Questions tagged [authentication]

Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

Filter by
Sorted by
Tagged with
0 votes
0 answers
8 views

What is the difference between AuthenticationMethods password and PAMs @include common-auth?

When I use PAM and enable @include common-auth, a user password is required for SSH login (assuming AuthenticationMethods keyboard-interactive is on). How is that different than just using ...
2 votes
0 answers
29 views

What is the difference between these two AuthenticationMethods?

What is the difference between the following: AuthenticationMethods publickey,keyboard-interactive AuthenticationMethods publickey,keyboard-interactive:pam The man page says For keyboard ...
0 votes
0 answers
9 views

Check login attempt to the server from log file

I'm tryig to display all users who successfuly logged in to server last 24 hours from logs file Command last is not acceptable I tried cat /var/log/auth.log Error /var/log/auth.log: No such file or ...
0 votes
0 answers
11 views

How set basic auth on port (apache2)?

On the : 3000 port running js app, how set basic auth there ?
0 votes
1 answer
72 views

How to determine "number of concurrent sessions" for all users on a server

I am trying to determine the total number of concurrent sessions on a server to determine a good number for the maxlogins option in /etc/security/limits.conf. How is the number of sessions calculated ...
  • 1,011
0 votes
1 answer
26 views

How to convert kerberos user to local user in Ubuntu?

I am having issues upgrading Ubuntu distribution, as my user is authenticated with kerberos. During upgrade, kerberos packages are removed and after restart I can't login anymore. I wonder, if I can ...
0 votes
0 answers
16 views

Access Api using okta token

I use my OKTA username and password to login to one of my organisation app and deploy something. I want to deploy the same using API, via inspect element I am able to fetch out the curl API command to ...
1 vote
1 answer
24 views

Linux - Local account, password from AD

I have users defined in AD but because of some overrides, I have to add those accounts in my local /etc/passwd. Precisely, I want to assign a user a different GID then it is defined in AD. I want to ...
  • 31
1 vote
1 answer
48 views

SSH with multi-factor authentication

The customer requires us to setup MFA for SSH sessions. I have successfully tested MFA using Google Authenticator by following this article: https://www.linode.com/docs/guides/how-to-use-one-time-...
0 votes
0 answers
20 views

Unable to connect to rainloop

I am installing Rain Loop but when I want to connect to an account I have this message that appears "Authentication failed" have you ever seen this problem
1 vote
0 answers
163 views

No Authentication Agent Found Although Already Running

I have an Alpine-Linux based system (PostmarketOS) running with the LXQT DE. Ever since I set up the system, out of the box it came with a bunch of problems with user authentication. I have various ...
0 votes
0 answers
148 views

`wget`: Cookies doesn't authenticate

I got some cookies from my browser where I'm well authenticated into a website. I've tried to give them to wget and make it download some internal pages, but all it downloads is authentication page ...
  • 25
0 votes
1 answer
157 views

Server still ask for password after ssh-copy-id

I copied my SSH public key to a server using ssh-copy-id, but the server still ask for a password. I checked the permission on the files in the ssh folder and they are readable for user only. I also ...
  • 1
1 vote
0 answers
94 views

dovecot: Force TCP socket disconnect on imap login failure?

I'm running dovecot 2.2.13 under Debian 8. I'd like to force an immediate TCP socket disconnect after any imap login attempt that fails. Right now, if invalid credentials are supplied during an imap ...
  • 405
0 votes
0 answers
102 views

PAM allow only a specific su command for a user

i created a rule to allow mygroup group to do su command. In /etc/pam.d/su auth sufficient pam_succeed_if.so use_uid user ingroup mygroup Now i want mygroup to be able to use only halt command, ...
  • 1
3 votes
0 answers
1k views

Sudo won't accept correct password

I'm having a weird problem; sudo isn't accepting my absolutely correct password on my new Kubuntu install. This happens in terminal and in graphical sudo prompts, like if you double click a .deb or ...
0 votes
1 answer
207 views

Why must I provide authentication to mount SATA HDDs? Why are they in read-only mode?

I am running Fedora 35 dual booted on a Dell G5-5000, and have two or three HDDs connected via SATA (including the drive that Fedora on). When I attempt to access the drives in Nautilus for the first ...
  • 113
0 votes
1 answer
1k views

X11VNC - connection failed due to incorrect password even though password correct

Running Xubuntu 20.04 as VM on top of Ubuntu Server 20.04 with bridged interface. I am able to connect to the VM via SSH (also using Putty on Windows 10 machine that will access the VM). Using ...
0 votes
0 answers
35 views

Enterprise Linux environments and Active Directory integration - Dumb idea or the right way to go?

