Questions regarding password-based authentication and password management

learn more… | top users | synonyms (1)

4
votes
1answer
293 views

how to verify if root password changed correctly

I have an OpsWare task, that changes root passwords on a massive number of servers, by replacing the root's password hash in /etc/shadow file. I need a script of some sort, which preferably runs ...
4
votes
1answer
2k views

Samba passwords expiring in x days - how do we fix them to not expire

We use OpenLDAP and Samba v3. Recently some Samba-defined users (no accounts on the shared linux server) started being listed in logwatch as having their passwords come up to "will expire"...I ...
3
votes
1answer
1k views

Why does pam_mount ask for password?

I used the pam-auth-update tool in order to enable some pam configuration profiles: PAM configuration PAM profiles to enable: [*] encfs encrypted home directories [*] Unix ...
2
votes
1answer
59 views

How can I decrypt my encrypted /home partition?

A year ago I installed Linux Mint 17 on my laptop. I partitioned the HDD and separated the system (/ mount point) and the data (/home mount point). I chose to encrypt the whole /home using the basic ...
2
votes
1answer
33 views

Where do my keypresses go ?

Scenario (Ubuntu 14.04.2) : I wake Ubuntu from suspend. I know (from past experience) that it only takes 2 or 3 seconds for the lock screen to become available. My monitor, however, takes longer - ...
2
votes
1answer
138 views

Usage of pinentry with keepass2 for gpg mail encryption

Debian Jessie, XFCE 4.10, KeePass2, IceDove (with Enigmail).. I'm using KeePass2 generated passwords for my gpg private key, to de/encrypt mails. Icedove is my client which uses the enigmail. As ...
2
votes
1answer
26 views

Printing through a Samba server without recording the password in plaintext

I need to access a printer through a Samba server. In CUPS, I could make it work by entering a device location such as smb://username:password@hostname/printer_name. However, it would mean for my ...
2
votes
1answer
35 views

Understanding passwd --keep-tokens

On GNU/Linux, I do have trouble understanding the meaning of the --keep-tokens option for passwd. As it doesn't seem to be much used as I am not able to find any examples and only online copies of man ...
1
vote
1answer
38 views

Cannot update password policy for user

I am trying to update the password policy for a user. It should be as follows: Must be changed every 30 days Once changed, cannot be changed for 3 days Must be disabled after 45 days of inactivity ...
1
vote
1answer
46 views

Automating setup of the SSH tunnel

I need to frequently login to many machines but I can only login to them from a proxy machine or using an SSH tunnel (by tunneling through that proxy machine). The problem is that I cannot use ...
1
vote
1answer
159 views

How to activate the password prompt on a lock screen?

I am using Linux Mint 17 Cinnamon. When I lock the screen it shows a dimmed version of my desktop background and the time. So when I want to unlock it, I usually move the mouse and the prompt for ...
1
vote
1answer
65 views

How can I run ssh-add on demand? Can it act as SSH_ASKPASS?

I want to ssh from user@local to user@remote several times per day with an encrypted SSH key, a situation which ssh-agent handles with a good trade-off between security and usability. I'd also like ...
3
votes
0answers
108 views

Restrict usage of the same password during a time period

I need to configure a server with some requisites on the password changing: in addition to other requisites, I need to ensure that, on a password change, it is not repeated (last 5 passwords) and ...
3
votes
0answers
430 views

ZIP password finders for Linux?

I'm trying to extract ZIP files for an encrypted archive I've forgotten the password for. So far I've found the tool fcrackzip which does what I want, but its own manpage states that it has numerous ...
2
votes
0answers
199 views

Password protected zip archives open without password

I have a zip archive that is password protected in linux(the password is "secret"). However, whenever I try to open the zip file I am not prompted for a password or anything. I also have a python ...
2
votes
0answers
106 views

dbclient - login without manually typing password

On my router which runs OpenWRT I need a script which will keep a SSH connection alive mostly all the time (small breaks are OK). As the ssh server which I want to connect to takes care of multiple ...
2
votes
0answers
38 views

