Questions regarding password-based authentication and password management

learn more… | top users | synonyms (1)

3
votes
1answer
1k views

Why does pam_mount ask for password?

I used the pam-auth-update tool in order to enable some pam configuration profiles: PAM configuration PAM profiles to enable: [*] encfs encrypted home directories [*] Unix ...
2
votes
1answer
20 views

GNU Screen - any way to remove password when detached?

Protecting a GNU screen session with a password is good security. However, how does one remove the password if you need to share a session with a colleague? I tried the following to clear it and got ...
-2
votes
2answers
29 views

A little help passwd status on linux

On a linux distro user mino report this passwd status passw -S mino mino P 04/21/2015 0 90 15 -1 P=passwd ok 04/21/2015 = date creation 0 min pass? 90 max pass valid 15 = ? -1 = ? Thanks
2
votes
2answers
66 views

Change Password Programmatically

In the current version of Raspian, I know it is possible to change the password of the current logged in user from the command line like so: sudo passwd which will then prompt the user to enter a ...
1
vote
2answers
2k views

Linux can't recognize the right password when ssh'ing?

I've created a local port forwarding and I was trying to ssh into my own port. During the process, I found that my own Linux won't recognize me even when I have the right password ...
2
votes
2answers
521 views

securely automating a script which requires a key to do its task

I have a script that downloads bank transactions to store in a database. To get these transactions requires a password for each account. The database is encrypted and requires a key to access it. All ...
0
votes
2answers
5k views

vsftp user authentication problems

I configured my ftp user's home dir to /var/www and set a password but I cannot login with ftp 127.0.0.1, it keep giving me 530 Login incorrect. Why is this? I'm sure I have typed the password right. ...
5
votes
2answers
337 views

How to set default password algorithm to sha512 on Linux?

on AIX, it would be a simple: chsec -f /etc/security/login.cfg -s usw -a pwd_algorithm=ssha512 Question: But how can we set the default password algorithm to sha512? UPDATE: I think pwd_algorithm ...
1
vote
1answer
21 views

LDAP Force Password Change Through HTTPS

We have a "master" server running Suse Enterprise with LDAP that controls user's access to our systems. We want to implement a 90 day expiration policy, but the issue is that most of our servers are ...
13
votes
6answers
2k views

Is there a root password on OS X and Ubuntu?

When you setup a new Ubuntu or OS X installation a user is generally created for you. On OS X it is whatever username you pick. On Ubuntu (the server version) usually the ubuntu user is created. The ...
1
vote
1answer
18 views

Configuring Exim on Debian to authenticate using only a password?

I am attempting to configure Exim in such a way that clients who wish to relay email through the server must supply a single passphrase. The file /etc/exim4/conf.d/auth/30_exim4-config_examples ...
2
votes
3answers
9k views

Lost password for a user on a Linux Server: How reset it?

On a Server an user 16040 has lost his password. I have password for root but don't have password for user 16040. How can I reset his password? With passwd 16040, unix ask me current password that I ...
4
votes
2answers
951 views

Sudo Su automated login

I want to automate the login process with sudo su. I have seen lot of questions on these, but none of them are working for me. Automate login with sudo and su Here's my what I tried so far echo ...
0
votes
0answers
71 views

shell script prompting for password but not taking it while doing tar

In my shell script, I have following lines: function tarIt() { FILE_OWNER=$1 TAR_FILE_NAME=$2 FILE_NAME=$3 su - $FILE_OWNER -c "tar -czf $TAR_FILE_NAME $FILE_NAME 2>&1" if [ ${?} ...
0
votes
2answers
59 views

SSH authenticity couldn't be established

Last night I SSH'ed to different systems.... one system/SSH reported that the "authenticity of HOSTNAME couldn't be established......." and it asks if I want to continue or something, I didn't and ...
1
vote
5answers
4k views

Is there some default password for a new user in Linux?

I am a Windows user gradually moving towards Linux. In Windows we have an option of either having or not having some password for a user. Once we do not put a password we can directly log in to the ...
1
vote
1answer
2k views

How can I manually decrypt the hard drive?