I help manage a large Linux environment (6K+ server/workstation) and want to understand better if we should go all-in on Active Directory integration, move to IdM/FreeIPA/Centrify, or stay with what ...
  • 1
0 votes
0 answers
150 views

Making multiple PAM modules work together with success as soon as any of them return successfully

I basically want to unlock any sudo authentication with any of these criteria met (whatever completes first successfully): a usb as a security key matched (custom script). fingerprint matched. ...
0 votes
0 answers
378 views

How to login/authenticate web URL using ansible playbook with Username and password

I am pretty new to the Ansible playbook and I am trying to log in to the website URL using username and password. I am facing the issue. I am using below code snippet. it would be great if someone ...
2 votes
0 answers
224 views

openconnect pulse and 2fa

I want to use openconnect instead of pulsesecure/pulseUI to connect to my company's vpn. this was ok in the old server but in the new they have added 2FA. I saw this https://stackoverflow.com/a/...
  • 1,428
3 votes
0 answers
92 views

Infrequent kerberos authentication issue (pam_krb5 vs. pam_unix)

My Linux computer belongs to a company network using a windows domain. The authentication is done using kerberos. Usually the authentication works fine and I am happy with my linux desktop. But ...
  • 157
0 votes
0 answers
155 views

SSH CA signed keys, one accepted, one rejected

I have several CentOS 9 and one CentOS 7 VM. All are configured to trust my SSH CA for Key verification. I can ssh into all of them with key A, but the CentOS 7 VM rejects Key B. I can't seem to ...
0 votes
0 answers
870 views

error: PAM: User account has expired for [user] from [IP]

I am currently trying to setup libpam-google-authenticator for 2FA on a Debian 9.0 VPS. I've installed the package using apt, set it up using the google-authenticator command and connected it to a ...
  • 1
1 vote
1 answer
45 views

How does the sshd authentication process work?

In sshd(8) man page: The OpenSSH SSH daemon supports SSH protocol 2 only. Each host has a host-specific key, used to identify the host. Whenever a client connects, the daemon responds with its public ...
  • 63
0 votes
0 answers
350 views

Linux shell command : su authentication failed

I upgraded current OS to latest version. i am unable to do su from admin to root user. I checked /etc/password, /etc/shadow, unix_chkpwd and su permission, everything looks ok i dig into the /etc/pam....
0 votes
0 answers
40 views

using a password containing a single quote in msmtprc

I have a mail account with an smtp password that contains a single quote character. I want to send periodic logs using msmtp on this account. I have a working configuration for a different account ...
  • 13
0 votes
0 answers
54 views

how to respond server challenge with netcat/socat/telnet

I need to authenticate with SAFECOOKIE on tor's control port. https://stem.torproject.org/faq.html#i-m-using-safe-cookie-authentication https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#...
  • 1
1 vote
1 answer
389 views

Switch password/fingerprint authentication on lid behaviour

I set the fingerprint authentication as default for login and sudo commands. On 3 failures or no fingerprint detection for 10 seconds, password auth is required. When working with lid closed (external ...
  • 392
3 votes
1 answer
3k views

24 - iSCSI login failed due to authorization failure

When I run iscsiadm --mode node --targetname iqn.2018-12.dz.esi:iso --portal 10.11.0.2 --login I get this error: Logging in to [iface: default, target: iqn.2018-12.dz.esi:iso, portal: 10.11.0.2,3260] ...
  • 31
1 vote
2 answers
134 views

Why does openssl create different hashes for the same string, and how does linux accept the different hashes when switching users?

Background As an experiment, I was adding new users (as the root user) by manually creating entries into /etc/passwd. To hash the passwords I was using openssl, in particular OpenSSL 1.1.1g but the ...
2 votes
2 answers
381 views

Using sshpass in Cygwin, ssh stills prompts for password

According to this RedHat SSH password automation guide I'm following the Example 4: GPG one, and following the steps in that guide I create my pass_file using my own passphrase. Then, I got this: gpg -...
1 vote
0 answers
81 views

How to perform git pull from gitlab repo with 2FA access token using linux terminal?

