwords. If you inspect them with dscl their password show up as *. This is used for system users such as users for databases like mysql, pgsql etc. ...
2
votes
2answers
766 views

Warn about password expiration without forcing change

It's pretty simple. I would like to figure out what combination of changes in /etc/login.defs and/or /etc/pam.d/system-auth-ac. I would need to perform to allow the following behavior: I want a ...
13
votes
6answers
2k views

Is there a root password on OS X and Ubuntu?

When you setup a new Ubuntu or OS X installation a user is generally created for you. On OS X it is whatever username you pick. On Ubuntu (the server version) usually the ubuntu user is created. The ...
0
votes
1answer
21 views

Proper way of creating new accounts in passwordless systems [closed]

What is the proper way of delivering credentials in passwordless ssh systems (linux)? By passwordless I mean login using only SSH keys. Should I generate pair of ssh keys and deliver it to new user, ...
1
vote
1answer
29 views

How to encrypt/hide password in /etc/network/interfaces file on debian?

How can I encrypt/hide my - wpa-psk "password" - line in the /etc/network/interfaces file? Since it's uncovered and readable for everyone who can get in the file now. Or is it better that I use ...
0
votes
1answer
27 views

Moderate users homedirs - removing cleartext passwords [closed]

On one of Linux terminals I administrate, we allow users to write own scripts in bash/perl/python to enhance their administrative tasks. The problem with users is they don't always follow the rules. ...
5
votes
2answers
3k views

Why does pam_mount ask for password?

I used the pam-auth-update tool in order to enable some pam configuration profiles: PAM configuration PAM profiles to enable: [*] encfs encrypted home directories [*] Unix ...
1
vote
2answers
43 views

Last Password Change of A User [closed]

I'm am currently trying to figure out a command that will show the last password change of a user on a UNIX system. I have tried running the command passwd -Sa and it gives the password change date ...
0
votes
1answer
28 views

Bash script to change password in chroot

I have build a Linux From Scratch live CD and wrote an installer script for it. There is a step in that script in which I take an username and password from the user and create an user. The installed ...
1
vote
2answers
11k views

vsftp user authentication problems

I configured my ftp user's home dir to /var/www and set a password but I cannot login with ftp 127.0.0.1, it keep giving me 530 Login incorrect. Why is this? I'm sure I have typed the password right. ...
1
vote
0answers
16 views

Dictionary attack GPG symmetric encrypted LUKS keyfile

I remember typing in a long phrase for the password. I wrote all the words I could have possibly used into a plain text file, combining the words I know were used in a certain order. I might have ...
1
vote
1answer
29 views

Mechanism behind password storage in sudo

Whats the mechanism behind sudo that stores the password for all subsequent calls to sudo?
3
votes
1answer
62 views

Is it possible to convert linux salted sha512 password hash to LDAP format?

We have an LDAP server which stores passwords and other user data. The server is not used for authentication of client machines though but only for authentication of client apps. So users change their ...
4
votes
2answers
4k views

Debian Log In Failure With Correct Password

So I have a Debian distro at home (considering getting ubuntu), and I can't login. When I use the correct password is does this thing where it makes it look like it's going to login, and then it ...
1
vote
1answer
20 views

Set user-specific password hashing rounds in PAM

In /etc/pam.d/common-password we have a line such as: password [success=1 default=ignore] pam_unix.so sha512 rounds=200000 Meaning, whenever anyone sets their password, hash it with 200,000 rounds ...
5
votes
2answers
255 views

How is the su command masking/protecting my password from being displayed on screen? [duplicate]

Apologies if this is an abstract question - I'll try to be as specific as possible. When I'm at the bash shell and switch to a different account via su - foo, I'm prompted for a password. The ...
1
vote
1answer
50 views

Puppet: Forcing user to change his password at next login

I am using `users' resource to create unix accounts and then set a default password. For this I have written the following manifest . node 'node2.example.com','node3.example.com'{ user { 'askar': ...
1
vote
1answer
27 views

Block regular users from changing their passwords: only root should be able to [closed]

For security reasons, I want to make it so that only root can change user's passwords This can be achieved if I set /usr/bin/passwd to 700. Now, if password aging is enabled or first login is enabled, ...
30
votes
3answers
4k views

Why is the password I entered not visible?

