Questions tagged [authentication]
Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.
427 questions
0
votes
0answers
24 views
For rotating logs- Cronjob issue
Invoking logrotate every 15 mins.
logrotate will rotate only after size threshold crosses 1M
Working machine
[root@machine1 output]# ls -l --block-size=1K
total 296
-rw------- 1 root root 55 Oct ...
0
votes
1answer
103 views
+100
setting sudo password different from login password
I am attempting to use PAM to use a different password for sudo than I do for logging in.
I worked off of this post originally
Set sudo password differently from login one
Unfortunately, every time ...
3
votes
0answers
20 views
Authentication of users via HTTPd with certificates and two CAs
I would like to implement an internal site for our company, with certificate authentication used wherever possible. I have run into (and tried) various examples where one creates their own self-signed ...
2
votes
2answers
31 views
Downloading using curl, username and password required (cookie, phpsessid, etc…) [closed]
I am trying to download files using curl and chrome extension called CurlWget. When I click on a file to download it, I get this message:
wget --header="Host: www.dummy-website.com" \
--header="User-...
1
vote
1answer
24 views
Arch linux set up wifi issue
I've just finished setting up arch linux and am trying to configure wifi (wired internet works ok I checked).
As for wireless I have this issue: I try to connect to wireless router with iw dev ...
0
votes
0answers
6 views
How to create a dummy printer with AuthInfoRequired option
How can I create a dummy printer for CUPS that has realistic support for the AuthInfoRequired option? Ideally this would work even when having the printer on localhost.
I was thinking about CUPS-PDF, ...
0
votes
0answers
9 views
Apache mod_dbd: DBDParams with encrypted password
We're trying to configure Apache 2.4 with mod_dbd to connect to PostgreSQL for user authentication. (Ref: https://httpd.apache.org/docs/2.4/mod/mod_dbd.html)
Is there a possibility to store the ...
1
vote
1answer
65 views
Authenticate Linux<->LDAP Protocol<->AD(active directory): Fail to logon with password
Dears,
I spent much time on this and even successfully verified (Auth)Linux-LDAP-openLDAP ok. But get blocked with AD.I can now switch to user from root account but can not log on with password(...
0
votes
1answer
21 views
MySQL - OS tied users
So, I'm trying to find this option and I can't find it in the docs. I need to know if there is a way in MySQL in which every user on the OS is also a User on the dB.
Just to clarify, when using ...
1
vote
1answer
84 views
Unable to log in to tty1 password incorrect? [closed]
In the console tty1 I can't access with my login and password. It states that my password is incorrect however my password is correct?
1
vote
1answer
30 views
Bypass Apache Authentication for specific IP
We're using Apache as a reverse proxy, so some of our internal development/testing servers are accessible on the open Internet for UAT/CAT purposes.
We have basic authentication setup through LDAP ...
0
votes
2answers
34 views
How do I activate time based admin login to a Linux system using windows active directory?
I have set up a solution where the login to our linux systems is regulated by microsoft active Directory and group memberships. Now i want the access time based so that the ad user will be kicked out ...
0
votes
0answers
95 views
pam_sss access denied with kerberos authentication ok
I'm trying to use sssd with kerberos authentication and ldap on Ubuntu 18.04 (server and client machine). On Ubuntu client side I installed sssd sssd-tools packages. But when I want to log in to alice,...
8
votes
4answers
3k views
How does Linux identify users?
I mean, if two users have the same name, how does the system know that they're actually different users when it enforces file permissions?
This doubt came to my mind while I was considering to rename ...
2
votes
1answer
273 views
Using pam_exec.so to run a script as root when a user logs in (while extracting user information)?
Question
How can I run a script as root when a user logs in with pam_exec.so (or otherwise)? The script requires information about the user to function.
Problem and Environment
I would like to run ...
1
vote
1answer
309 views
How do I correctly configure exim4 on Debian so I can use `sendmail -t` to send mail via my office365 account?
I'm using Debian stretch (9.4).
I have an office365 account.
Using Evolution, I can successfully download mail via POP3, and also send mail using the Evolution "Sending E-mail" preferences:
Server: ...
0
votes
1answer
80 views
Regarding PAM via ldap
I have a question for the authentication between Linux and Windows.
