Questions regarding password-based authentication and password management

learn more… | top users | synonyms (1)

52
votes
3answers
12k views

Why is there a big delay after entering a wrong password?

I notice a weird (well, according to me) thing about passwords. For example, if I type an incorrect password during login, there will be a few seconds' delay before the system tells me so. When I try ...
0
votes
0answers
6 views

How to change the password of Gmail in CLI? [on hold]

How to change the password of Gmail in CLI ? That is, after: openssl s_client -crlf -connect pop.gmail.com:995 What command should I type?
2
votes
2answers
2k views

How to force change linux password even if similar as previous

I am trying to change my current password in Red Hat Enterprise Linux Server release 5.10 (Tikanga) but it says my new password is too similar. Is there any way to force change ? $ passwd Changing ...
1
vote
7answers
20k views

How to Reset Forgotten Root Password in Fedora 19 from GRUB

YES, FEDORA 19. I saw a lot of information about how to do it but doesn't work with this version. All the tutorials explain the method for older versions of Fedora, i didn't found anything about ...
3
votes
1answer
96 views

OS X FileVault 2 duress password

I've been attempting to add a custom script to run after the FileVault password is entered on login that will check whether it a 'special password' that will run a script in the background after ...
1
vote
6answers
169 views

Hiding Password in Shell Scripts

How can I hide a password in shell scripts? There are a number of scripts that are accessing database. If we open the script others also aware the username and password. So if anyone knows how to hide ...
0
votes
1answer
21 views

Change requirements for passwords on Oracle Solaris 11.2

Is it possible to change strict requirements for user passwords, including root, e.g. I'd like not include numbers in the password as required, since this is a home machine, and I'm the only user?
5
votes
3answers
477 views

Does the shadow file have encrypted passwords?

man 5 shadow says this about the 2nd field: encrypted password Is that true nowadays? I think it should say "hashed password". Am I correct?
2
votes
2answers
663 views

securely automating a script which requires a key to do its task

I have a script that downloads bank transactions to store in a database. To get these transactions requires a password for each account. The database is encrypted and requires a key to access it. All ...
3
votes
3answers
12k views

Lost password for a user on a Linux Server: How reset it?

On a Server an user 16040 has lost his password. I have password for root but don't have password for user 16040. How can I reset his password? With passwd 16040, unix ask me current password that I ...
16
votes
2answers
2k views

SSH ignores characters after correct password string?

Remote machine 10.10.10.1 has password "asdFGH12" for user named "user". I'm able to log in even if I type in password "asdFGH12dasdkjlkjasdus" or any other characters after the "asdFGH12" string. $ ...
1
vote
1answer
26 views

Disabling su - <user1> alone

In my Team , we have a server which few people know the root password I can see they log into root and then use su - user1 to use from user1 login., I cannot change root password for some reasons , ...
2
votes
0answers
33 views

Is there a password manager server application

Yet another hackers attack on the infrastructure of companies that offer to store our passwords begs the question: Is there a password manager server application? (Along with browser extensions) ...
3
votes
2answers
35 views

How to generate a CSR for attaching SSL certificate to the site? [duplicate]

How can I generate a CSR for attaching SSL certificate to the site? In various articles about installing SSL certificates are described different ways of generating private key and CSR. That's like ...
0
votes
1answer
25 views

Manipulating a (non-root) password in Fedora 22

My Fedora 22 (workstation-gnome) home pc has two accounts: steve, which has no password, and root which does have a password. On this website, the fedora 22 - change from gnome to kde4 topic may ...
2
votes
2answers
51 views

Add a user wthout password but with SSH and public key

I want to add a user to Red Hat Linux that will not use a password for logging in, but instead use a public key for ssh. This would be on the command line.
2
votes
3answers
2k views

/etc/shadow : how to generate $6$ 's encrypted password?

In /etc/shadow file there are encrypted password. Encrypted password is no longer crypt(3) or md5 "type 1" format. (according to this previous answer) Now I have a ...
1
vote
1answer
2k views

How can I manually decrypt the hard drive?

