Questions regarding password-based authentication and password management
2
votes
1answer
38 views
Change Password of a user in /etc/shadow
I would like to change the password of a user in the /etc/shadow.
I can't use password changing programs like passwd. It must be done by editing the /etc/shadow.
The /etc/shadow is on a mounted hard ...
4
votes
3answers
1k views
How to create SHA512 password hashes on command line
In Linux I can create a SHA1 password hash using sha1pass mypassword. Is there a similar command line tool which lets me create sha512 hashes? Same question for Bcrypt and PBKDF2.
0
votes
1answer
111 views
Jboss application startup and shutdown asks for password. Howto automate with init script?
Jboss application startup and shutdown of BMC-IDM asks for password (called keystore password, some Java stuff).
Howto automate with init script?
Stop application
> stop_idm_suite.sh
Suite ...
2
votes
2answers
61 views
Equivalent of “passwd -sa” in RHEL?
I feel a little silly having to ask this, but: In Solaris you can issue a passwd -sa command which gives you (more or less) the same output as passwd -S userName does, except it prints out the status ...
1
vote
0answers
52 views
samba 4 force user
I have a directory with files owned by Linux user quux. I want to give access to it over CIFS using Samba 4 for two persons so they have different usernames foo and bar and passwords but access the ...
2
votes
1answer
33 views
Nemo: Forget encryption password
I have mounted an encrypted disk by selecting it in Nemo (1.1.2), then typing a password. I can unmount the disk using Nemo, but now it can be remounted without requiring the password.
Probably ...
15
votes
10answers
844 views
How to create strong passwords in Linux?
I wonder how I can create strong passwords on Linux (for both normal and admin users) and if there are specific programs to do that.
15
votes
5answers
6k views
How do you create a user with no password?
In os X it's possible to have users without passwords. If you inspect them with dscl their password show up as *. This is used for system users such as users for databases like mysql, pgsql etc. ...
2
votes
3answers
364 views
Another account with same uid as root gets prompted to set new password for root, not itself
After upgrading the os from 5300-06 to 5300-11, this weird behaviour happened.
My system had another unix account, let's call it "abc", purposely configured its uid to 0 for working as a root with ...
2
votes
1answer
45 views
wpa_supplicant store password as hash (WPA-EAP with phase2=“auth=PAP”)
Is there a way to store my password in /etc/wpa_supplicant/wpa_supplicant.conf as some hash instead of plaintext?
By "password" I refer here to the password used for phase2 authentification. I do not ...
5
votes
1answer
142 views
epiphany plugin for password storage
I am looking for a keepass plugin for epiphany. Something like PassIFox for Firefox: PassIFox "behaves" like a new password storage for firefox - and redirects all queries (fetch/store etc..) to ...
5
votes
3answers
1k views
Getting the password expire time
Let me preface this with: I do NOT have root access available.
I recently got locked out of my account because I did not know the password expiration was getting close, then elapsed. I want to add a ...
2
votes
4answers
675 views
Can separate unix accounts share a username but have separate passwords?
On unix systems, each separate user account has a unique username. Passwords, then, are not unique - every distinct user could have the same exact password.
I want to do the converse. I want one ...
13
votes
2answers
657 views
SSH ignores characters after correct password string?
Remote machine 10.10.10.1 has password "asdFGH12" for user named "user". I'm able to log in even if I type in password "asdFGH12dasdkjlkjasdus" or any other characters after the "asdFGH12" string.
$ ...
1
vote
1answer
122 views
Where does Samba 4 store user passwords?
Where does Samba 4 store user passwords? How can I import my password hashes from Samba 3 in Samba 4?
I am using my own LDAP server with samba 3, and the password hash is stored within the ...
1
vote
1answer
145 views
Rehashing /etc/shadow. Can I force NIS users to change password?
I'm currently migrating a CentOS environment to a Debian one. The users log in over the network using NIS. I was hoping to copy /etc/shadow from my old server to my new one so that we can offer ...
2
votes
1answer
100 views
How to password-less log on via ssh alias
Suppose I have access to pc via a server. I can directly log-on to pc by using How do I connect to a pc through another pc using ssh
Such that my .ssh/config looks like:
Host short
Hostname pc
User ...
