Questions regarding password-based authentication and password management

learn more… | top users | synonyms

2
votes
4answers
272 views

Does ssh send the password over the network?

Basically the entire question is in the headline: Does ssh send the password over the network? Presuming of course that login via username and password is used. I'm asking because if ssh doesn't send ...
1
vote
1answer
59 views

Unable to add or delete users

I'm currently having issues running adding, deleting and modifying Linux users. Reasonably new to Linux so pretty sure I have tried everything to resolve this. [root@device01 /]# useradd testuser ...
6
votes
1answer
51k views

How to lock users after 5 unsuccessful login tries?

How to lock users after 5 unsuccessful login tries? I gathered a few distributions/versions to how to do it, but I can't test it. RHEL4: by adding the: auth required /lib/security/$ISA/...
0
votes
2answers
42 views

Switch user using password from file

how can i switch user using su command and adding password from file ? i want to make a script which will automaticly switch the user, having the user and the password ,instead of manually typing the ...
0
votes
0answers
12 views

How to compile dictionary database for testing password cracking?

Ive been trying to figure out how to use database wordlists for testing passwords on my network. Ive come across some sites that provide thousands of words and I want to know how to add them to a ...
3
votes
2answers
946 views

Warn about password expiration without forcing change

It's pretty simple. I would like to figure out what combination of changes in /etc/login.defs and/or /etc/pam.d/system-auth-ac. I would need to perform to allow the following behavior: I want a ...
39
votes
6answers
92k views

How to create SHA512 password hashes on command line

In Linux I can create a SHA1 password hash using sha1pass mypassword. Is there a similar command line tool which lets me create sha512 hashes? Same question for Bcrypt and PBKDF2.
1
vote
2answers
12k views

vsftp user authentication problems

I configured my ftp user's home dir to /var/www and set a password but I cannot login with ftp 127.0.0.1, it keep giving me 530 Login incorrect. Why is this? I'm sure I have typed the password right. ...
-4
votes
0answers
16 views

Can vault be installed and used on UNIX [closed]

I know that Vault is supported on Windows, Linux, Open BSD, MAC OS, Net BSD, Free BSD. But there is no software package available for UNIX. Is Vault supported on UNIX. If it is not supported then can ...
2
votes
2answers
2k views

How do I edit the hotspot configuration for Network Manager?

Running Arch/Linux with everything up-to-date and I use network manager's built-in hotspot function to share my Internet. I'm trying to edit the configuration (mostly the password, as I don't like ...
0
votes
1answer
812 views

Linux Mint MATE: Disable encrypted volume password dialog

I'm running the MATE edition of Linux Mint on my laptop. I have an external USB disk with a LUKS container on it. The USB disk is connected to the laptop's docking station. Whenever I connect the ...
3
votes
1answer
3k views

Apache boot without asking for passwd

So I'm maintaining a server which has a verified SSL certificate setup, however there is a password on the private key and so whenever apache is reboot, we get a message asking for the password. This ...
-1
votes
2answers
262 views

Passwordless login (from physical console and from others users)

How to configure an user (in debian) to login without password ? An user without password needs to login in physical terminals (ttys - not pty) either using su - user from another user, without ...
3
votes
1answer
60 views

Cannot login SSH with key, always asking password

There is a issue confusing me for couple of days. I have 3 Servers. A, B and C. I want access B and C from A via ssh. I have set public key/ authorized_keys ... on A,B,C. Scenario #1: Access B(.133)...
0
votes
5answers
978 views

How to make the script automated to take password on its own?

I have a script that is doing sftp some files from one server to another, like inside the script script.ksh I have the below lines; sftp user@ip_address << EOF cd path put file1 bye EOF When ...
0
votes
0answers
37 views

SCP demanding password for root

I configured (successfully I hope) a client and a server on OpenWRT (SSH), now I'm trying to use scp to put a file on a server from the client, but it doesn't work because it wants me to give a ...
1
vote
2answers
157 views

Script samba password but securely

I want to script the addition on a samba user and the password. I have seen solutions similar to the one here Piping password to smbpasswd echo -ne "$PASS\n$PASS\n" | smbpasswd -a -s $LOGIN but ...
21
votes
11answers
7k views

How to create strong passwords in Linux?