Below is an image of the process I took to create a user on bash in Linux. I understand that the password shouldn't be displayed for security purposes, but what I mean is, why do asterisks (or the ...
3
votes
3answers
8k views

How to Create a Encrypted Password

I want to know how can I create a encrypted password in Ubuntu 14.04 TLS. Tried this: makepasswd --crypt-md5 password_here Did not worked for me throwing this Error sysadmin@localhost:~$ ...
2
votes
2answers
86 views

Avoiding plain-text password in http_proxy

I am behind a corporate firewall, which brings lots of pains in the area of proxies. There are two main approaches I've found to work: Use Cntlm at the cost of not being able to connect (from the ...
-1
votes
2answers
44 views

How can I Log ssh login passwords attempts?

I need to log ssh passwords attempts. I read somewhere you could get this done by patching openssh but I don't know if that is the correct way to get this done. I am using Arch. EDIT: I want to get ...
0
votes
0answers
11 views

is there a tool that edits /etc/login.defs for you?

I am attempting to set password expirations for all new accounts and am curious if any tool already exists that will edit /etc/login.defs for you -- or is manually editing the only way?
1
vote
1answer
67 views

How to login to an ssh server and capture prompts programmatically?

I'm attempting to write a script that will login to a remote server via ssh, without popping up a password prompt to the user (the remote server is not under my control, and they won't allow me to use ...
0
votes
1answer
47 views

Chronos@localhost password fail

I am trying to put Minecraft on my son's Asus C300 Chromebook. I have followed the steps to get into developer mode. I get to chronos@locahost and then I get a message that says We trust you have ...
0
votes
0answers
20 views

Password help chronos

I am trying to put Minecraft on my son's Asus C300 Chromebook. I have followed the steps to get into developer mode. I get to chronos@locahost and then I get a message that says "We trust you have ...
4
votes
3answers
429 views

Usage of pinentry with keepass2 for gpg mail encryption

Debian Jessie, XFCE 4.10, KeePass2, IceDove (with Enigmail).. I'm using KeePass2 generated passwords for my gpg private key, to de/encrypt mails. Icedove is my client which uses the enigmail. As ...
1
vote
0answers
40 views

Linux password expiring and cron jobs failing

I have jobs running on a server which I access via powerbroker (so don't know the password). However the password of the user account expired recently and the said jobs failed. Due to password ...
2
votes
2answers
92 views

Why does root need to enter a password when executing specific commands?

On a certain RHEL5 machine, when root is executing commands such as passwd someuser or any other privileged command, the root password is requested for verification and the command can't be executed ...
0
votes
2answers
34 views

Linux system root login forgotten password recovery instead of new password from hash

I have a multiple Linux hosts(virtualization) to which I can login as root on only one of the host with ssh root@host with ssh key setup(id_rsa.pub and authorized keys). I don't have this setup on ...
4
votes
1answer
151 views

How to recover encrypted /home/ folder in Linux Mint 17.2

The issue: I changed my password earlier today, but I must've made a typo, because I couldn't log in afterwards. I booted into the Grub menu and started a passwordless root shell to reset my password. ...
99
votes
6answers
54k views

How to force ssh client to use only password auth?

If I use pubkey auth from e.g.: an Ubuntu 11.04 how can I set the ssh client to use only password auth to a server? (just needed because of testing passwords on a server, where I default log in with ...
0
votes
0answers
34 views

Password problem when trying to access a LINUX VM

I'm a MAC OS X (El Capitan) user who's currently trying to access a LINUX VM set up by IBM for class. I have downloaded and paired a .ppk file in order to access it (a real pain due to my OS), but for ...
1
vote
3answers
192 views

MySQLdump via crontab - Pass --password=/hashed/password/file so I can use via crontab w/o using plain text password

So I'm setting up a WordPress backup guide/making a backup schedule for myself for real. I want to do MySQL dumps daily, but the command either requires -p then user input or ...