Questions regarding password-based authentication and password management

learn more… | top users | synonyms (1)

2
votes
1answer
25 views

Usage of pinentry with keepass2 for gpg mail encryption

Debian Jessie, XFCE 4.10, KeePass2, IceDove (with Enigmail).. I'm using KeePass2 generated passwords for my gpg private key, to de/encrypt mails. Icedove is my client which uses the enigmail. As ...
2
votes
0answers
11 views

Integrate my own PAM module with the passwd command

I know that to integrate my module with the passwd command all I need to do is add the following line to the /etc/pam.d/passwd file: password sufficient mymodule.so My question is I want my module ...
1
vote
0answers
22 views

Editing nsswitch.conf to check for files other than /etc/passwd while searching local files for user details

I have a file in /etc named radius which contains the user account details similar to /etc/passwd but of Radius users. How do I configure /etc/nsswitch.conf to check /etc/radius in addition to ...
2
votes
2answers
92 views

Unable to pass the password to su in a script

I am writing a build script. This script has to copy a file in the end. This file will be placed in another users home directory and it is also necessary that the file belongs to this second user. My ...
6
votes
3answers
355 views

“no such user” but user is in passwd file

Looking at the files in /etc/: /etc/group:lbutler:*:1005: /etc/master.passwd:lbutler:$6$s..../:1005:1005::0:0:L Butler:/home/lbutler:/bin/bash /etc/passwd:lbutler:*:1005:1005:L ...
2
votes
1answer
65 views

Expired password and SSH key based login with UsePAM yes

There is a SLES 11 machine. The users logs in via SSH and pubkey (mixed, some user uses password, some use ssh key) The sshd_config has: UsePAM yes PasswordAuthentication yes PubkeyAuthentication ...
18
votes
11answers
3k views

How to create strong passwords in Linux?

I wonder how I can create strong passwords on Linux (for both normal and admin users) and if there are specific programs to do that.
1
vote
5answers
1k views

Is there some default password for a new user in Linux

I am a Windows user gradually moving towards Linux. In windows we have an option of either having or not having some password for an user.Once we do not put a password we can directly log in to the ...
0
votes
1answer
335 views

Linux Mint MATE: Disable encrypted volume password dialog

I'm running the MATE edition of Linux Mint on my laptop. I have an external USB disk with a LUKS container on it. The USB disk is connected to the laptop's docking station. Whenever I connect the ...
0
votes
1answer
33 views

Overwrote passwd file; unable to login to fix it

I am running Red Hat Enterprise Linux ES release 4 (Nahant Update 8). The /etc/passwd file was overwritten by mistake. I have a backup copy of the original passwd file, but when I try to log in as ...
1
vote
1answer
40 views

How to activate the password prompt on a lock screen?

I am using Linux Mint 17 Cinnamon. When I lock the screen it shows a dimmed version of my desktop background and the time. So when I want to unlock it, I usually move the mouse and the prompt for ...
1
vote
1answer
15 views

Default Shell for Samba Machine Accounts

Using Samba, as a domain controller, I need to add Windows machines as users (in /etc/passwd), and to the Samba database as a machine. In the /etc/passwd file, I noticed about half the machines have a ...
6
votes
3answers
628 views

Is w command safe for users?

Some applications allow to pass password as an argument. For example: mysql --user=user_name --password=your_password db_name Is it safe? Besides the fact that typed password would be saved in bash ...
1
vote
1answer
710 views

How can I manually decrypt the hard drive?

I've just switched to Ubuntu 12.04 one year ago and moved all my photos, documents, etc to the 1TB main hard drive that has been encrypted during the installation process - not LVM but only the home ...
2
votes
2answers
68 views

What is my sudo password?