I wonder how I can create strong passwords on Linux (for both normal and admin users) and if there are specific programs to do that.
6
votes
3answers
12k views

Two ways to lock a password but only one to unlock

CentOS 6 Linux has two ways to lock a password: passwd -l usermod -L Today I found out, that they do something different. passwd writes two exclamation marks into the shadow file. # passwd -d ...
48
votes
5answers
76k views

Manually generate password for /etc/shadow

I need to manually edit /etc/shadow to change the root password inside of a virtual machine image. Is there a command-line tool that takes a password and generates an /etc/shadow compatible password ...
0
votes
1answer
38 views

Cleanest way to require the user to enter password to run a program?

What is the cleanest way to require the user to enter password in order to run a particular program without the use of third-party applications? For example, if I type firefox to launch it from the ...
6
votes
0answers
134 views

Taking a picture with a laptop webcam after entering an incorrect password

I'd like to set up my laptop so that if a wrong password is entered when the screen is locked, a picture is taken using the laptop's webcam. I examined xlock (from xlockmore package), but there is no ...
5
votes
3answers
6k views

chroot permission denied! But I'm root!

I am trying to chroot into an old HD to change a forgotten password, but chroot says permission denied? what gives? I am root! The harddrive I am trying to chroot into is an old version of edUbuntu 7....
-2
votes
1answer
57 views

Bash script if - else contitions [closed]

I would like to do create a bash script that downloads a specific installer from the internet, installs it, create a desktop file that launches it, make it auto start, then remove the installer, but ...
0
votes
1answer
83 views

ssh/git does not use GUI to ask for password after upgrade to to Ubuntu 16.04

I used to run Ubuntu 14.04 on my computer. Whenever I used ssh keys to log in to various servers, I used to get a GUI pop-up dialog asking me for the password for my key. After entering the password ...
1
vote
1answer
61 views

script ssh login to server and pass root password

I have written an expect script to automate the login process for ssh. My user account has rsa keys setup but once I log in I want to switch to root but the remote server is hanging on the password. I ...
5
votes
4answers
2k views

Stracing su and ssh shows the password. Is this a security flaw or am I missing something?

I'm currently fascinated by strace so, being new to it, I decided to play around a little. As suggested by the question title, I tried both strace su and strace ssh. Both commands displayed the ...
5
votes
2answers
2k views

Scripting htdigest -c /path/to/file/$user $user $password in Bash

I want to be able to script with a password in variable $password. htdigest -c /etc/apache2/pw/$user $user $password At the moment it asks me to manually enter a password; this is not going to be ...
0
votes
0answers
17 views

Generating word list base on possible numbers/caracters via Crunch in Kali Linux

I'm new to crunch. I'm try to generate word list containing 8 characters long. I've tried crunch 8 8 > pw.txt It freeze my computer because it doesn't have enough space for that. Is there a ...
2
votes
1answer
17 views

How to “forget” user credentials after logging in to a windows share (samba)

I logged in from my Mint to a windows share (which is actually a linux running samba, if it's relevant), typed in the password, and got it. Even though I marked it to forget the password immidiatly, ...
5
votes
2answers
5k views

Unable to pass the password to su in a script

I am writing a build script. This script has to copy a file in the end. This file will be placed in another users home directory and it is also necessary that the file belongs to this second user. My ...
1
vote
0answers
34 views

How to read the password of a user and implement it in the subsequent commands?

I am writing an api call that requires the user id and password of the user. I can get the user id but how to get his password and supply it to a variable? Here is the api command curl -u $user:$...
3
votes
1answer
30 views

Can I unlock 'pass'?

In my search for a simplistic password manager, I found 'pass' and made it my choice. One unexpected difficulty, that I encountered, is that web searches about its features are difficult to phrase in ...
2
votes
2answers
155 views

How can I run ssh-add on demand? Can it act as SSH_ASKPASS?