I've just switched to Ubuntu 12.04 one year ago and moved all my photos, documents, etc to the 1TB main hard drive that has been encrypted during the installation process - not LVM but only the home ...
2
votes
1answer
72 views

Policy in /etc/pam.d/password-auth is not being enforced

I've updated login.defs and password-auth to include a minimum length on passwords (12), but the minlen is not being enforced when I attempt to change a user's password with passwd. None of the ...
0
votes
0answers
35 views

How to change the password display in linux? [duplicate]

In general when we enter the password, nothing is display in the screen. I want to display * when I enter password in Linux. Current behavior: abc@123:$ su testuser ...
1
vote
1answer
26 views

How can I store an encrypted rdesktop password for easier sign-in?

I am using rdesktop on a Fedora laptop to connect to Windows computers at work. To make it easier, I've made an alias in my .bashrc: alias companyremote='rdesktop -u USER -p - -g 1920x1040 -K' So I ...
0
votes
0answers
21 views

How to show the password of a user? [duplicate]

I am a newbie. I know one can make new password for a user, but is there a way to retrieve the current password of a user?
6
votes
3answers
5k views

Allow user1 to “su - user2” without password

I need to allow user martin to switch to user martin-test without password su - martin-test I think this can be configured in /etc/pam.d/su. There are already some lines in that file which can be ...
4
votes
3answers
174 views

How to unlock account for public key ssh authorization, but not for password authorization?

The ssh won't let me login, because account is locked. I want to unlock the user on my server for public key authorization over ssh, but do not enable password-ed login. I've tried: # passwd -u ...
2
votes
1answer
95 views

How can I decrypt my encrypted /home partition?

A year ago I installed Linux Mint 17 on my laptop. I partitioned the HDD and separated the system (/ mount point) and the data (/home mount point). I chose to encrypt the whole /home using the basic ...
4
votes
1answer
2k views

Samba passwords expiring in x days - how do we fix them to not expire

We use OpenLDAP and Samba v3. Recently some Samba-defined users (no accounts on the shared linux server) started being listed in logwatch as having their passwords come up to "will expire"...I ...
3
votes
1answer
38 views

Change the root password of a Linux image

I'm building a jessie build of Debian. Passwords are saved in /etc/shadow in the build tree, but they are salted obviously so I cannot change it just by editing the file. If this was my installed ...
1
vote
1answer
58 views

How do I log in to Mint when I've forgotten my password?

I'm brand new to Linux. I bought a laptop with Linux Mint 17.1 installed on it, but I can't remember the log in password. Is there a way of disabling it?
0
votes
2answers
50 views

/etc/passwd shortest password

I need to put one character inside the password file so that nobody can notice. I thought that if I was able to put the password as plain text and put something like a space nobody would ever find ...
0
votes
1answer
68 views

What is the difference between these two ways of reseting the root password?

I know several ways to reset root user's password, but want to know which is the best and why it is. For example: A method: Grub > 'e' init=/bin/sh (Remove rhgb and quiet tags if necessary) > ctrl+x ...
10
votes
2answers
211 views

A consistent and safe approach to passwordless accounts with SSH

I must admit that I like servers without passwords in some cases. A typical server is vulnerable to anyone who has physical access to it. So in some cases it is practical to lock it physically and ...
8
votes
4answers
23k views

rsync without prompt for password

I need to execute rsync, without it prompting me for password. I've seen in rsync manpage that it doesn't allow specifying the password as command line argument. But I noticed that it allows ...
1
vote
1answer
49 views

smd5 - generate by unix tool or perl

I have problem on Unix, have to create a lot of passwords in smd5 but don't know how to generate smd5 passwords using some unix tool or perl in a form: {smd5}DoZgZ.OE$vSg4ZH7Bpy0BCdXNzBj001 I have ...
-2
votes
2answers
41 views

How to Find the number of password entries that are on the server? in unix [closed]

Find the number of password entries that are on the server? in UNIX
-2
votes
3answers
50 views

What is “-l” option do to the passwd command? [duplicate]

I have seen people use passwd -l "$USERNAME" , But the linux man page does not explain what the -l option is for. What does it do ?
3
votes
2answers
147 views

Why should you NEVER edit the /etc/shadow file directly?