I've just switched to Ubuntu 12.04 one year ago and moved all my photos, documents, etc to the 1TB main hard drive that has been encrypted during the installation process - not LVM but only the home ...
2
votes
1answer
70 views

How to safely transmit a password over SSH for a remote command to use

On the local server, I have a program that stores the password in the predefined environment variable (SPECIAL_PASSWORD). On the remote server I have a program that reads and uses a password from a ...
0
votes
2answers
19 views

Installing Kali Linux

This is my 4th attempt at installing Kali Linux mini on Dell Inspiron 1545 Laptop. When I get to dialog that says "Select components to install" there is no way to select additional components it ...
0
votes
1answer
32 views

How to change password of an ssh identity file

Can I, and in that case how can I, change the password of an SSH identity file without having to generate a new key and setting up it all over again?
8
votes
3answers
39k views

Shell Script for logging into a ssh server

I tried writing a shell script which can do automatic login into a ssh server using password which is mentioned in the script. I have written the following code: set timeout 30 /usr/bin/ssh -p 8484 ...
0
votes
1answer
21 views

How to see the password in rhel6 [duplicate]

How to see the password what we are entering in RHEL6. If not how to see at least the entering password in some special characters.
2
votes
1answer
36 views

Edit samba user password hash/digest without knowing the password

I am maintaining a samba server for an office environment. So far, whenever there had to be a new user, I called the person over and let him type in his samba password on my console, after I typed ...
1
vote
1answer
29 views

Why root is not constrained by pam

I have the following settings in file /etc/pam.d/common-password. password requisite pam_cracklib.so retry=3 lcredit=-1 ucredit=-1 dcredit=-1 password [success=1 ...
1
vote
1answer
25 views

How to format password using SCP

I'm currently writing a Script to upload files to my server via SCP. I have the following line: sshpass -p password!% scp -P 1234 ./test.text user@mydyndns:~/test.txt But everytime I try that I ...
0
votes
0answers
39 views

How to Sync UNIX Passwords SAMBA4.x?

My current server is running Debian 8 jessie with Samba 4. Its purpose will be to host a simple file sharing server for around 100 people on Windows machines. I already have a collection of UNIX users ...
2
votes
1answer
65 views

What does **___________ mean in /etc/shadow?

When I look at /etc/shadow I see several entries that look like this: username:**___________::::::: What does the "**___________" mean? That is where I should see the password hash.
1
vote
2answers
61 views

What could be causing a delay between running passwd and being able to login with that password?

I have a RHEL 6.6 Server that I am seeing odd behavior with. When I change a password using the passwd command, the /etc/passwd file gets updated without issue (confirmed with timestamp check). ...
3
votes
2answers
773 views

Where does Samba 4 store user passwords?

Where does Samba 4 store user passwords? How can I import my password hashes from Samba 3 in Samba 4? I am using my own LDAP server with samba 3, and the password hash is stored within the ...
5
votes
4answers
106 views

How do I put comments in my /etc/shadow file?

I am running through some system upgrades and my package manager is showing changes between the upstream /etc/shadow and mine. I would like to put some comments in the file for next time this ...
0
votes
1answer
59 views

CentOS 7 - while installing i set disk encrypted with password, but on reboot always it asking password

While installing CentOS 7, i put password for disk encrypt. Now while working remotely on that machine and doing reboot it always ask password to be inserted on-site. Is this normal? or there is a ...
0
votes
1answer
19 views

dhcpd restart command asks for password from command line but not from a script?

I have a script that runs and will ssh into another server to restart its dhcpd. In the script, the command literally is: sudo ssh -n $SERVER /sbin/service dhcpd restart This works fine when the ...
0
votes
2answers
87 views

SSH authenticity couldn't be established

Last night I SSH'ed to different systems.... one system/SSH reported that the "authenticity of HOSTNAME couldn't be established......." and it asks if I want to continue or something, I didn't and ...
2
votes
2answers
304 views

How do I edit the hotspot configuration for Network Manager?

