Questions tagged [authentication]

Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

Filter by
Sorted by
Tagged with
0
votes
0answers
29 views

Where is the “delay on a wrong password login” at the KDE login?

Please note this is a "mechanism, not policy" question. That means I do NOT want to discuss security policies, just the mechanism that implements them. I am using the latest Kubuntu 20.04 ...
0
votes
1answer
35 views

Debian libpangoft2-1.0.so.0 undefined symbol hb_glib_script_from_script

I was installing some common packages I used everyday, like i3wm, jq, bat-musl, kitty, and so on, in a mostly fresh recent Debian. Then, when I tried to run a i3-msg command, I received the following ...
0
votes
1answer
25 views

How to login into a web with curl?

Testing site: http://testing-ground.scraping.pro/login Username: admin Password: 12345 Curl help -u, --user <user:password> Server user and password Here is the web form wolf@linux:~$ curl ...
0
votes
1answer
27 views

User Synchronizing

Is there any possible way to synchronize my main server's /etc/shadow, /etc/passwd, /etc/gshadow and /etc/group? I have 1000+ users and it's a hassle to loop userdel and loop useradd. I tried placing ...
0
votes
1answer
26 views

dovecot authentication against passed-file

currently i am facing some issues with dovecot and authentication against a passed-file. Here some details about the environment: Centos 7 (3.10.0-042stab142.1) postfix (2:2.10.1-9.el7) dovecot (1:2....
0
votes
0answers
53 views

Is autologin dangerous? (Debian/Linux)

If only I use my desktop computer (Debian), can I turn off password entry when I log in (xfce/lightdm) as user (not root)? The user account (user) has a password, but in the settings I only turn on ...
0
votes
0answers
13 views

svn authentication on unsafe machine

i need to access some repository on an unsafe server. I dont want to store my password anywhere else than current session. What I came up with so far is combination of histcontrol ignorespace then ...
1
vote
0answers
63 views

Understanding /var/log/auth.log in Ubuntu

I am having an hard time understanding some lines inside my auth.log file from Ubuntu. Can you help me breaking down the pieces of this one? pkexec: pam_unix(polkit-1:session): session opened for ...
3
votes
1answer
529 views

Why `su` gives “su: Authentication failure” even when running as root?

Somewhat like in How to suppress su authentication failure warning?, but it actually does not run the command at all. # su limited su: Authentication failure # su -s /bin/bash limited su: ...
0
votes
1answer
28 views

LDAP Synchronization with Local Users

How would I go about regularly copying user account data from /etc/passwd on one machine into LDAP? The situation I'm in is that I'm the sysadmin for an academic computer cluster. We have one master ...
-1
votes
2answers
50 views

Sudo asks for password even after `sudo su` without pass

I have already sudo-ed to an account, by running sudo su - <username> and when I try to run apt from this account I am getting the message: [sudo] password for <username>: which I don't ...
0
votes
0answers
31 views

Winbind connecting to AD DC on port 139

I have a Samba server on Linux which is integrated with Windows AD for user authentication. Everything is working fine, but we see a lot of Firewall denies on port 139. Upon investigation, I found ...
0
votes
0answers
46 views

How can I authenticate to Linux from AD using a KeyTab files?

I was reading the following blog post https://docs.microsoft.com/en-gb/archive/blogs/pie/all-you-need-to-know-about-keytab-files I went through the exercise and created the keytab file and used it on ...
0
votes
0answers
13 views

Authentication for iproute2 tunnel

I'm looking at creating a simple point to point tunnel using iproute, as described here: linux.it But something very basic is bothering me...there is no authentication. Does that mean the IP ...
0
votes
2answers
44 views

Execute GUI programs as root without password

I know that in order to execute a CLI program using sudo, but without the need to typing your password, all you need to do is put user ALL = NOPASSWD: /path/to/your/program in /etc/sudoers, or even ...
0
votes
1answer
38 views

Does “Polkit” make use of linux capabilities?

