Questions tagged [authentication]

Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

Filter by
Sorted by
Tagged with
1 vote
0 answers
17 views

dovecot: Force TCP socket disconnect on imap login failure?

I'm running dovecot 2.2.13 under Debian 8. I'd like to force an immediate TCP socket disconnect after any imap login attempt that fails. Right now, if invalid credentials are supplied during an imap ...
user avatar
  • 271
0 votes
0 answers
28 views

PAM allow only a specific su command for a user

i created a rule to allow mygroup group to do su command. In /etc/pam.d/su auth sufficient pam_succeed_if.so use_uid user ingroup mygroup Now i want mygroup to be able to use only halt command, ...
user avatar
  • 1
3 votes
0 answers
72 views

Sudo won't accept correct password

I'm having a weird problem; sudo isn't accepting my absolutely correct password on my new Kubuntu install. This happens in terminal and in graphical sudo prompts, like if you double click a .deb or ...
user avatar
0 votes
1 answer
33 views

Why must I provide authentication to mount SATA HDDs? Why are they in read-only mode?

I am running Fedora 35 dual booted on a Dell G5-5000, and have two or three HDDs connected via SATA (including the drive that Fedora on). When I attempt to access the drives in Nautilus for the first ...
user avatar
  • 103
0 votes
1 answer
193 views

X11VNC - connection failed due to incorrect password even though password correct

Running Xubuntu 20.04 as VM on top of Ubuntu Server 20.04 with bridged interface. I am able to connect to the VM via SSH (also using Putty on Windows 10 machine that will access the VM). Using ...
user avatar
0 votes
0 answers
24 views

Enterprise Linux environments and Active Directory integration - Dumb idea or the right way to go?

I help manage a large Linux environment (6K+ server/workstation) and want to understand better if we should go all-in on Active Directory integration, move to IdM/FreeIPA/Centrify, or stay with what ...
user avatar
  • 1
0 votes
0 answers
34 views

Making multiple PAM modules work together with success as soon as any of them return successfully

I basically want to unlock any sudo authentication with any of these criteria met (whatever completes first successfully): a usb as a security key matched (custom script). fingerprint matched. ...
user avatar
0 votes
0 answers
110 views

How to login/authenticate web URL using ansible playbook with Username and password

I am pretty new to the Ansible playbook and I am trying to log in to the website URL using username and password. I am facing the issue. I am using below code snippet. it would be great if someone ...
user avatar
1 vote
0 answers
88 views

openconnect pulse and 2fa

I want to use openconnect instead of pulsesecure/pulseUI to connect to my company's vpn. this was ok in the old server but in the new they have added 2FA. I saw this https://stackoverflow.com/a/...
user avatar
  • 1,408
2 votes
0 answers
38 views

Infrequent kerberos authentication issue (pam_krb5 vs. pam_unix)

My Linux computer belongs to a company network using a windows domain. The authentication is done using kerberos. Usually the authentication works fine and I am happy with my linux desktop. But ...
user avatar
  • 147
0 votes
0 answers
56 views

SSH CA signed keys, one accepted, one rejected

I have several CentOS 9 and one CentOS 7 VM. All are configured to trust my SSH CA for Key verification. I can ssh into all of them with key A, but the CentOS 7 VM rejects Key B. I can't seem to ...
user avatar
0 votes
0 answers
170 views

error: PAM: User account has expired for [user] from [IP]

I am currently trying to setup libpam-google-authenticator for 2FA on a Debian 9.0 VPS. I've installed the package using apt, set it up using the google-authenticator command and connected it to a ...
user avatar
  • 1
1 vote
1 answer
33 views

How does the sshd authentication process work?

In sshd(8) man page: The OpenSSH SSH daemon supports SSH protocol 2 only. Each host has a host-specific key, used to identify the host. Whenever a client connects, the daemon responds with its public ...
user avatar
  • 33
0 votes
0 answers
88 views

Linux shell command : su authentication failed

I upgraded current OS to latest version. i am unable to do su from admin to root user. I checked /etc/password, /etc/shadow, unix_chkpwd and su permission, everything looks ok i dig into the /etc/pam....
user avatar
0 votes
0 answers
33 views

using a password containing a single quote in msmtprc

I have a mail account with an smtp password that contains a single quote character. I want to send periodic logs using msmtp on this account. I have a working configuration for a different account ...
user avatar
  • 13
0 votes
0 answers
30 views

how to respond server challenge with netcat/socat/telnet

I need to authenticate with SAFECOOKIE on tor's control port. https://stem.torproject.org/faq.html#i-m-using-safe-cookie-authentication https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#...
user avatar
  • 1
1 vote
1 answer
175 views

Switch password/fingerprint authentication on lid behaviour

I set the fingerprint authentication as default for login and sudo commands. On 3 failures or no fingerprint detection for 10 seconds, password auth is required. When working with lid closed (external ...
user avatar
1 vote
1 answer
1k views

24 - iSCSI login failed due to authorization failure

When I run iscsiadm --mode node --targetname iqn.2018-12.dz.esi:iso --portal 10.11.0.2 --login I get this error: Logging in to [iface: default, target: iqn.2018-12.dz.esi:iso, portal: 10.11.0.2,3260] ...
user avatar
  • 11
1 vote
2 answers
74 views

Why does openssl create different hashes for the same string, and how does linux accept the different hashes when switching users?

