Tagged Questions
1
vote
5answers
272 views
How to securely automate running commands as root with “sudo su -”?
hint (on client side, how to encrypt files/pwd's):
# encrypt pwd with ssh key:
openssl rsa -in ~/.ssh/id_rsa -outform pem > ~/.ssh/TEMP-id_rsa.pem 2>/dev/null
openssl rsa -in ~/.ssh/id_rsa ...
1
vote
1answer
50 views
keeping keys on an auxiliary removable drive
It seems that servers are only as secure as the machine that holds the keys and that in turn means the desktop/screensaver password is the line of defence for not only the desktop itself but any ...
2
votes
3answers
302 views
rsync server/daemon security
I have a NAS (Netgear Readynas NV+) at home and a linux (Arch) box at work that is always on. The linux box is already running an ssh server/daemon and the NAS is already running an rsync ...
1
vote
1answer
350 views
SSL handshake failure with Shibboleth
I am using Shibboleth for single user authentication and it needs a ssl configuration which facilitates the user authentication process. Before it was working fine but now I am facing a SSL handshake ...
1
vote
3answers
5k views
vsftpd fails pam authentication
Moving a tried-and-true vsftpd configuration onto a new server with Fedora 16, I ran into a problem. All seems to go as it should, but user authentication fails. I cannot find any entry in any log ...
3
votes
1answer
151 views
How are loaded SSH keys referenced by name?
I'm using chef's knife ec2 tool which requires the name of a loaded SSH key (that was created in the Amazon EC2 control panel)
It seems strange to me that it uses a name to reference the keypair - ...
4
votes
3answers
1k views
SSH authentication: either SSH keys or one time password
I have an Ubuntu 10.04 Linux server that I normally ssh into (from my home machine) using ssh key authentication. However, sometimes I need to ssh remotely from potentially insecure machines (like ...
4
votes
1answer
375 views
Custom PAM modules and security considerations
I am writing my own PAM module that will be part of an application that I am developing, but I'm not sure exactly where to put it. My module basically does network-level authentication (with other ...
30
votes
2answers
9k views
Why is there a big delay after entering a wrong password?
I notice a weird (well, according to me) thing about passwords. For example, if I type an incorrect password during login, there will be a few seconds' delay before the system tells me so. When I try ...