I know that some authentication programs like KDE's KAuth can use polkit as the backend.And what makes polkit special is that it can grant some specific privileges to a non-privileged process.A ...
2
votes
0answers
55 views

Strongswan AUTH_FAILED

I am trying to configure VPN server Strongswan and have a problem: the server always sends to the clients the following response: IKE_AUTH [ N(AUTH_FAILED) ] I've tried to change log level editing ...
0
votes
1answer
37 views

Custom user access to Zimbra webmail

I know it's a specific topic, but it could be broadened to a more general context. I have a Zimbra mail server on CentOS, only used via webmail, where i need to differentiate user capability to login ...
0
votes
0answers
99 views

why does apache 2.4 with ldap authorization and starttls configured still does simple bind?

We have a recent apache 2.4 setup on suse enterprise linux 15 sp1. The apache server has kerberos authentication configured which works fine for authenticating users in a "joined" active directory ...
0
votes
1answer
33 views

How can I set a policy to enable public key authentication only if the pubkey has a password that meets requirements?

How can I set a policy to enable public key authentication only if the pubkey has a password that meets requirements? Currently people make keys with ssh-keygen. We want to enforce creation and use ...
0
votes
0answers
22 views

Full-disk encryption password fails when booting kernels newer than 5.2.0

My full-disk encryption password has stopped working on newer kernels. At the grub menu I can boot to 5.2.0 and the password works; on newer kernels (e.g. 5.3, 5.4) it does not boot (and gives an ...
0
votes
0answers
44 views

Can Samba use a file containing a blacklist of users?

I currently use pam_listfile.so to blacklist users trying to log in via ssh, with a line like this in /etc/pam.d/system-auth: auth required pam_listfile.so item=user sense=deny file=/etc/users....
0
votes
1answer
44 views

If someone logs into serial and exits console without logout, how do I automatically logout?

am using a debian based linux system. There is a console access to it via Lantronix SLC8000 Advanced Console Manager. When I login it asks for username and password (Both Console manager and server ) ...
2
votes
2answers
596 views

PAM — completely disable password login

I am trying to improve the Security of my overall IT Infrastructure, so I started out to use a smart card for login. I have managed to configure a PIV Smart Card with a private key and a x.509 ...
0
votes
0answers
63 views

Bash script to make passwordless connection

I want to make passwordless connection with help of bash scripting. The requirement is that user has to just provide password. Point to be considered: 1) There is no generated public/private key in ...
1
vote
0answers
131 views

Why Server not refused our key by StrictModes in sshd_config set Yes with 661?

I created two ssh keys for my two server. One is Ubuntu 18.04.3 and the other is CentOS 7.7.1908. I use putty to connect. Connection to Ubuntu was successful, but CentOS refused our key. Centos ...
0
votes
0answers
411 views

Checkpoint SNX in Ubuntu 18.04 via terminal

I am trying to connect to Checkpoint VPN's snx module, but I am unsuccessful. After entering the password, it no longer returns, not even the error. I followed these steps for installation: getting ...
0
votes
0answers
167 views

How to connect kali linux to a wifi using WPA2 Enterprise, using PEAP method?

I am using Kali Linux 2019.4, kernel version 5.3.0-kali2-amd64 and I have trouble connecting to my school wifi, which uses WPA2 Enterprise and uses PEAP (Protected Extensible Authentication Protocol). ...
0
votes
1answer
97 views

Debian 10 connect to Wi-fi

I'm conscious that this questions is quite basic but being honest I've being researching these days and I couldn't find how to do it. I'm using Debian 10 Live and the only thing I really did was ...
0
votes
1answer
151 views

Can not login as root after installing zsh

I installed ZSH and made it the default bash for my kali linux system, then I rebooted the system, and I could not login as root any more. I type in the correct password and it says LOGIN FAILED. I ...
1
vote
0answers
132 views

SSH on Debian “Buster” reports broken pipe after authentication

I have already set the following in /etc/ssh/ssh_config Host * ServerAliveInterval 100 and the following in /etc/ssh/sshd_config ClientAliveInterval 100 ClientAliveCountMax 3 The following is the ...
0
votes
0answers
73 views

How to create VPN connection in linux mint?

I have the VPN credentials for VPN connection which I successfully use in Windows. But I cannot create the vpn connection in Linux Mint. I have the connection with vpn server from the terminal when I ...
0
votes
0answers
32 views

Cant login/authenticate after installing gnome on SLES 12

I installed SLES 12 and afterward, I installed gnome with the steps below, but after the machine rebooted (and indeed logged in with the GUI) I cannot log in anymore (and by that I mean I see my user ...
1
vote
0answers
46 views

Which users/groups should be migrated to LDAP?