Background As an experiment, I was adding new users (as the root user) by manually creating entries into /etc/passwd. To hash the passwords I was using openssl, in particular OpenSSL 1.1.1g but the ...
user avatar
2 votes
2 answers
221 views

Using sshpass in Cygwin, ssh stills prompts for password

According to this RedHat SSH password automation guide I'm following the Example 4: GPG one, and following the steps in that guide I create my pass_file using my own passphrase. Then, I got this: gpg -...
user avatar
1 vote
0 answers
50 views

How to perform git pull from gitlab repo with 2FA access token using linux terminal?

I had already cloned a few repos from gitlab and then LATER we added two factor authentication on the gitlab repos. Now I am trying to update my local branch by doing git pull like this: sudo git pull ...
user avatar
  • 111
0 votes
0 answers
89 views

How to solve an issue with my IP getting repeatedly banned due to incorrect SSH login attempts?

I recently upgraded my laptop to Ubuntu 21.10. I do not know if it is related, but I started having the following issue after the upgrade: At work I connect to a cluster via SSH. For this I use key-...
user avatar
  • 151
3 votes
0 answers
22 views

Ignoring the SED encrypted drives until after booting is completed [closed]

I have an Ubuntu system which boots from a small NVME disk using software encryption, TPM, etc. to mitigate against data loss in case of theft. The system is interfaced with customised PCIe hardware ...
user avatar
  • 131
0 votes
1 answer
193 views

systemd-homed with FIDO2 - Login from tty still possible with password only

I recently tried out systemd-homed and doing that I enrolled my Yubikey as FIDO2 device. When i try to authenticate against the created home via homectl authenticate <user> it correctly ...
user avatar
  • 95
0 votes
0 answers
142 views

"Credentials cache" (temporary cache password) for rsync/ssh?

In git (at least on Linux), there is a thing known as a credential-cache (see for instance https://stackoverflow.com/questions/5343068/is-there-a-way-to-cache-https-credentials-for-pushing-commits). ...
user avatar
  • 360
1 vote
1 answer
51 views

How can I type a password when fprint is enabled?

I use Fedora 34. I love what fprint is doing when it allows me to authenticate using my fingerprints on my ThinkPad's built-in fingerprint reader, but when I'm in my office, I like to dock my laptop ...
user avatar
0 votes
0 answers
51 views

Help with Google Authenticator PAM module

I need help configuring 2fa for ssh using Google Authenticator PAM module. I have followed the instructions exactly on Debian 10 and Ubuntu 20.04, but I keep getting stuck in an authentication loop at ...
user avatar
1 vote
0 answers
106 views

Fully replace sssd->ldap with web APIs in Linux

My organization has to get rid of their ldap servers, so I am facing the task of replacing it's functionality. To make this as customizable and future-proof as I can, I am looking for something that ...
user avatar
  • 11
0 votes
0 answers
82 views

authinfo syntax -- how to include a command in my authinfo file?

The online manual states the following: The format of an authinfo file is based on the .netrc file specification that is used for FTP login. In addition to the .netrc file standards, the authinfo ...
user avatar
2 votes
0 answers
68 views

How one can limit a user to a specific network namespace?

Suppose I have a Linux host with a few non-default network namespaces. I need to limit a specific user to a specific network namespace based on the results of user authentication. For example: user1 ...
user avatar
0 votes
1 answer
901 views

How can I enable Samba 1 authentication for a single share?

I'm setting up an old network scanner on a debian machine but it uses smb1 for authentication using ntlm auth = yes under the global settings. I know smb1 it's unsecure so I'm guessing if there's the ...
user avatar
0 votes
1 answer
92 views

CUPS: silent authentication printing

Under Debian Buster, I am looking for a solution to print with CUPS but without having to provide the password each time. Under Windows, I just had to enter the credentials for the desired printer ...
user avatar
1 vote
1 answer
2k views

Dockerfile | executor failed running [/bin/sh -c poetry install --no-dev]: exit code: 1

I'm new to Docker, so I am not sure how to interpret the cause of errors. "Poetry is a tool for dependency management and packaging in Python. It allows you to declare the libraries your project ...
user avatar
0 votes
1 answer
69 views

How to manage squid authentication

I'm running a squid server. I want to limit my users for using their usernames to use my proxy server. For example, I define a limit for a username named (user1) that if, for example, 3 devices use ...
user avatar
0 votes
1 answer
154 views

pkexec shows in command line instead of GUI pop-up [closed]

I just hopped to Pop!_os yesterday and pkexec executes in terminal. It also ran into the error: polkit-agent-helper-1: error response to PolicyKit daemon: GDBus.Error:org.freedesktop.PolicyKit1.Error....
user avatar
  • 11
1 vote
1 answer
73 views

How to use password for ftp user and still maintain pem authentication for root?

