Questions tagged [authentication]
Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.
566
questions
1
vote
0
answers
17
views
dovecot: Force TCP socket disconnect on imap login failure?
I'm running dovecot 2.2.13 under Debian 8.
I'd like to force an immediate TCP socket disconnect after any imap login attempt that fails.
Right now, if invalid credentials are supplied during an imap ...
- 271
0
votes
0
answers
28
views
PAM allow only a specific su command for a user
i created a rule to allow mygroup group to do su command. In /etc/pam.d/su
auth sufficient pam_succeed_if.so use_uid user ingroup mygroup
Now i want mygroup to be able to use only halt command, ...
- 1
3
votes
0
answers
72
views
Sudo won't accept correct password
I'm having a weird problem; sudo isn't accepting my absolutely correct password on my new Kubuntu install. This happens in terminal and in graphical sudo prompts, like if you double click a .deb or ...
- 163
0
votes
1
answer
33
views
Why must I provide authentication to mount SATA HDDs? Why are they in read-only mode?
I am running Fedora 35 dual booted on a Dell G5-5000, and have two or three HDDs connected via SATA (including the drive that Fedora on). When I attempt to access the drives in Nautilus for the first ...
- 103
0
votes
1
answer
193
views
X11VNC - connection failed due to incorrect password even though password correct
Running Xubuntu 20.04 as VM on top of Ubuntu Server 20.04 with bridged interface. I am able to connect to the VM via SSH (also using Putty on Windows 10 machine that will access the VM).
Using ...
- 453
0
votes
0
answers
24
views
Enterprise Linux environments and Active Directory integration - Dumb idea or the right way to go?
I help manage a large Linux environment (6K+ server/workstation) and want to understand better if we should go all-in on Active Directory integration, move to IdM/FreeIPA/Centrify, or stay with what ...
- 1
0
votes
0
answers
34
views
Making multiple PAM modules work together with success as soon as any of them return successfully
I basically want to unlock any sudo authentication with any of these criteria met (whatever completes first successfully):
a usb as a security key matched (custom script).
fingerprint matched.
...
- 189
0
votes
0
answers
110
views
How to login/authenticate web URL using ansible playbook with Username and password
I am pretty new to the Ansible playbook and I am trying to log in to the website URL using username and password. I am facing the issue. I am using below code snippet. it would be great if someone ...
1
vote
0
answers
88
views
openconnect pulse and 2fa
I want to use openconnect instead of pulsesecure/pulseUI to connect to my company's vpn.
this was ok in the old server but in the new they have added 2FA.
I saw this https://stackoverflow.com/a/...
- 1,408
2
votes
0
answers
38
views
Infrequent kerberos authentication issue (pam_krb5 vs. pam_unix)
My Linux computer belongs to a company network using a windows domain. The authentication is done using kerberos.
Usually the authentication works fine and I am happy with my linux desktop. But ...
- 147
0
votes
0
answers
56
views
SSH CA signed keys, one accepted, one rejected
I have several CentOS 9 and one CentOS 7 VM. All are configured to trust my SSH CA for Key verification. I can ssh into all of them with key A, but the CentOS 7 VM rejects Key B. I can't seem to ...
- 1
0
votes
0
answers
170
views
error: PAM: User account has expired for [user] from [IP]
I am currently trying to setup libpam-google-authenticator for 2FA on a Debian 9.0 VPS. I've installed the package using apt, set it up using the google-authenticator command and connected it to a ...
- 1
1
vote
1
answer
33
views
How does the sshd authentication process work?
In sshd(8) man page:
The OpenSSH SSH daemon supports SSH protocol 2 only. Each host has a host-specific key, used to identify the host. Whenever a client connects, the daemon responds with its public ...
- 33
0
votes
0
answers
88
views
Linux shell command : su authentication failed
I upgraded current OS to latest version. i am unable to do su from admin to root user.
I checked /etc/password, /etc/shadow, unix_chkpwd and su permission, everything looks ok i dig into the /etc/pam....
0
votes
0
answers
33
views
using a password containing a single quote in msmtprc
I have a mail account with an smtp password that contains a single quote character. I want to send periodic logs using msmtp on this account. I have a working configuration for a different account ...
- 13
0
votes
0
answers
30
views
how to respond server challenge with netcat/socat/telnet
I need to authenticate with SAFECOOKIE on tor's control port.
https://stem.torproject.org/faq.html#i-m-using-safe-cookie-authentication
https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#...
- 1
1
vote
1
answer
175
views
Switch password/fingerprint authentication on lid behaviour
I set the fingerprint authentication as default for login and sudo commands. On 3 failures or no fingerprint detection for 10 seconds, password auth is required. When working with lid closed (external ...
