Questions regarding password-based authentication and password management

learn more… | top users | synonyms (1)

2
votes
2answers
510 views

securely automating a script which requires a key to do its task

I have a script that downloads bank transactions to store in a database. To get these transactions requires a password for each account. The database is encrypted and requires a key to access it. All ...
0
votes
2answers
4k views

vsftp user authentication problems

I configured my ftp user's home dir to /var/www and set a password but I cannot login with ftp 127.0.0.1, it keep giving me 530 Login incorrect. Why is this? I'm sure I have typed the password right. ...
5
votes
2answers
329 views

How to set default password algorithm to sha512 on Linux?

on AIX, it would be a simple: chsec -f /etc/security/login.cfg -s usw -a pwd_algorithm=ssha512 Question: But how can we set the default password algorithm to sha512? UPDATE: I think pwd_algorithm ...
1
vote
1answer
12 views

LDAP Force Password Change Through HTTPS

We have a "master" server running Suse Enterprise with LDAP that controls user's access to our systems. We want to implement a 90 day expiration policy, but the issue is that most of our servers are ...
13
votes
6answers
2k views

Is there a root password on OS X and Ubuntu?

When you setup a new Ubuntu or OS X installation a user is generally created for you. On OS X it is whatever username you pick. On Ubuntu (the server version) usually the ubuntu user is created. The ...
1
vote
1answer
16 views

Configuring Exim on Debian to authenticate using only a password?

I am attempting to configure Exim in such a way that clients who wish to relay email through the server must supply a single passphrase. The file /etc/exim4/conf.d/auth/30_exim4-config_examples ...
2
votes
3answers
9k views

Lost password for a user on a Linux Server: How reset it?

On a Server an user 16040 has lost his password. I have password for root but don't have password for user 16040. How can I reset his password? With passwd 16040, unix ask me current password that I ...
4
votes
2answers
933 views

Sudo Su automated login

I want to automate the login process with sudo su. I have seen lot of questions on these, but none of them are working for me. Automate login with sudo and su Here's my what I tried so far echo ...
0
votes
0answers
69 views

shell script prompting for password but not taking it while doing tar

In my shell script, I have following lines: function tarIt() { FILE_OWNER=$1 TAR_FILE_NAME=$2 FILE_NAME=$3 su - $FILE_OWNER -c "tar -czf $TAR_FILE_NAME $FILE_NAME 2>&1" if [ ${?} ...
0
votes
2answers
51 views

SSH authenticity couldn't be established

Last night I SSH'ed to different systems.... one system/SSH reported that the "authenticity of HOSTNAME couldn't be established......." and it asks if I want to continue or something, I didn't and ...
1
vote
5answers
4k views

Is there some default password for a new user in Linux?

I am a Windows user gradually moving towards Linux. In Windows we have an option of either having or not having some password for a user. Once we do not put a password we can directly log in to the ...
1
vote
1answer
2k views

How can I manually decrypt the hard drive?

I've just switched to Ubuntu 12.04 one year ago and moved all my photos, documents, etc to the 1TB main hard drive that has been encrypted during the installation process - not LVM but only the home ...
2
votes
1answer
56 views

Policy in /etc/pam.d/password-auth is not being enforced

I've updated login.defs and password-auth to include a minimum length on passwords (12), but the minlen is not being enforced when I attempt to change a user's password with passwd. None of the ...
0
votes
0answers
35 views

How to change the password display in linux? [duplicate]

In general when we enter the password, nothing is display in the screen. I want to display * when I enter password in Linux. Current behavior: abc@123:$ su testuser ...
1
vote
1answer
25 views

How can I store an encrypted rdesktop password for easier sign-in?

I am using rdesktop on a Fedora laptop to connect to Windows computers at work. To make it easier, I've made an alias in my .bashrc: alias companyremote='rdesktop -u USER -p - -g 1920x1040 -K' So I ...
0
votes
0answers
21 views

How to show the password of a user? [duplicate]

I am a newbie. I know one can make new password for a user, but is there a way to retrieve the current password of a user?
6
votes
3answers
4k views

Allow user1 to “su - user2” without password

I need to allow user martin to switch to user martin-test without password su - martin-test I think this can be configured in /etc/pam.d/su. There are already some lines in that file which can be ...
4
votes
3answers
169 views

How to unlock account for public key ssh authorization, but not for password authorization?

