Questions tagged [authentication]

Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

Filter by
Sorted by
Tagged with
1
vote
0answers
23 views

AD Authentication for Linux VMs

If you have 100's of Linux VM's is it possible to get them all authenticating with an AD LDAP, but more importantly there is no local id needed in every single /etc/passwd and /etc/group of the 100 VM'...
0
votes
2answers
37 views

Efficiently handle malicious connection attempts to server? (Logged as “Connection closed by xx port xx [preauth]” in /var/log/auth.log)?

I wanted to know what efficient way is there to handle malicious attempts to connect to my server. As mentioned, the attempts show up logged in /var/log/auth.log as Connection closed by IPaddress port ...
0
votes
1answer
29 views

Need help with a script that uses passwd and shadow

I would like assistance with something I have to do. I need to verify if all users in passwd are also in shadow, if the primary group exists, if the homedir exists and if it belongs to the correct ...
1
vote
0answers
94 views

Unlock i3lock on i3wm using finger print sensor (fprint)

I am trying to set up my i3lock that I would be able to unlock it using finger print sensor on my thinkpad x390 yoga. I have set up my i3lock in .config/i3/config: exec --no-startup-id xss-lock --...
0
votes
1answer
267 views

fprintd: The driver encountered a protocol error with the device

I am trying to make work my finger print sensor thinkpad x390 yoga. I installed printfd package using yay. When I try to run fprintd-enroll, I get this error: Using device /net/reactivated/Fprint/...
0
votes
1answer
25 views

automating entering username and password on terminal using bash [duplicate]

Actually, the command I'm running is sudo openvpn nl-free-01.protonvpn.com.udp.ovpn So this asks for username and password every time I run the command Enter Auth Username: Enter Auth Password: I ...
0
votes
0answers
21 views

Add Support CRAM-MD5 or DIGEST-MD5 to SMTP server

I use a CentOS Linux server release 7.8.2003 (Core) by Godaddy. My problem is that the SMTP mail server (dovecot-2.3.10.1-1.cp1186.x86_64 and exim-4.93-5.cp1186.x86_64) doesn't accept CRAM-MD5 or ...
0
votes
1answer
32 views

Is it possible to make a user that can only log in using su?

I want to make a user that can only be accessed using su. I can see in the login.conf man page there are different authentication types, and one of the example types is su, but I am unable to discover ...
0
votes
1answer
46 views

Accidentally deleted user, lost all user permission/privilege to sudo

This is my fourth day in Linux OS from windows. I don't know why I did it, but I enter this command sudo deluser <MYUSER> sudo. After entering the command, I lost all my sudo privileges. And ...
0
votes
0answers
18 views

Wireless authentication RX Association Response codes

While authenticating with wpa2, I see lines like RX AssocResp from <mac> (capab=0x8431 status=0 aid=1) in dmseg. I searched the web and also read the authentication method. I couldn't find the ...
0
votes
1answer
40 views

SSH doesn't prompt for new password when expired

I'd like to setup SSH to prompt for a new password when a user's existing one is expired, but currently it just fails to login. I use Kerberos as an authentication backend. You can see this user's ...
0
votes
0answers
12 views

create user on the fly for ssh-ca

I want to use ssh-ca to grant access to servers. What I don't want is, that all user are using the same system user for access. Is it possible to create the systemuser on-the-fly when the ssh ...
3
votes
1answer
53 views

Why when we type wrong password in terminal it has long delay to respond? [duplicate]

I don't know it's just my experience or not, but every time I type a wrong password in terminal, it takes 2 or 3 seconds to respond. And I think It's a very long time for a computer. Does anybody know ...
1
vote
1answer
36 views

Verify SSH authentication with Bash Shell Script?

I need to test SSH authentication on a few servers. Let say the IP Addresses of those servers are saved in ip.txt file I've written similar script in Python using paramiko and netmiko module. The ...
0
votes
0answers
14 views

docker prompts for password (osx)

I just installed Docker Desktop for Mac, but docker commands (docker info, docker build, etc.) prompt me for a password. I know this can be silenced on Linux, but MacOS does not have usermod. How do I ...
1
vote
1answer
1k views

authentication is required to create a color profile on ubuntu 20.04

I upgrade Ubuntu version from 18.04 to 20.04 But when update is complete i found a issues again and again on screen. Here is the screenshot in given below: How to fix these issues. I entered my ...
6
votes
2answers
749 views

How to retrieve ssh password with a working ssh key

I always login a server with a ssh key, so I am not sure what my actual password was anymore. I would need to guess a couple of times. However the server has fail2ban and I don't want to trigger that. ...
0
votes
1answer
49 views

How to specify a password for non-interactive commands with systemctl on a remote host?