Integrate my own PAM module with the passwd command

I know that to integrate my module with the passwd command all I need to do is add the following line to the /etc/pam.d/passwd file: password sufficient mymodule.so My question is I want my module ...
2
votes
0answers
67 views

Editing nsswitch.conf to check for files other than /etc/passwd while searching local files for user details

I have a file in /etc named radius which contains the user account details similar to /etc/passwd but of Radius users. How do I configure /etc/nsswitch.conf to check /etc/radius in addition to ...
2
votes
0answers
285 views

NetworkManager cannot remember my WiFi password

My system is Gentoo 64bit, with KDE4. I just updated my Gentoo system. And after reboot, it asks me for my WiFi password. But the next I log in, it asks the password again. I checked the settings, and ...
2
votes
0answers
159 views

Why sudo won't remember my password?

I use sudo in many systems, but I have one of them that makes me type my password each time I run sudo. All the others remember it for a while. This is debian 7.4 wheezy and sudo 1.8.5 I found this : ...
2
votes
0answers
71 views

Getting non-stored password from Icedove

I've recently changed my mail password (because of Heartbleed), but I've forgotten the new one. When entering the new password in Icedove, I didn't think of clicking "remember password", but the ...
2
votes
0answers
1k views

Changing Samba/LDAP password with passwd

We've installed CentOS Directory Server (389 DS) and have Samba using it as a backend. This works great except that when enabling password syncing in the smb.conf it is only synced one way. I could ...
2
votes
0answers
488 views

Validate Password for user account from shell script

Application is for a multiple server standardization script Looking for a way in a shell script to check if the password for an OS account (AIX) matches a standardized plain text password. The ...
2
votes
0answers
574 views

Getting a short wifi password to work on Linux Mint

Wifi password became a problem to me. My wifi password consists of only 4 letters but my Linux Mint 12 is expecting more than 7 letters - until then connect button is disabled. Can I work around this ...
1
vote
0answers
36 views

Persistent SSH port forward without public keys

Problem I haven't found a solution to run an SSH port forward in a reliable and persistent fashion, when the server you are connecting to does not support public-key authentication. Question What ...
1
vote
0answers
51 views

md5 password hash

I'm looking to create a md5 hash to use in /etc/shadow. Someone suggested using grub-crypt. Every time I put the same password in I get a different hash. [root@endpoint ~]# grub-crypt --md5 Password: ...
1
vote
0answers
65 views

removing `nullok` from system-auth prevents any root password

[ this is a follow-up on my post on ServerFault : http://serverfault.com/questions/661136/root-accepts-any-password-how-to-change-to-a-real-password ] On an old system the root account accepts any ...
1
vote
0answers
25 views

How do I securely automate inputting passwords?

I would like to automate an SSH connection so that I wouldn't have to enter password and I am not allowed to use authorized_keys. I was thinking about making an expect script but I don't know where I ...
1
vote
0answers
29 views

Pass/Firefox master key integration?

I handle my passwords with pass, and I use the Firefox master password functionality. The master password is rather long and "safe" and stored in pass along with the others. For now, my usual Firefox ...
1
vote
0answers
98 views

Subversion does not store password in gnome-keyring

I am using Linux Mint 16 Petra and svn, Version 1.8.10 (r1615264) and I want to store the passwords of my svn repositories encrypted. Although I think I set all the correct options, I get prompted for ...
1
vote
0answers
154 views

gksu -S ask for password only once even when set to three times in sudo configuration

I have a problem with gksu command. It always ask for password only once even when I set Defaults passwd_tries=3 in /etc/sudoers file. Command: $ gksu -S --debug ls No ask_pass set, using default! ...
1
vote
0answers
74 views

Change password hashing to PBKDF2 on Debian-based OS

I'm looking for a way to change the hashing scheme on my Debian-based OS from sha512 to pbkdf2. Searching the internet hasn't helped much. The closest I've got is this question: Enable Blowfish-based ...
1
vote
0answers
75 views

Which command would you use if you want to remove the password assigned to a group

Suppose I have one or more groups (as in the user database as backed by /etc/group or LDAP or NIS+...) configured with a password (for the sg or newgrp commands). Which command would you use to ...
1
vote
0answers
233 views