The ssh won't let me login, because account is locked. I want to unlock the user on my server for public key authorization over ssh, but do not enable password-ed login. I've tried: # passwd -u ...
2
votes
1answer
88 views

How can I decrypt my encrypted /home partition?

A year ago I installed Linux Mint 17 on my laptop. I partitioned the HDD and separated the system (/ mount point) and the data (/home mount point). I chose to encrypt the whole /home using the basic ...
4
votes
1answer
2k views

Samba passwords expiring in x days - how do we fix them to not expire

We use OpenLDAP and Samba v3. Recently some Samba-defined users (no accounts on the shared linux server) started being listed in logwatch as having their passwords come up to "will expire"...I ...
3
votes
1answer
36 views

Change the root password of a Linux image

I'm building a jessie build of Debian. Passwords are saved in /etc/shadow in the build tree, but they are salted obviously so I cannot change it just by editing the file. If this was my installed ...
1
vote
1answer
57 views

How do I log in to Mint when I've forgotten my password?

I'm brand new to Linux. I bought a laptop with Linux Mint 17.1 installed on it, but I can't remember the log in password. Is there a way of disabling it?
0
votes
2answers
50 views

/etc/passwd shortest password

I need to put one character inside the password file so that nobody can notice. I thought that if I was able to put the password as plain text and put something like a space nobody would ever find ...
0
votes
1answer
67 views

What is the difference between these two ways of reseting the root password?

I know several ways to reset root user's password, but want to know which is the best and why it is. For example: A method: Grub > 'e' init=/bin/sh (Remove rhgb and quiet tags if necessary) > ctrl+x ...
10
votes
2answers
206 views

A consistent and safe approach to passwordless accounts with SSH

I must admit that I like servers without passwords in some cases. A typical server is vulnerable to anyone who has physical access to it. So in some cases it is practical to lock it physically and ...
8
votes
4answers
22k views

rsync without prompt for password

I need to execute rsync, without it prompting me for password. I've seen in rsync manpage that it doesn't allow specifying the password as command line argument. But I noticed that it allows ...
1
vote
1answer
40 views

smd5 - generate by unix tool or perl

I have problem on Unix, have to create a lot of passwords in smd5 but don't know how to generate smd5 passwords using some unix tool or perl in a form: {smd5}DoZgZ.OE$vSg4ZH7Bpy0BCdXNzBj001 I have ...
-2
votes
2answers
40 views

How to Find the number of password entries that are on the server? in unix [closed]

Find the number of password entries that are on the server? in UNIX
3
votes
1answer
1k views

Why does pam_mount ask for password?

I used the pam-auth-update tool in order to enable some pam configuration profiles: PAM configuration PAM profiles to enable: [*] encfs encrypted home directories [*] Unix ...
-2
votes
3answers
49 views

What is “-l” option do to the passwd command? [duplicate]

I have seen people use passwd -l "$USERNAME" , But the linux man page does not explain what the -l option is for. What does it do ?
3
votes
2answers
143 views

Why should you NEVER edit the /etc/shadow file directly?

In another answer here on UNIX & Linux Stack Exchange Michael D Parker wrote, in response to someone saying that doing so was "safe", that:Usually you should NEVER edit the /etc/shadow file ...
1
vote
4answers
86 views

How can I update a password without entering the password twice?

I effectively have a sticky keyboard (host machine to RDP to vCenter to virtual console), but need to update the password of a VM I am building. Using the rescue environment CentOS media offers, I ...
1
vote
0answers
41 views

Persistent SSH port forward without public keys

Problem I haven't found a solution to run an SSH port forward in a reliable and persistent fashion, when the server you are connecting to does not support public-key authentication. Question What ...
2
votes
1answer
35 views

Where do my keypresses go ?