On a modern Debian distro, we're migrating towards centralized authentication using OpenLDAP - rather than using the normal Unix authentication (pam_unix(8), /etc/passwd). The reason for this is to ...
0
votes
0answers
4 views

Squid and NTLM issues

i setup squid 3.5 to autenticate users via NTLM_AUTH in order to manage different user based ACLs. Everything works almost fine, i said almost because i can't understand why some of the requests made ...
0
votes
0answers
13 views

Put users into system group by LDAP group membership

Currently users can authenticate via SSSD using their LDAP user account. But there is no way of specifying special group memberships. Now I have a LDAP group like this: The user objects itself does ...
-1
votes
2answers
250 views

What will be the best alternative for NIS authentication? [closed]

Please provide me the best alternative for NIS ? As I have currently using NIS + AD authentication but we want to set up a new authentication system. Is there any alternative for NIS and it is ...
0
votes
0answers
142 views

How to connect with linux mint to to wifi wpa2 enterprise with default radius server configuration?

I tried to connect to WiFi with WPA2 enterprise authentication to default radius server configuration with Linux mint 19.2 but I can't. I set security to WPA2 enterprise, authentication to TTLS, I ...
1
vote
1answer
25 views

Compact way of having the same public key for many server ids in ssh known_hosts

The known_hosts file has entries in the format of: {server-id} {signature-algorithm} {public-key-string} {comment} I work with the system that has many machines that share the same {public-key-...
0
votes
1answer
602 views

systemctl authenticating as other user

I have made this script that allows non-root access for a directory so a program can make changes to files in said directories. This .service has worked on a few machines and even on the same machine ...
1
vote
0answers
42 views

Is there something like HTTP Digest access authentication for SSH?

Apparently, SSH does send (albeit using an encrypted connection) the client's login password to the server if password authentication is being used instead of a pair of public and private keys: Does ...
0
votes
0answers
45 views

FreeRadius password cannot be authenticated because a hash header was added by the authenticator

I seem to have a problem when configuring FreeRadius-LDAP with Aruba IAP to implement the 802.1x framework in my organisation's network. So far, I can have perform a radtest locally and remotely from ...
1
vote
1answer
44 views

ssh using different key when forwarding authentication agent [closed]

I am trying to convince ssh to use my ed25519 id file whenever possible. In order to achieve this and according to this stackexchange question and the man page which states It is possible to have ...
0
votes
2answers
53 views

How to ensure I know my password?

I am connecting to machine via ssh key and have sudo rights. How can I check that username password I know is correct? /etc/shadow doesnt' contain me. What else can be done?
3
votes
1answer
808 views

Allow passwordless root login on the serial console

I do a lot of local development work with (CentOS/RHEL) virtual machines. Rather than configuring everything with a default root password -- which, if exposed to the network, can be problematic -- I'd ...
-2
votes
1answer
223 views

How to fix “Please login as the user ”xx“ rather than the user ”root" on azure ubuntu 1804 vm?

I create an azure ubuntu 1804 vm with no root user and ssh public key. Then I try to use the script of how to enable root ssh public key login with no root account and sshpass and sudo? But I got ...
0
votes
0answers
28 views

OCSP stapling + CRL on Apache

Please imagine an architecture with a root certificate authority (CA) and a subordinate CA. Is it possible for a client: to connect to an https server verify the validity of the server's ...
0
votes
0answers
22 views

OCSP: multi stapling on Apache

I am very interested in setting up multi stapling and I can not find a lot of documentation on it, or in any case, recent information. I have a certificate authority (CA) and a root CA above. They ...
1
vote
0answers
17 views

Allow Passphrase only **and** Password+Yubikey for single user login

Context I am lazy. But I am also (a bit) concerned with security. So on my machine (running Fedora 31), I want to be able to both: log into my session usign a strong passphrase, log into my session ...
0
votes
1answer
150 views

Enable OCSP stapling with Freeipa - Apache

I have 3 machines with Centos 7. I have FreeIPA server installed on the first machine. This serves as a certificate authority in my network; it's my CA. I have an other machine with FreeIPA client ...

1
2 3 4 5
11