New answers tagged password
1
What you are asking for sounds doable, combining the -A option of sudo and the program gnome-keyring-query.
Basically, if you use the option -A, instead of reading the password from stdin, sudo reads the password from an external program that you can specify with the SUDO_ASKPASS environment variable.
This external program could be gnome-keyring-query, a ...
0
On any of the Red Hat distros such as Fedora, CentOS, or RHEL the command mkpasswd doesn't include the same set of switches as the version typically included with Debian/Ubuntu.
To work around this you can use the following Python or Perl one-liners to generate SHA-512 passwords. Take note that these are salted:
Python
$ python -c "import crypt, getpass, ...
2
You can use the mkpasswd tool to do this. There's a good primer on how to use it over on cyberciti.biz, titled: Linux / UNIX: Generating random password with mkpasswd.
Example
mkpasswd --char=10 --crypt-md5
The package is usually called makepasswd, but the tool is typically called mkpasswd.
See the man page for more details.
Generating contents of ...
2
In RHEL/CentOS there is no -a option with passwd but -S option is there. So you run this one liner as root user:
for user in `awk -F: '{print $1}' /etc/passwd`; do passwd -S $user; done
or
for user in $(awk -F: '{print $1}' /etc/passwd); do passwd -S $user; done
1
At least in shadow-utils 4.1.5.1 on Arch Linux, I have -a, which also prints the status. passwd -Sa appears to do what you want. From man passwd:
-a, --all
This option can be used only with -S and causes show status for all users.
-S, --status
Display account status information. The status information consists
of 7 fields. The ...
2
If you really mean "forget the password" it probably already did within microseconds of you entering it.
Persistence of authentication through the login session is maintained in Ubuntu-ish systems by ssh-agent and gnome-keyring-daemon. By their nature of operation (non-invertable hashing) it may be fundamentally impossible to selectively remove one ...
0
Correct me if I'm wrong, but: As far as I understood it, there is no way a computer can come up with a completely random string. So I came up with the following idea [and hope it isn't completely stupid]:
If one throws a 26-sided dice, the chance to throw, say 26 is 1:26. In other words: The chance to throw 26 is about 0.04%. Further, a dice has no memory ...
2
Unfortunately I have to answer the question myself now. "Unfortunately" because the answer is "No, it is not possible".
I took a look at how PAP is working, and came to the conclusion that it is logically impossible to store the password as a hash value.
With PAP, the username and password are sent directly to the authentification side. Therefore, the ...
0
From chage you can do multiple changes and can know the login details as follows...
Usage: chage [options] [LOGIN]
Options:
-d, --lastday LAST_DAY set date of last password change to LAST_DAY
-E, --expiredate EXPIRE_DATE set account expiration date to EXPIRE_DATE
-h, --help display this help message and exit
-I, ...
0
In ldap you will do something like:
ldapsearch -x -Z uid=$1 pwdChangedTime | \
grep -vE '^#|^$' | grep pwdChangedTime | awk '{print $2}'
0
I think the double login could be done with two (or more) PAM authentication backends.
For example if using LDAP and normal passwd/shadow user login, if the password entry fails for a few times for the first method, than PAM falls back to second.
At least this was what I encountered some years ago when we used this same setup.
Whether this would mean that ...
Top 50 recent answers are included