Scenario (Ubuntu 14.04.2) : I wake Ubuntu from suspend. I know (from past experience) that it only takes 2 or 3 seconds for the lock screen to become available. My monitor, however, takes longer - ...
1
vote
1answer
478 views

gnome-keyring-daemon: insufficient process capabilities, unsecure memory might get used

I would like to manage my ssh passwork with gnome-keyring. I am on Ubuntu 12.04.3 LTS, gnome3. I don't have root access to the system. The question is in the title indeed: gnome-keyring-daemon: ...
3
votes
1answer
41 views

How to blacklist common passwords on UNIX systems?

If we have a file on a server (Linux, AIX, etc) that contains the common passwords, how can we filter passwords based on this?
1
vote
0answers
62 views

md5 password hash

I'm looking to create a md5 hash to use in /etc/shadow. Someone suggested using grub-crypt. Every time I put the same password in I get a different hash. [root@endpoint ~]# grub-crypt --md5 Password: ...
2
votes
4answers
63 views

can a super user steal passwords from other users with keylogging?

First, before I get answers containing information that I already know, yes, I'm aware that the superuser can reset passwords, and yes, I know that the superuser can log in as other users without ...
1
vote
1answer
42 views

Cannot update password policy for user

I am trying to update the password policy for a user. It should be as follows: Must be changed every 30 days Once changed, cannot be changed for 3 days Must be disabled after 45 days of inactivity ...
2
votes
6answers
161 views

What are the Implications of Passwordless SSH

If UNIX users reach servers via SSH, and we only want to allow pubkey logins, are there any other items that need to be added to this list, that I should be concerned with? Allow pubkey login in ...
0
votes
0answers
34 views

'Pass' password manager - does it require public key?

The 'pass' password manager uses gpg keys. http://www.passwordstore.org/ However, gpg itself can be used for symmetric encryption of files. Does pass only work using public/private keys, or is it ...
12
votes
4answers
25k views

How to check password with Linux?

I want to check, from the linux command line, if a given cleartext password is the same of a crypted password on a /etc/shadow (I need this to authenticate web users. I'm running an embedded linux.) ...
0
votes
1answer
419 views

Linux Mint MATE: Disable encrypted volume password dialog

I'm running the MATE edition of Linux Mint on my laptop. I have an external USB disk with a LUKS container on it. The USB disk is connected to the laptop's docking station. Whenever I connect the ...
0
votes
3answers
33 views

set samba password now can't login

In trying to get samba server configured on my Fedora I used the following command to set a password: sudo smbpasswd -a user 'user' also happens to be the main user account on the system: the one I ...
0
votes
2answers
45 views

provide password for script begin called inside another script [duplicate]

I have written a shell script which in turn calls another script, but the second one prompts for password. I want to supply the password and pass the prompt without user begin notified. Here is my ...
2
votes
1answer
125 views

Why 'mkpasswd -m sha-512' produce different result every time it is called?

I am using this function to create a password in the shadow file $ mkpasswd -m sha-512 password $6$o50n4EfNOBzfs$K5l5AcOI5e0I9n2df0LmR11OLSPKSVM6AGBOnWVfDDfMubb46MrAj0zehdLNEoYzD2fj5q4XUdDwexj/dWLHy/ ...
0
votes
0answers
81 views

Cracking .cap file without dictionary

.cap file taken by airodump handshake I need to crack .cap file with bruteforce attack If the password between 8 and 12 letter containing characters+numbers+symbols I tried simple crunch command ...
11
votes
5answers
1k views

What does “,,,” mean in the 5 column in /etc/passwd file? [duplicate]

There are 7 fields in the /etc/passwd file :username,Password,User ID (UID),Group ID (GID),User ID Info,Home directory,Command/shell. Part of rows in my /etc/passwd : avahi:x:105:110:Avahi mDNS ...
1
vote
1answer
47 views

Automating setup of the SSH tunnel

I need to frequently login to many machines but I can only login to them from a proxy machine or using an SSH tunnel (by tunneling through that proxy machine). The problem is that I cannot use ...
1
vote
2answers
50 views

providing password to ssh [duplicate]

The situation: I have an IP : 192.168.1.1 $IP username : root (or whatever) $USER and a passwd: foo $PASSWD Is there a way to give $PASSWD to ssh ? like PASSWORD_VAR=$PASSWD ssh -l $USER $IP ...