Tag Info

Hot answers tagged

6

Setup ENCRYPT_METHOD SHA512 in file /etc/login.defs Also pay attention to NOTE mentioned in the same file, just above the ENCRYPT_METHOD parameter, which says Note: It is recommended to use a value consistent with the PAM modules configuration. So additional modification along with /etc/login.defs is to modify /etc/pam.d/common-password ...


4

You're looking for the chpasswd command. You'd do something like this: echo 'pi:newpassword' | chpasswd # change user pi password to newpassword Note that it needs to be run as root, at least with the default PAM configuration. But presumably run as root isn't a problem for a system deployment script. Also, you can do multiple users at once by feeding it ...


3

According to the manual: man passwd: -S, --status Display account status information. The status information consists of 7 fields. The first field is the user's login name. The second field indicates if the user account has a locked password (L), has no password (NP), or has a usable password (P). The third field gives the ...


2

Linux use pam to handle authentication tasks. Setting default password hashing algorithm was done by editing /etc/pam.d/common-password: password [success=1 default=ignore] pam_unix.so obscure sha256 Change to whatever algorithm you wan to use: password [success=1 default=ignore] pam_unix.so obscure sha512 Now, your default password hashing ...


2

Leaving server_prompts as-is gives you the default (RFC compliant) behaviour, otherwise you might need to modify your clients to supply additional values. The password is looked up in the CONFDIR/passwd file, CONFDIR is equal to /etc/exim4 on Debian. Is your intention that all users use a common password? Then you could change the server_condition. ...


2

By design ssh doesn't allow 'embedding' of passwords - that's because it has a mechanism for non-interactive auth using public-private key pairs. So I would suggest you consider that as your first port of call. Usually it's as simple as: run ssh-keygen on your client. add the id_rsa.pub to ~/.ssh/authorized_keys on your server. If that's not an ...


2

From man screen: password [crypted_pw] Present a crypted password in your ".screenrc" file and screen will ask for it, whenever someone attempts to resume a detached. This is useful if you have privileged programs running under screen and you want to protect your session from reattach attempts by another user masquerading as your uid ...


1

From the passwd(1) manpage: -S, --status Display account status information. The status information consists of 7 fields. The first field is the user's login name. The second field indicates if the user account has a locked password (L), has no password (NP), or has a usable password (P). The third ...



Only top voted, non community-wiki answers of a minimum length are eligible