3
votes
4answers
5k views
Can a linux user change their password without knowing the current password?
I'm setting up a few ubuntu boxes, and using opscode's chef as a configuration tool. It would be fairly easy to install public keys for each user on each of these servers, and disable password ...
1
vote
1answer
89 views
How to safely put user typed password into a file?
Is there any way to put the password typed by user into a file (either in Unix or in expect).
read -s -p "enter password" input
echo $input > file
Is the above code safe?
I want to use that ...
5
votes
1answer
1k views
export HTTP_PROXY and special characters in passwd
Suppose for the sake of argument my password below is abc123@
I need to authenticate my linux machine through a corporate proxy to get patches and updates... normally I'd use this:
export ...
1
vote
1answer
87 views
Can pwgen output passwords of a certain length?
I'm using the command line tool pwgen to generate passwords because I love the repeatability you get with the sha1 command line flag. To quote the man page:
-H, --sha1=/path/to/file[#seed]
...
4
votes
2answers
66 views
Determining the Password Status of a User
I have a debian box that I connect to via SSH. I have removed the password from the users root, and my personal account using the instructions here, and set up a public/private key pair so I can log ...
30
votes
2answers
9k views
Why is there a big delay after entering a wrong password?
I notice a weird (well, according to me) thing about passwords. For example, if I type an incorrect password during login, there will be a few seconds' delay before the system tells me so. When I try ...
2
votes
3answers
111 views
newgrp asks for password [duplicate]
I don't understand why newgrp prompts me for password when I want to change my group. I don't even know what password it is asking for but certainly not mine (user clime).
$ id
uid=500(clime) ...
0
votes
0answers
68 views
Rss feed notifications in gnome 3
Is there a way to configure Gnome 3 notifications to display password protected RSS feed? Or maybe it is possible to configure another RSS reader to use gnome 3 notifications? It seems to me an ...
1
vote
1answer
106 views
Setting the root password vs. sudo -i
Should one always set a root password, or is sudo -i acceptable? Two problems is in reading other posts (maybe junk I realize):
sudo -i eliminates the need for a password. Isn't that a problem for ...
2
votes
1answer
536 views
How to enter/choose session after logout without password in (Linux Mint) Xfce?
I have Linux Mint 14 Xfce (4.10) and have also installed LXDE desktop, so I can choose between these sessions if I want. Normally I would set one as default and at startup I am not asked for ...
4
votes
2answers
2k views
Disable svn plaintext password storage for all users
By default, Subversion allows users to save their password in plaintext in ~/.subversion/auth/svn.simple. I'm investigating options for storing encrypted passwords in svn, but at the very least and ...
2
votes
1answer
57 views
Apache boot without asking for passwd
So I'm maintaining a server which has a verified SSL certificate setup, however there is a password on the private key and so whenever apache is reboot, we get a message asking for the password. This ...
2
votes
1answer
102 views
Debian Log In Failure With Correct Password
So I have a Debian distro at home (considering getting ubuntu), and I can't login. When I use the correct password is does this thing where it makes it look like it's going to login, and then it ...
3
votes
3answers
7k views
Shell Script for logging into a ssh server
I tried writing a shell script which can do automatic login into a ssh server using password which is mentioned in the script. I have written the following code:
set timeout 30
/usr/bin/ssh -p 8484 ...
2
votes
3answers
370 views
Stracing su and ssh shows the password. Is this a security flaw or am I missing something?
I'm currently fascinated by strace so, being new to it, I decided to play around a little. As suggested by the question title, I tried both strace su and strace ssh. Both commands displayed the ...
7
votes
3answers
2k views
Simplest way to password protect a directory and its contents without having to create new files?
I would like to password protect or encrypt a directory and all the files within it (for the whole directory tree below it). I do not want to bother the whole home directory, I want a specific ...
1
vote
1answer
127 views
Is it possible for sudo to read password from gnome-keyring or similar
I'm currently using sudo a lot in a bunch of scripts, which is turning into a bit of a hassle, as some scripts does not allow interactive input (e.g., Makefiles).