Here is what I want to do. I have .service files for a bunch of services spread across multiple hosts. I want to write a shell script that can start or stop all the services, without having to have ...
0
votes
0answers
29 views

libcurl with ca_cert + private_key + cert_chain : working with OPENSSL but not with NSS

I'm writing an HTTP class (in C++) that abstracts the underlying implementation, and I want to be able to deal with a server using strong authentication. My implementation uses libcurl. The user of my ...
0
votes
0answers
11 views

How to authenticate user without agetty login prompt?

I want to write a shell script based on cdm which not only lets the user choose which session to run, but also asks for their username and password. Just to give some details: it uses dialog, which ...
1
vote
0answers
138 views

How can I get my fingerprint reader to work alongisde my password?

I have a Lenovo Thinkpad T430 with an integrated fingerprint reader. I want to make it work alongside my password, not replace it. What I mean by this is that, when a password prompt comes up, I want ...
0
votes
0answers
19 views

Centos7 SELinux user context not received from FreeIPA

Hopefully there is something simple I am missing here. I have FreeIPA 4.6.6 (can not update at this time), Centos 7 and Centos 6 systems. SELinux is in permissive mode. Logins on the Centos 6 system ...
2
votes
2answers
140 views

OAUTHBEARER authentication fails in mutt

I've used OAUTHBEARER authentication to use mutt with GMail for a while, but I've run into a an issue that I can't figure out. When I launch mutt I get OAUTHBEARER authentication failed. Here is ....
0
votes
0answers
35 views

eToken not detected

I want to use an Aladdin eToken Pro 32k 4.2B on Fedora 32 but it is not detected. It shows as another model in lsusb: Bus 003 Device 009: ID 0529:0600 Aladdin Knowledge Systems eToken Pro 64k (4.2) ...
0
votes
0answers
23 views

Status(UP/DOWN) of Session based Application hosted on Tomcat server in UNIX

I need to check the status (UP/DOWN) of an application (https://w45ra0377.abc.com:12345) that is hosted on a server in UNIX. This is a session authenticated application. I tried with the below CURL ...
0
votes
0answers
10 views

How can I enforce HTTP basic authentication on an Apache directory that is an alias?

I'm using Ubuntu 18.04 with Apache 2.4. I have created this htpasswd file ... $ ls -al /etc/apache2/.htpasswd -rwxr-xr-x 1 www-data root 49 Aug 20 20:57 /etc/apache2/.htpasswd I have this in my /etc/...
0
votes
0answers
30 views

How to limit number of connected device to network in freeradius?

I'm using freeradius for central authentication in my network. but i want to limit the number of connected device to my network to 2 device per username. Is there any option to do that?
0
votes
1answer
25 views

Creating new user by creating new folder

I would like to ask a doubt regarding the creation of new user in Ubuntu. Normally we use "Users and Group" GUI application, terminal, etc for creating new users. But I would like to know, ...
0
votes
0answers
40 views

Where is the “delay on a wrong password login” at the KDE login?

Please note this is a "mechanism, not policy" question. That means I do NOT want to discuss security policies, just the mechanism that implements them. I am using the latest Kubuntu 20.04 ...
0
votes
1answer
204 views

Debian libpangoft2-1.0.so.0 undefined symbol hb_glib_script_from_script

I was installing some common packages I used everyday, like i3wm, jq, bat-musl, kitty, and so on, in a mostly fresh recent Debian. Then, when I tried to run a i3-msg command, I received the following ...
0
votes
1answer
59 views

How to login into a web with curl?