When I get an authentication from the OS system such as Linux, then I can use PAM by configuration of "/pam.d".
However, it's the ...
0
votes
0answers
27 views
Authentication password changed?
When I installed linux mint 18.3, I set a password. Then I changed the admin of the device but the old password isn't accepted. Any thoughts?
1
vote
1answer
208 views
How to make changes to pam config such that further execution of authconfig will not overwrite them?
I'm configuring a CentOS7 host (through ansible) running authconfig. Now I need to add/configure pam_exec module to the setup but it seems it is not supported by authconfig (cf. man authconfig and /...
1
vote
2answers
720 views
ssh through authentication requiring proxy
At work we have of course a company's-proxy. I need to ssh to some machines out of the company's network. The proxy though requires authentication.
lets assume we have the following variables:
...
0
votes
1answer
652 views
LDAP server setup with GUI on CentOS7
I have, in the past, set up an LDAP server using OpenSuSE (13.2), which worked well since there was a YaST module which allowed a GUI set-up.
Now I have the problem that I must set up an OpenLDAP ...
0
votes
1answer
94 views
White List and Black List for SSH
How to create a (username/password or certificate) white/black list for ssh?
For example of blacklist, I can use any username/password combination to access the server, except the ones on the ...
1
vote
2answers
240 views
How to verify that ssh certificate was signed by specified ssh CA private key?
I am trying to harden my ssh setup using this material. It works fine, but I've got a question which I'm struggling to find the answer to.
Does anyone know if there is a way to check the ssh host/...
0
votes
0answers
29 views
How to use 2FA with cert based SSH auth?
I used this guide to enable Google TOTP auth on Ubuntu 16.04.
SSH only allows cert based auth (PasswordAuthentication no)
I set ChallengeResponseAuthentication yes and restarted the SSH service.
I ...
2
votes
1answer
87 views
How to enable usage of SSH keys pair without exposing it
We have a topsecret@remote.org SSH account that can be accessed with SSH key pair ts_key.pub/ts_key.priv from our gateway server (gateway.org). We have many sysadmins that need to access that account. ...
-1
votes
2answers
47 views
How to copy public key to the server that doesn't allow password?
I configured my server to not allow password authentication. Now I have a new machine in a remote location, how is it possible for me to generate an ssh key and do an ssh-copy-id to the server if the ...
1
vote
1answer
44 views
Can two local users on two separate machines use SSH keys to authenticate without passwords?
I have two local users (whose homes directories are listed under /localhome/user) on two separate VMs on the same network. They share the same uid (set in /etc/passwd) and the same username (<user&...
0
votes
1answer
114 views
Why does the pam_unix module documentation list PAM_IGNORE as its only return value?
From http://www.linux-pam.org/Linux-PAM-html/sag-pam_unix.html:
6.37.4. RETURN VALUES
PAM_IGNORE
Ignore this module.
Obviously the module must return success or failure for password ...
0
votes
1answer
130 views
LDAP authentication and default groups
I have multiple RHEL 7.4 servers with LDAP authentication via sssd. Conveniently, my university's LDAP environment has a UIDNumber attribute that is unique for every person. My sssd.conf is at the end ...
1
vote
0answers
247 views
Access SMB shares using stored credentials
Assuming I have a network of a few Windows computers, and I set up the same user with the same password on all computers, this user will be able to access any shares on any of the computers - without ...
1
vote
1answer
55 views
How to allow any user to log as a non loggable user?
I'm trying to implement the following functionality on Redhat:
I have a user "John" that can't be used to login directly via GDM or console or SSH.
I want to allow any user that are logged onto the ...
0
votes
1answer
129 views
OpenBSD LDAP authentication - ypldap high CPU usage
I have an OpenBSD server with login_ldap, ypldap, ypbind and portmapper is configured according to these guides that I managed to find courtesy of Google.
http://obfuscurity.com/2009/08/OpenBSD-as-an-...
0
votes
0answers
120 views
OpenBSD - login_ldap - ypldap - sudo.ldap and handling of remote and local users
I have an OpenBSD server with login_ldap, ypldap, ypbind and portmapper is configured according to these guides that I managed to find courtesy of Google.
http://obfuscurity.com/2009/08/OpenBSD-as-an-...