I have got a machine (ubuntu 20.04.2) with root access and root authentication is done strictly with pem file. There is need to setup vsftpd & ftp user which has been done. But ftp user cannot ...
user avatar
  • 13
1 vote
0 answers
11 views

Getting Error 503 trying to connect with Grouper with user and pass via python

I have an apache proxy server setup with following in my .htaccess file #Header always set Access-Control-Allow-Origin "*" Header onsuccess unset Access-Control-Allow-Origin Header always ...
user avatar
1 vote
1 answer
265 views

How to reconfigure ldap server connection on Debian 10 client?

I have a Debian 10 system which was configured to talk to an OpenLDAP server (10.5.5.35) for password, group and shadow. I need to switch the host over to a Duo Auth Proxy (10.5.5.50). I thought I ...
user avatar
1 vote
0 answers
941 views

Disabling the Ubuntu 21.04 "Authentication Required" Pop-Up?

I'd like to disable the GUI "Authentication Required" pop-up on a desktop Ubuntu 21.04 system. The information I've managed to find generally points to sudo visudo and adding a line like ...
user avatar
  • 111
0 votes
1 answer
313 views

How to set the default username and password for LxQt Desktop in Debian

I am having a Debian system which is having: pstree sddm--->Xorg | | -->LxQt where sddm is service running as a combination of Xorg(server) and LxQt(Desktop application). I want ...
user avatar
0 votes
2 answers
97 views

disable my own sudo for current shell?

Is it possible to prevent sudo from gaining root without password only in the current session (e.g. bash shell process?) I've noticed that ruby's bundle underhandedly used my sudo powers, without ...
user avatar
  • 413
0 votes
1 answer
38 views

How can Linux VMs detect usb smart cards on Windows laptops?

I am trying to set up ssh authentication on Azure/AWS hosted Linux VMs with USB Feitain smart cards. I have ran into a problem because the virtual machines need to be able to read the smart cards on ...
user avatar
1 vote
3 answers
664 views

Apache 2.4, basic file authentication ignored

I have the following in my (Debian-style, split-file) config <VirtualHost *> ServerName www.example.org DocumentRoot /var/www/example CustomLog /var/log/apache2/example/access.log combined <...
user avatar
0 votes
0 answers
322 views

How can I separate PAM authorization for login from sudo (using Duo)?

I recently installed Duo on an Ubuntu test server using these instructions: https://duo.com/docs/duounix While 2FA authentication for login works as expected, I was not expecting every use of sudo to ...
user avatar
0 votes
0 answers
415 views

Neomutt: add gmail account using password manager (KeepassXC)

I installed neomutt recently I am not able to add my gmail account to it. How can I authenticate in neomutt as gmail client without writing password in config files as plain text ? I am using ...
user avatar
0 votes
1 answer
46 views

When using SSH is it possible to prevent password authentication only if a certificate exists in the user's home directory?

I am spinning up a public facing server with SSH running for remote access. Every standard human user will be using a certificate for authentication. However one very limited functional account exists ...
user avatar
  • 45
1 vote
0 answers
21 views

Is it possible to put an increment on unlock_time for every failed login attempt?

I have Debian 10.7 machine with a PAM setup: auth [success=1 default=ignore] pam_unix.so nullok_secure auth required pam_deny.so auth required pam_tally2.so ...
user avatar
  • 11
0 votes
2 answers
56 views

Authentication precedence

In nsswitch.conf file I have an entry "passwd files sss". Also I have the evidence that the server is having LDAP authentication. Since the "files" for passwd is enabled and it ...
user avatar
  • 1
2 votes
1 answer
125 views

GitHub auth and ssh keys on Debian: I've tried everything I could find

GitHub auth continues to fail for me despite my taking all the advice I could find on the Internet. Here are the permissions on my .ssh directory and keys. I have changed the private key permissions ...
user avatar
1 vote
1 answer
28 views

AD Authentication for Linux VMs

If you have 100's of Linux VM's is it possible to get them all authenticating with an AD LDAP, but more importantly there is no local id needed in every single /etc/passwd and /etc/group of the 100 VM'...
user avatar

1
2 3 4 5
12