I want to ssh from user@local to user@remote several times per day with an encrypted SSH key, a situation which ssh-agent handles with a good trade-off between security and usability. I'd also like ...
3
votes
1answer
3k views

Resetting password in Linux Mint when disk is encrypted

I have a system (VM, actually) with Linux Mint 15 on it. The disk is encrypted, but I remember that password -- just not the password for my account. I've tried changing the command in GRUB from ro ...
0
votes
0answers
17 views

In Ubuntu Chromium does not load any saved passwords in Normal Mode but working fine in Incognito Mode

I have a weird problem. I recently did a software update for Chromium and now it does not load any off my saved passwords (I literally had hundred for all my clients.) When I go to manage saved ...
3
votes
3answers
18k views

How to Use Encrypted password in shell script AIX

I had written a shell script that will connect with the Database to perform some operations This is my sample code #!/usr/bin/ksh . /home/ram/.profile sqlplus username/pwd@TNS<<EOF select ...
6
votes
3answers
3k views

Logged on via ssh-key, can I reset my account password?

I am logged in on a server via sshkey (ssh -i /home/me/.ssh/ssh-key me@server). I got sudo rights on that server from the admin, but I can't exercise them, since I forgot my actual Unix password (or ...
3
votes
1answer
40 views

groupadd -p Not Recommended?

I have a question about groupadd, specifically with password (-p). It says it is not recommended, "This option is not recommended because the password (or encrypted password) will be visible by users ...
0
votes
1answer
52 views

Ubuntu & Plesk - How to exclude a sub-url from password protection?

I have website which is password protected where runs a php app on it. Now I have to unprotect a sub-url of that website but without disablng the protection of the main site which is configured ...
-1
votes
2answers
80 views

Creating a user without a password on NetBSD

On my NetBSD installation, I have it set so that root has no password. I can login as root without typing a password. But, when I create a user with just useradd -m <username>, log out, then ...
0
votes
0answers
18 views

Where are WiFi passwords stored in Linux Mint? [duplicate]

Where are WiFi passwords stored in Linux Mint? I have tried this looked into /etc/NetworkManager/nm-system-settings.conf, but could not find it.
4
votes
7answers
7k views

Hiding Password in Shell Scripts

How can I hide a password in shell scripts? There are a number of scripts that are accessing database. If we open the script others also aware the username and password. So if anyone knows how to hide ...
0
votes
1answer
33 views

How to delete password for current account

I just installed Ubuntu 15.10 on my new desktop. However, I want to erase the password of it. I followed the instructions here. I now can successfully login with out password, but I cannot use sudo ...
25
votes
3answers
101k views

How do you change the root password on Debian?

I want to change the password I assigned to root on my Debian webserver to something longer and more secure. Bit of an obvious newbie question, but how do I do that? I haven’t forgotten/lost the ...
2
votes
1answer
26 views

Can I make it so that all new users created in the future will have an expired password by default? [duplicate]

I want to make it so that every time anyone creates a new user on my system that user will be forced to set a password during their first login. I can't find anything in /etc/login.defs that will do ...
2
votes
2answers
15k views

can't ssh into remote host with root, password incorrect

I have a remote host, previously I can ssh into it with root and password ssh root@remote_host or I ssh into it first using a regular user account ssh esolve@remote_host and then su root and ...
3
votes
3answers
54 views

Sudo-like remembrance of passwords for own scripts

I have a script which requires a password for authenticating a web service. A single password for a pre-defined user will suffice, and the password should if possible be stored securely (not plain ...
68
votes
2answers
8k views

I accidentally typed my password into the login field, is it still secure?

I was looking down at my keyboard and typed my password in because I thought I had already typed my login name. I pressed Enter, then when it asked for the password I pressed Ctrl+c. Should I take ...
2
votes
2answers
111 views

Hiding passwords in wpa_supplicant.conf with WPA-EAP and MSCHAP-v2

My wpa_supplicant.conf looks like this: network={ ssid="Some name" scan_ssid=1 key_mgmt=WPA-EAP eap=PEAP identity="my-user-id" password="(clear text password here)" ca_cert="/usr/share/...