I had already cloned a few repos from gitlab and then LATER we added two factor authentication on the gitlab repos. Now I am trying to update my local branch by doing git pull like this: sudo git pull ...
  • 111
0 votes
0 answers
140 views

How to solve an issue with my IP getting repeatedly banned due to incorrect SSH login attempts?

I recently upgraded my laptop to Ubuntu 21.10. I do not know if it is related, but I started having the following issue after the upgrade: At work I connect to a cluster via SSH. For this I use key-...
  • 151
3 votes
0 answers
31 views

Ignoring the SED encrypted drives until after booting is completed [closed]

I have an Ubuntu system which boots from a small NVME disk using software encryption, TPM, etc. to mitigate against data loss in case of theft. The system is interfaced with customised PCIe hardware ...
  • 131
0 votes
1 answer
258 views

systemd-homed with FIDO2 - Login from tty still possible with password only

I recently tried out systemd-homed and doing that I enrolled my Yubikey as FIDO2 device. When i try to authenticate against the created home via homectl authenticate <user> it correctly ...
  • 115
0 votes
0 answers
288 views

"Credentials cache" (temporary cache password) for rsync/ssh?

In git (at least on Linux), there is a thing known as a credential-cache (see for instance https://stackoverflow.com/questions/5343068/is-there-a-way-to-cache-https-credentials-for-pushing-commits). ...
  • 360
1 vote
1 answer
99 views

How can I type a password when fprint is enabled?

I use Fedora 34. I love what fprint is doing when it allows me to authenticate using my fingerprints on my ThinkPad's built-in fingerprint reader, but when I'm in my office, I like to dock my laptop ...
1 vote
0 answers
159 views

Fully replace sssd->ldap with web APIs in Linux

My organization has to get rid of their ldap servers, so I am facing the task of replacing it's functionality. To make this as customizable and future-proof as I can, I am looking for something that ...
  • 11
1 vote
0 answers
153 views

authinfo syntax -- how to include a command in my authinfo file?

The online manual states the following: The format of an authinfo file is based on the .netrc file specification that is used for FTP login. In addition to the .netrc file standards, the authinfo ...
3 votes
0 answers
158 views

How one can limit a user to a specific network namespace?

Suppose I have a Linux host with a few non-default network namespaces. I need to limit a specific user to a specific network namespace based on the results of user authentication. For example: user1 ...
0 votes
1 answer
2k views

How can I enable Samba 1 authentication for a single share?

I'm setting up an old network scanner on a debian machine but it uses smb1 for authentication using ntlm auth = yes under the global settings. I know smb1 it's unsecure so I'm guessing if there's the ...
0 votes
1 answer
175 views

CUPS: silent authentication printing

Under Debian Buster, I am looking for a solution to print with CUPS but without having to provide the password each time. Under Windows, I just had to enter the credentials for the desired printer ...
1 vote
1 answer
2k views

Dockerfile | executor failed running [/bin/sh -c poetry install --no-dev]: exit code: 1

I'm new to Docker, so I am not sure how to interpret the cause of errors. "Poetry is a tool for dependency management and packaging in Python. It allows you to declare the libraries your project ...
0 votes
1 answer
143 views

How to manage squid authentication

I'm running a squid server. I want to limit my users for using their usernames to use my proxy server. For example, I define a limit for a username named (user1) that if, for example, 3 devices use ...
0 votes
1 answer
219 views

pkexec shows in command line instead of GUI pop-up [closed]

I just hopped to Pop!_os yesterday and pkexec executes in terminal. It also ran into the error: polkit-agent-helper-1: error response to PolicyKit daemon: GDBus.Error:org.freedesktop.PolicyKit1.Error....
  • 11
1 vote
1 answer
174 views

How to use password for ftp user and still maintain pem authentication for root?

I have got a machine (ubuntu 20.04.2) with root access and root authentication is done strictly with pem file. There is need to setup vsftpd & ftp user which has been done. But ftp user cannot ...
  • 13
1 vote
0 answers
41 views

Getting Error 503 trying to connect with Grouper with user and pass via python

I have an apache proxy server setup with following in my .htaccess file #Header always set Access-Control-Allow-Origin "*" Header onsuccess unset Access-Control-Allow-Origin Header always ...
1 vote
1 answer
409 views

How to reconfigure ldap server connection on Debian 10 client?

I have a Debian 10 system which was configured to talk to an OpenLDAP server (10.5.5.35) for password, group and shadow. I need to switch the host over to a Duo Auth Proxy (10.5.5.50). I thought I ...

1
2 3 4 5
12