When installing things I am sometimes asked for my sudo password. I don't remember ever having one or setting one. But I do know my su password which has always worked fine for me. It is not the same ...
6
votes
3answers
24k views

Shell Script for logging into a ssh server

I tried writing a shell script which can do automatic login into a ssh server using password which is mentioned in the script. I have written the following code: set timeout 30 /usr/bin/ssh -p 8484 ...
0
votes
2answers
236 views

Change sudo and root password on Debian

I have sudo access, but I don't remember the sudo or root password; how do I change it from my limited account using sudo?
0
votes
2answers
1k views

vsftp user authentication problems

I configured my ftp user's home dir to /var/www and set a password but I cannot login with ftp 127.0.0.1, it keep giving me 530 Login incorrect. Why is this? I'm sure I have typed the password right. ...
1
vote
0answers
32 views

gksu -S ask for password only once even when set to three times in sudo configuration

I have a problem with gksu command. It always ask for password only once even when I set Defaults passwd_tries=3 in /etc/sudoers file. Command: $ gksu -S --debug ls No ask_pass set, using default! ...
3
votes
1answer
557 views

Why does pam_mount ask for password?

I used the pam-auth-update tool in order to enable some pam configuration profiles: PAM configuration PAM profiles to enable: [*] encfs encrypted home directories [*] Unix ...
1
vote
2answers
52 views

/etc/shadow : how to generate $6$ 's encrypted password?

In /etc/shadow file there are encrypted password. Encrypted password is no longer crypt(3) or md5 "type 1" format. (according to this previous answer) Now I have a ...
4
votes
1answer
1k views

Samba passwords expiring in x days - how do we fix them to not expire

We use OpenLDAP and Samba v3. Recently some Samba-defined users (no accounts on the shared linux server) started being listed in logwatch as having their passwords come up to "will expire"...I ...
3
votes
2answers
2k views

Second field in /etc/shadow

If the second field of the /etc/shadow file is set to !!, does it mean that the account is disabled? Or does it mean that the account is active with no password assigned?
31
votes
2answers
3k views

Why is this random password flagged saying it is too simplistic/systematic?

How is the random string M1uG*xgRCthKWwjIjWc*010iSthY9buc being detected as too simplistic/systematic for a password according to passwd and cracklib-check? Try it on your machine and see echo ...
0
votes
1answer
42 views

Changing my default directory in passwd changes my prompt

I don't understand what's happening in this scenario. I changed the home directory of a user by editing the /etc/passwd file instead of using usermod -d. It worked: the default directory wasn't ...
1
vote
0answers
30 views

Change password hashing to PBKDF2 on Debian-based OS

I'm looking for a way to change the hashing scheme on my Debian-based OS from sha512 to pbkdf2. Searching the internet hasn't helped much. The closest I've got is this question: Enable Blowfish-based ...
1
vote
1answer
90 views

How to force change linux password even if similar as previous

I am trying to change my current password in Red Hat Enterprise Linux Server release 5.10 (Tikanga) but it says my new password is too similar. Is there any way to force change ? $ passwd Changing ...
0
votes
0answers
24 views

Help with creating random passdown [duplicate]

This is the command I am issuing to generate password that has capital and lower case letters numbers, numbers and only 1 special character. I can't get it to work, can some one on what is that I am ...
0
votes
0answers
26 views

Debian, ActiveDirectory and Password

I have joined a Debian Wheezy to a Win server 2003 with Active Directory, following this guide: Everything goes well except for the password change. I am not able to change the password of my domain ...
5
votes
3answers
13k views

How do I set the password of a new user after the account has already been created?

I used the 'useradd' command to create a new account, but I did so without specifying the password. Now, when the user tries to log in, it asks him for a password. If I didn't set it up initially, ...
7
votes
3answers
586 views

Root and my password are the same

If I cat /etc/shadow I can get the encrypted passwords of root and my user. These passwords are the same (I know, bad security) for each account, but in /etc/shadow they show up as being different ...
16
votes
3answers
37k views

How do you change the root password on Debian?