Testing site: http://testing-ground.scraping.pro/login Username: admin Password: 12345 Curl help -u, --user <user:password> Server user and password Here is the web form wolf@linux:~$ curl ...
0
votes
1answer
55 views

User Synchronizing

Is there any possible way to synchronize my main server's /etc/shadow, /etc/passwd, /etc/gshadow and /etc/group? I have 1000+ users and it's a hassle to loop userdel and loop useradd. I tried placing ...
0
votes
1answer
31 views

dovecot authentication against passed-file

currently i am facing some issues with dovecot and authentication against a passed-file. Here some details about the environment: Centos 7 (3.10.0-042stab142.1) postfix (2:2.10.1-9.el7) dovecot (1:2....
0
votes
0answers
63 views

Is autologin dangerous? (Debian/Linux)

If only I use my desktop computer (Debian), can I turn off password entry when I log in (xfce/lightdm) as user (not root)? The user account (user) has a password, but in the settings I only turn on ...
0
votes
0answers
14 views

svn authentication on unsafe machine

i need to access some repository on an unsafe server. I dont want to store my password anywhere else than current session. What I came up with so far is combination of histcontrol ignorespace then ...
1
vote
0answers
198 views

Understanding /var/log/auth.log in Ubuntu

I am having an hard time understanding some lines inside my auth.log file from Ubuntu. Can you help me breaking down the pieces of this one? pkexec: pam_unix(polkit-1:session): session opened for ...
3
votes
1answer
5k views

Why `su` gives “su: Authentication failure” even when running as root?

Somewhat like in How to suppress su authentication failure warning?, but it actually does not run the command at all. # su limited su: Authentication failure # su -s /bin/bash limited su: ...
0
votes
1answer
47 views

LDAP Synchronization with Local Users

How would I go about regularly copying user account data from /etc/passwd on one machine into LDAP? The situation I'm in is that I'm the sysadmin for an academic computer cluster. We have one master ...
-1
votes
2answers
155 views

Sudo asks for password even after `sudo su` without pass

I have already sudo-ed to an account, by running sudo su - <username> and when I try to run apt from this account I am getting the message: [sudo] password for <username>: which I don't ...
0
votes
0answers
101 views

Winbind connecting to AD DC on port 139

I have a Samba server on Linux which is integrated with Windows AD for user authentication. Everything is working fine, but we see a lot of Firewall denies on port 139. Upon investigation, I found ...
0
votes
0answers
83 views

How can I authenticate to Linux from AD using a KeyTab files?

I was reading the following blog post https://docs.microsoft.com/en-gb/archive/blogs/pie/all-you-need-to-know-about-keytab-files I went through the exercise and created the keytab file and used it on ...
0
votes
0answers
14 views

Authentication for iproute2 tunnel

I'm looking at creating a simple point to point tunnel using iproute, as described here: linux.it But something very basic is bothering me...there is no authentication. Does that mean the IP ...
0
votes
2answers
105 views

Execute GUI programs as root without password

I know that in order to execute a CLI program using sudo, but without the need to typing your password, all you need to do is put user ALL = NOPASSWD: /path/to/your/program in /etc/sudoers, or even ...
0
votes
1answer
48 views

Does “Polkit” make use of linux capabilities?

I know that some authentication programs like KDE's KAuth can use polkit as the backend.And what makes polkit special is that it can grant some specific privileges to a non-privileged process.A ...
2
votes
0answers
87 views

Strongswan AUTH_FAILED

I am trying to configure VPN server Strongswan and have a problem: the server always sends to the clients the following response: IKE_AUTH [ N(AUTH_FAILED) ] I've tried to change log level editing ...
0
votes
1answer
105 views

Custom user access to Zimbra webmail

I know it's a specific topic, but it could be broadened to a more general context. I have a Zimbra mail server on CentOS, only used via webmail, where i need to differentiate user capability to login ...
0
votes
0answers
215 views

why does apache 2.4 with ldap authorization and starttls configured still does simple bind?

We have a recent apache 2.4 setup on suse enterprise linux 15 sp1. The apache server has kerberos authentication configured which works fine for authenticating users in a "joined" active directory ...
0
votes
1answer
34 views

How can I set a policy to enable public key authentication only if the pubkey has a password that meets requirements?

How can I set a policy to enable public key authentication only if the pubkey has a password that meets requirements? Currently people make keys with ssh-keygen. We want to enforce creation and use ...
0
votes
0answers
63 views

Can Samba use a file containing a blacklist of users?

I currently use pam_listfile.so to blacklist users trying to log in via ssh, with a line like this in /etc/pam.d/system-auth: auth required pam_listfile.so item=user sense=deny file=/etc/users....
0
votes
1answer
49 views

If someone logs into serial and exits console without logout, how do I automatically logout?

am using a debian based linux system. There is a console access to it via Lantronix SLC8000 Advanced Console Manager. When I login it asks for username and password (Both Console manager and server ) ...

1
2 3 4 5
11