Running Arch/Linux with everything up-to-date and I use network manager's built-in hotspot function to share my Internet. I'm trying to edit the configuration (mostly the password, as I don't like ...
2
votes
1answer
1k views

SCP and/or SSH command with password in line

First, I'm TRYING to use rsa keys because I'm using the script to create RSA keys, but initially I have to connect to the remote machine to pass over the newly generated authentication key. Having ...
4
votes
1answer
91 views

Is it safe for my ssh user to be given passwordless sudo for `apt-get update` and `apt-get upgrade`?

I have an SSH standard user account on my personal server, and it has sudo access (via its password). I ssh in using a public key, so I don't have to type in the account password to log in. Is it ...
0
votes
2answers
6k views

vsftp user authentication problems

I configured my ftp user's home dir to /var/www and set a password but I cannot login with ftp 127.0.0.1, it keep giving me 530 Login incorrect. Why is this? I'm sure I have typed the password right. ...
3
votes
1answer
1k views

Why does pam_mount ask for password?

I used the pam-auth-update tool in order to enable some pam configuration profiles: PAM configuration PAM profiles to enable: [*] encfs encrypted home directories [*] Unix ...
1
vote
2answers
34 views

How to pass password to mysql command line

I have MySQL password saved on a file foo.php, for example P455w0rd, when I try to use it: $ cat foo.php | grep '$dbpwd=' | cut -d '"' -f 2 | mysql -U root -p mydb -h friendserver Enter password: ...
1
vote
1answer
24 views

Script samba password but securely

I want to script the addition on a samba user and the password. I have seen solutions similar to the one here Piping password to smbpasswd echo -ne "$PASS\n$PASS\n" | smbpasswd -a -s $LOGIN but ...
5
votes
4answers
3k views

Force Firefox to remember passwords on particular sites

Usually, when I log into a website with username and password, Firefox asks whether it should remember the login details. When I click yes, next time I visit the website, the username and password ...
-1
votes
1answer
47 views

How can I get a log of all incorrectly entered passwords in linux?

How can I get a list of all incorrect passwords used whenever someone tried to log in. And how can this be generalized to all types of password fields in linux? As it mentioned by K1773R, yes it's a ...
1
vote
2answers
94 views

Script to read line by line from a file pipe that to another command and output to another file

I've got this weird old app that I'm trying to support and it stores the passwords in plain text and I'd like to hash them. I'd really like to have an input file in csv with a username,password for ...
1
vote
4answers
302 views

How to “cat /etc/shadow” on an HMC?

hscroot@hmcserver:~> grep root /etc/group root:x:0:hscroot,ccfw hscroot@hmcserver:~> hscroot@hmcserver:~> ls -la /etc/shadow -r-------- 1 root shadow 5252 2015-05-06 19:36 /etc/shadow ...
0
votes
0answers
224 views

Cracking .cap file without dictionary

.cap file taken by airodump handshake I need to crack .cap file with bruteforce attack If the password between 8 and 12 letter containing characters+numbers+symbols I tried simple crunch command ...
14
votes
4answers
28k views

How to check password with Linux?

I want to check, from the linux command line, if a given cleartext password is the same of a crypted password on a /etc/shadow (I need this to authenticate web users. I'm running an embedded linux.) ...
2
votes
0answers
409 views

Password protected zip archives open without password

I have a zip archive that is password protected in linux(the password is "secret"). However, whenever I try to open the zip file I am not prompted for a password or anything. I also have a python ...
1
vote
1answer
87 views

Set a password on Damn Small Linux

I'm running Damn Small Linux. When you open the command prompt, you are automatically logged in as the default user called dsl and granted root privileges (with sudo). How can I set a password for the ...
1
vote
1answer
105 views

passwd does not work after change CRYPT_DEFAULT

I want to change algorithm for password encryption in Solaris 10 server. When I change CRYPT_DEFAULT option from __unix __ to 6, I can not change my old password with passwd command and I get ...