1
vote
0answers
24 views
How can I list which users can login without key auth?
I have recently been charged with a large amount of Ubuntu servers that are exclusively accessed via private/public SSH authentication.
There is no information regarding how these servers were ...
0
votes
1answer
125 views
Password for user is not asked anymore [closed]
I am using Debian Stretch with lightdm. Suddenly, I am no longer asked for a password when I log in. As soon as I fill in my username and press tab, the password field is removed and I can log in ...
2
votes
1answer
299 views
Authentication mechanism to connect to Windows AD in Linux?
My company has asked me to look into connecting our CentOS 7 instance's to our Active Directory to make it easier for user management.
I have so far looked at:
Kerberos, doing it via command line - ...
2
votes
1answer
83 views
What is the correct format for xpra password files?
I created a username/password combination of the form onetwo:bucklemyshoe, ie the password file contains the single line onetwo|bucklemyshoe
Whenever I try to connect the message appears on the ...
2
votes
2answers
274 views
Why do we use optional in PAM even if it'll be ignored?
As we know, optional is one of the control value in PAM's configuration files.
From linux-pam.org:
optional:
the success or failure of this module is only important if it is the only module in ...
0
votes
0answers
35 views
Ignore certain hosts in last log
I have an ansible job that uses ssh to perform tasks on many servers. It uses an authorized key to gain entry. When I run the last command it just shows a long list of root logins from the ansible ...
0
votes
0answers
31 views
Forward apache authentication to remote “ressource”
I want to implement some kind of "forwarding" apache authentication to a remote ressource.
Imagine multiple servers to be able to authenticate the same users.
Yes, I could do this via "...
1
vote
0answers
400 views
SSO with Samba4 Client and Samba3 Server without Active Directory
In the office I'm currently working is the following setup:
a linux server managing the accounts for single sign on, shares and printers. This will be called 'server129' and should not be modified. (...
0
votes
0answers
187 views
disable invalid username logging in auth.log
Logging invalid usernames can result in logging user passwords. Is there any way to silent these logs in /var/log/auth.log file? This discussion:https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=...
0
votes
0answers
187 views
One server, two Kerberos realms
I have a number of CentOS 7 servers which need to authenticate with two different Kerberos realms: A.EXAMPLE.COM and B.EXAMPLE.POOP. Most users exist in the one, a few in the other. I have them ...
0
votes
0answers
211 views
Pass Opal SED PBA (Pre-Boot Authentication) credential to system to log in automatically with default user
TCG Opal drives support the use of a pre-boot environment ("shadow MBR") to request the AK (Authorization Key) from the user in order to unlock the drive (by deciphering the Data Encryption Key) ...
1
vote
1answer
396 views
Unable to execute GUI application as a different user using `pkexec`
I have created following policy file at /usr/share/polkit-1/actions/com.xyz.xyz.policy
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD PolicyKit ...
0
votes
1answer
85 views
Only bind user can connect to Postfix server using LDAP
I have a functioning Active Directory server, but whenever I try to authenticate against the Postfix server that uses it (with saslauthd) I notice that only the bind user can connect. Whenever I try ...
2
votes
1answer
65 views
How to avoid login logging?
I'm wondering how can one login to a server without being easily traceable. I've already read here that one can avoid last/wtmp by using /bin/sh shell. I was wondering if it was possible to even avoid ...
0
votes
1answer
462 views
How to disable authentication requirement for VirtualBox's shared folder?
After adding a shared folder in VirtualBox, I am able to access it like admin:///media/sf_MyFolder/, however, Ubuntu asks me to enter admin's password, even twice.
How to mount a VirtualBox's shared ...
3
votes
2answers
128 views
How to have backup pam module
I am currently getting to understand PAM. Right now I use OTP and password, but I want to be able to use either OTP and password and if that fails then use my YubiKey and password. I am on Arch and my ...
1
vote
0answers
290 views
SASL Authentication failure
Created an user with
# adduser username
The configuration file /etc/sysconfig/saslauthd:
# Directory in which to place saslauthd's listening socket, pid file, and so
# on. This directory must ...