Instead of disabling sudo passwords ...
1
vote
1answer
557 views
Fedora 15 won't remember wireless password
I just installed Fedora 15 beta with Gnome 3. I've done all the updates.
The networking applet asks for the wireless password every time it connects. I found this bug, which says that the issue is ...
1
vote
2answers
271 views
Max password size in AIX 6.1
I found on the AIX documentation some rules to set about passwords length :
minlen Defines the minimum length of a password. The value is a decimal integer string. The default is a value of 0, ...
0
votes
1answer
109 views
run 'service php5-fpm restart' without using sudo
I am integrating my cakephp projects using jenkins.
Right now, I am exploring the use of Phing. There is one task where I need to run
service php5-fpm restart
So far I tried to do this manually. ...
4
votes
1answer
376 views
Why ssh-copy-id prompts for the local user password three times?
Noticed from my previous question that when trying to copy an SSH public key to a remote host via ssh-copy-id, I am prompted for the local user password three times:
ssh-copy-id myuser@myserver
...
5
votes
3answers
258 views
Remote shell script Enter passphrase for
How can I run a script to log into a remote server and execute a remote ssh command without entering in my passphrase?
For example:
When I log onto a remote server and execute the git pull command I ...
3
votes
3answers
594 views
How to take 'password' like input in shell script? [duplicate]
Possible Duplicate:
How to hide commands typed in a Linux shell?
Reading passwords without showing on screen in Bash Scripts
I would like to take a password as input, but I want user to ...
3
votes
0answers
311 views
ZIP password finders for Linux?
I'm trying to extract ZIP files for an encrypted archive I've forgotten the password for. So far I've found the tool fcrackzip which does what I want, but its own manpage states that it has numerous ...
4
votes
1answer
188 views
Encrypt word X to /etc/shadow encryption
I've changed my password to X and the shadow file has changed to:
ahmad:$1$oYINSKjP$eCkCtJV/2dXerAD57WQPj/:15425:0:99999:7:::
I see the encrypted X as $1$oYINSKjP$eCkCtJV/2dXerAD57WQPj/. How can I ...
1
vote
2answers
125 views
Tracing RHEL system hack
I have an RHEL 5.7 installation in the lab and someone changed the root password (either by linux single or some other mode). I would like to identify how was it done and basically be able to identify ...
1
vote
2answers
713 views
Using rsync in a cronjob when a password is needed
Basically I have a bash script that fetches data from my server to perform a backup.
As it is now I have to start that script manually, enter the password, and then wait for it to finish.
I would ...
5
votes
2answers
263 views
Pipe Password to Application When Asked
The following should be done in a bash script:
curl --digest --user schmijos https://bitbucket.org/u/p/get/tip.zip -o tip.zip
How can I automatically submit a password to curl when it asks for it? ...
1
vote
1answer
411 views
How to invoke root privileges from a password prompt of “Software Update” window?
When I try to install software updates using the "Software Update" GUI, I am asked for the root password. Although, I can 'su' in a terminal, the password is not recognized as correct in the GUI ...
1
vote
1answer
884 views
How to reset Linux root and grub passwords?
If we forget our Linux root password, we can change it by changing grub's boot options.
But in this case, we also set a grub password and forgot both passwords. How can we recover both?
0
votes
3answers
8k views
How to check that a user/password is expired in AIX?
I can check that the user is expired or not with:
lsuser -f USERNAME | fgrep expires
But how can I check that the user's password is expired or not? Are there any other "expiring" things that can ...
2
votes
1answer
129 views
I try to add passwords to the “pass” password manager. But my attempts fail with “no public key” GPG errors. Why?
I am trying to install Pass: the standard Unix password manager, however, when I try to add passwords to the appliation I get these errors
gpg: Kelly's Passwords: skipped: No public key
gpg: [stdin]: ...
11
votes
3answers
280 views
What specific vulnerabilities am I creating by disabling the sudo password?
Here are some instructions on how to disable your sudo password. These carry the following warning
If you disable the sudo password for your account, you will seriously compromise the security of ...