Fedora 20. Authentication requires a different password from su

In Fedora 20 (using Mate desktop) I have tried to change the default keyboard layout from US English to UK English, but am asked for "Authentication". The password I have for su is not accepted, and I ...
1
vote
0answers
832 views

PAM's passwd retry prompt fail

I am trying to use PAM to stop password reuse. Adding 'remember=24' to pam_unix stores the old passwords hashed with MD5 which I find unnerving. I was recommended 'pam_pwhistory' instead. Here is the ...
1
vote
0answers
771 views

samba 4 force user

I have a directory with files owned by Linux user quux. I want to give access to it over CIFS using Samba 4 for two persons so they have different usernames foo and bar and passwords but access the ...
1
vote
0answers
202 views

Make gdm/mdm prompt for an empty password on liveCD

By default Fedora liveCD is configured in a way that liveuser is logged in automatically since following lines added to gdm/mdm (a fork of gdm of GNOME2) configuration file [daemon] ...
1
vote
0answers
926 views

Backupninja + Duplicity problem

I have recently installed on a Debian squeeze_64 server the Backupninja and Duplicity utilities. My goal is to backup /foo/bar/* to /desti/nation/ with full backup once a week and differentially once ...
0
votes
0answers
25 views

Can I manually check if a string complies with password rules?

I'm using an ssh script to change passwords on multiple servers as root. I would like to be able to force password rules when I'm doing this. Is there a way for me to check if the password string ...
0
votes
0answers
28 views

Password policy not being enforced

I've configured pam with some basic password policy including forced changes every X days. The problem is that users are not being asked to change password after the set time expires. The ...
0
votes
0answers
29 views

'Pass' password manager - does it require public key?

The 'pass' password manager uses gpg keys. http://www.passwordstore.org/ However, gpg itself can be used for symmetric encryption of files. Does pass only work using public/private keys, or is it ...
0
votes
0answers
55 views

Cracking .cap file without dictionary

.cap file taken by airodump handshake I need to crack .cap file with bruteforce attack If the password between 8 and 12 letter containing characters+numbers+symbols I tried simple crunch command ...
0
votes
0answers
27 views

migrating local users to LDAP

I have sucessfully setup LDAP and LAM on a raspberry pi in my home network. I have several Linux machines around the house, some Windows machines, aswell as a QNAP TS-210 NAS. They all have the same ...
0
votes
0answers
15 views

Returning from a sleep the desktop displays shortly (before entering password), privacy issue

OS: Linux mint 17.1 Cinnamon 64-bit Cinnamon version 2.4.6 Intel Celeron: 900 @ 2.20Ghzx1 Memory 2 Gb Graphics Card: Intel Mobile 4 series integrated When I return to my computer after it has been ...
0
votes
0answers
26 views

NCR unix system v/386 release 4 recover root password

we have NCR 3455 system from long time as attached all information for server (images) , so we need your help to assist us to get root password which lost it , really we appreciate your efforts if ...
0
votes
0answers
34 views

Debian, ActiveDirectory and Password

I have joined a Debian Wheezy to a Win server 2003 with Active Directory, following this guide: Everything goes well except for the password change. I am not able to change the password of my domain ...
0
votes
0answers
29 views

Is it possible to create an alias to rlogin and pass login paramteres?

There is a system I need to rlogin to for work, and each time it asks for my username and password and after the login I have to type in a code-word in order to get to the view I want. Is it possible ...
0
votes
0answers
43 views

How to reset the password on a Kurobox PRO NAS appliance

I've had this old Kurobox PRO demo unit (Precursor to the Buffalo LinkStation series of NAS appliances) kicking around for quite some time now, I decided to fire it up and see if I could install ...
0
votes
0answers
120 views

Installing MySQL 5.6 Validate password plugin

So I have installed MySQL 5.6.19 Enterprise Edition and have installed the validate_password.so plugin. My question I have is, Does the MySQL password policy notify the user of what the requirements ...
0
votes
0answers
108 views

how to change a NCSA squid proxy user password from the client en

I have implemented a squid proxy web caching server with NCSA authentication. Proxy users are able to login and access the internet. Now my client wants to change his proxy password from their end. ...