I want to change the password I assigned to root on my Debian webserver to something longer and more secure. Bit of an obvious newbie question, but how do I do that? I haven’t forgotten/lost the ...
7
votes
5answers
19k views

Program for decrypt linux shadow file

Is there any program or script available for decrypt Linux shadow file ?
3
votes
5answers
1k views

Encrypt a password the same way mysql does

I've created a user ... but forgotten the password mysql> create user 'blayo'@'%' identified by 'right'; Which Linux command line tool can encrypt the password the same way mysql 5.5 does ? ...
0
votes
1answer
32 views

Howto Tell if a System authenticate with password only or through PAM

If my computer has the pam package installed and has the directory /etc/pam.d/sshd, does it mean for sure when I ssh to my computer, I am authenticated through pam modules? The /etc/pam.d/sshd looks ...
0
votes
1answer
32 views

how many password generators are there in debian and how to know which are good

I know of two password generators in Debian. The first one which I have used is apg and it seems to generate some good passwords. $ apg -m 15 -M SNCL RefGav:quedTut7 {Shtetmigdybig1 ...
2
votes
1answer
17 views

Printing through a Samba server without recording the password in plaintext

I need to access a printer through a Samba server. In CUPS, I could make it work by entering a device location such as smb://username:password@hostname/printer_name. However, it would mean for my ...
0
votes
4answers
100 views

sftp script to get a file from remote machine

I use a script, which contains the line: sftp $FTP_USER@phcsftp.pearsoned.com:/dir/file.txt When I run the script, it asks for my password: user@phcsftp.pearsoned.com's password: However, ...
2
votes
1answer
62 views

How do I determine if the linux password was changed?

I'm developing an application which is distributed on a VM. The default password is always the same, but it's hash in /etc/shadow changes with every release. How can I programmatically (e.g., from a ...
17
votes
3answers
265 views

Typical use case for a group password

I checked more than half a century worth Unix experience and neither my colleagues, nor myself has ever set a password on a group (sg and gpasswd). What would be a typical use case for a group ...
1
vote
1answer
53 views

SSH key-only remote login, is disabling password a good practice?

I need a maintenance user which only requires a remote login. I'll preferably use only public keys to login into the account. I thought of just creating the user with useradd myuser, adding later the ...
4
votes
1answer
881 views

Why ssh-copy-id prompts for the local user password three times?

Noticed from my previous question that when trying to copy an SSH public key to a remote host via ssh-copy-id, I am prompted for the local user password three times: ssh-copy-id myuser@myserver ...
1
vote
1answer
1k views

luksOpen: No key available with this passphrase

I've created a encrypted volume with LUKS at home and was looking to use it at work too. Unfortunately, that's not possible. Whyever, I'm unable to access the encrypted data on any other computer than ...
1
vote
2answers
126 views

Different configurations for ssh client depending on ip address or hostname

I have this in my ~/.ssh/config directory: Host 12.34.56.78 IdentityFile ~/.ssh/my_identity_file When I ssh to 12.34.56.78, everything works fine. I'm asked for the passphrase for ...
0
votes
0answers
27 views

Why there are two different shadow files preset in /etc [duplicate]

I am running ubuntu 12.04 on rackspace cloud. Somehow it has two shadow files /etc/shadow /etc/shadow- I know about the first being used for password protection but where second came from ? Can it ...
1
vote
1answer
31 views

How can I run ssh-add on demand? Can it act as SSH_ASKPASS?

I want to ssh from user@local to user@remote several times per day with an encrypted SSH key, a situation which ssh-agent handles with a good trade-off between security and usability. I'd also like ...
0
votes
1answer
45 views

How do I pass my password to gksu?

gksu doesn't has an option like sudo has to pass the password to it in the following way: echo 'password' | sudo -S command Anyway I wonder which is the simplest way to pass my password to gksu. ...
3
votes
2answers
3k views

Ubuntu password policy

I want to set the system-wide password policy on an Ubuntu 12.04 LTS server. Googling around, a lot of people point to this (very old) document: ...
2
votes
1answer
26 views

Understanding passwd --keep-tokens

On GNU/Linux, I do have trouble understanding the meaning of the --keep-tokens option for passwd. As it doesn't seem to be much used as I am not able to find any examples and only online copies of man ...
3
votes
1answer
2k views

Deleting a samba user: pbdedit vs. smbpasswd, what's the difference?

What is the difference between $ pdbedit -x and $ smbpasswd -x to delete samba users?