In another answer here on UNIX & Linux Stack Exchange Michael D Parker wrote, in response to someone saying that doing so was "safe", that:Usually you should NEVER edit the /etc/shadow file ...
1
vote
4answers
88 views

How can I update a password without entering the password twice?

I effectively have a sticky keyboard (host machine to RDP to vCenter to virtual console), but need to update the password of a VM I am building. Using the rescue environment CentOS media offers, I ...
1
vote
0answers
42 views

Persistent SSH port forward without public keys

Problem I haven't found a solution to run an SSH port forward in a reliable and persistent fashion, when the server you are connecting to does not support public-key authentication. Question What ...
2
votes
1answer
36 views

Where do my keypresses go ?

Scenario (Ubuntu 14.04.2) : I wake Ubuntu from suspend. I know (from past experience) that it only takes 2 or 3 seconds for the lock screen to become available. My monitor, however, takes longer - ...
1
vote
1answer
483 views

gnome-keyring-daemon: insufficient process capabilities, unsecure memory might get used

I would like to manage my ssh passwork with gnome-keyring. I am on Ubuntu 12.04.3 LTS, gnome3. I don't have root access to the system. The question is in the title indeed: gnome-keyring-daemon: ...
3
votes
1answer
41 views

How to blacklist common passwords on UNIX systems?

If we have a file on a server (Linux, AIX, etc) that contains the common passwords, how can we filter passwords based on this?
1
vote
0answers
65 views

md5 password hash

I'm looking to create a md5 hash to use in /etc/shadow. Someone suggested using grub-crypt. Every time I put the same password in I get a different hash. [root@endpoint ~]# grub-crypt --md5 Password: ...
2
votes
4answers
64 views

can a super user steal passwords from other users with keylogging?

First, before I get answers containing information that I already know, yes, I'm aware that the superuser can reset passwords, and yes, I know that the superuser can log in as other users without ...
1
vote
1answer
42 views

Cannot update password policy for user

I am trying to update the password policy for a user. It should be as follows: Must be changed every 30 days Once changed, cannot be changed for 3 days Must be disabled after 45 days of inactivity ...
2
votes
6answers
161 views

What are the Implications of Passwordless SSH

If UNIX users reach servers via SSH, and we only want to allow pubkey logins, are there any other items that need to be added to this list, that I should be concerned with? Allow pubkey login in ...
0
votes
0answers
36 views

'Pass' password manager - does it require public key?

The 'pass' password manager uses gpg keys. http://www.passwordstore.org/ However, gpg itself can be used for symmetric encryption of files. Does pass only work using public/private keys, or is it ...
12
votes
4answers
25k views

How to check password with Linux?

I want to check, from the linux command line, if a given cleartext password is the same of a crypted password on a /etc/shadow (I need this to authenticate web users. I'm running an embedded linux.) ...
0
votes
1answer
423 views

Linux Mint MATE: Disable encrypted volume password dialog

I'm running the MATE edition of Linux Mint on my laptop. I have an external USB disk with a LUKS container on it. The USB disk is connected to the laptop's docking station. Whenever I connect the ...
0
votes
3answers
36 views

set samba password now can't login

In trying to get samba server configured on my Fedora I used the following command to set a password: sudo smbpasswd -a user 'user' also happens to be the main user account on the system: the one I ...
0
votes
2answers
46 views

provide password for script begin called inside another script [duplicate]

I have written a shell script which in turn calls another script, but the second one prompts for password. I want to supply the password and pass the prompt without user begin notified. Here is my ...
2
votes
1answer
128 views

Why 'mkpasswd -m sha-512' produce different result every time it is called?

I am using this function to create a password in the shadow file $ mkpasswd -m sha-512 password $6$o50n4EfNOBzfs$K5l5AcOI5e0I9n2df0LmR11OLSPKSVM6AGBOnWVfDDfMubb46MrAj0zehdLNEoYzD2fj5q4XUdDwexj/dWLHy/ ...