1
vote
1
answer
1k
views
24 - iSCSI login failed due to authorization failure
When I run
iscsiadm --mode node --targetname iqn.2018-12.dz.esi:iso --portal 10.11.0.2 --login
I get this error:
Logging in to [iface: default, target: iqn.2018-12.dz.esi:iso, portal: 10.11.0.2,3260] ...
- 11
1
vote
2
answers
74
views
Why does openssl create different hashes for the same string, and how does linux accept the different hashes when switching users?
Background
As an experiment, I was adding new users (as the root user) by manually creating entries into /etc/passwd. To hash the passwords I was using openssl, in particular OpenSSL 1.1.1g but the ...
- 165
2
votes
2
answers
221
views
Using sshpass in Cygwin, ssh stills prompts for password
According to this RedHat SSH password automation guide I'm following the Example 4: GPG one, and following the steps in that guide I create my pass_file using my own passphrase. Then, I got this:
gpg -...
- 141
1
vote
0
answers
50
views
How to perform git pull from gitlab repo with 2FA access token using linux terminal?
I had already cloned a few repos from gitlab and then LATER we added two factor authentication on the gitlab repos.
Now I am trying to update my local branch by doing git pull like this:
sudo git pull
...
- 111
0
votes
0
answers
89
views
How to solve an issue with my IP getting repeatedly banned due to incorrect SSH login attempts?
I recently upgraded my laptop to Ubuntu 21.10. I do not know if it is related, but I started having the following issue after the upgrade:
At work I connect to a cluster via SSH. For this I use key-...
- 151
3
votes
0
answers
22
views
Ignoring the SED encrypted drives until after booting is completed [closed]
I have an Ubuntu system which boots from a small NVME disk using software encryption, TPM, etc. to mitigate against data loss in case of theft. The system is interfaced with customised PCIe hardware ...
- 131
0
votes
1
answer
193
views
systemd-homed with FIDO2 - Login from tty still possible with password only
I recently tried out systemd-homed and doing that I enrolled my Yubikey as FIDO2 device. When i try to authenticate against the created home via homectl authenticate <user> it correctly ...
- 95
0
votes
0
answers
142
views
"Credentials cache" (temporary cache password) for rsync/ssh?
In git (at least on Linux), there is a thing known as a credential-cache (see for instance https://stackoverflow.com/questions/5343068/is-there-a-way-to-cache-https-credentials-for-pushing-commits). ...
- 360
1
vote
1
answer
51
views
How can I type a password when fprint is enabled?
I use Fedora 34. I love what fprint is doing when it allows me to authenticate using my fingerprints on my ThinkPad's built-in fingerprint reader, but when I'm in my office, I like to dock my laptop ...
- 113
0
votes
0
answers
51
views
Help with Google Authenticator PAM module
I need help configuring 2fa for ssh using Google Authenticator PAM module. I have followed the instructions exactly on Debian 10 and Ubuntu 20.04, but I keep getting stuck in an authentication loop at ...
- 1
1
vote
0
answers
106
views
Fully replace sssd->ldap with web APIs in Linux
My organization has to get rid of their ldap servers, so I am facing the task of replacing it's functionality. To make this as customizable and future-proof as I can, I am looking for something that ...
- 11
0
votes
0
answers
82
views
authinfo syntax -- how to include a command in my authinfo file?
The online manual states the following:
The format of an authinfo file is based on the .netrc file specification that is used for FTP login. In addition to the .netrc file standards, the authinfo ...
2
votes
0
answers
68
views
How one can limit a user to a specific network namespace?
Suppose I have a Linux host with a few non-default network namespaces. I need to limit a specific user to a specific network namespace based on the results of user authentication. For example:
user1 ...
0
votes
1
answer
901
views
How can I enable Samba 1 authentication for a single share?
I'm setting up an old network scanner on a debian machine but it uses smb1 for authentication using
ntlm auth = yes
under the global settings. I know smb1 it's unsecure so I'm guessing if there's the ...
- 3
0
votes
1
answer
92
views
CUPS: silent authentication printing
Under Debian Buster, I am looking for a solution to print with CUPS but without having to provide the password each time. Under Windows, I just had to enter the credentials for the desired printer ...
- 103
1
vote
1
answer
2k
views
Dockerfile | executor failed running [/bin/sh -c poetry install --no-dev]: exit code: 1
I'm new to Docker, so I am not sure how to interpret the cause of errors.
"Poetry is a tool for dependency management and packaging in Python. It allows you to declare the libraries your project ...
0
votes
1
answer
69
views
How to manage squid authentication
I'm running a squid server.
I want to limit my users for using their usernames to use my proxy server.
For example, I define a limit for a username named (user1) that if, for example, 3 devices use ...
- 1
0
votes
1
answer
154
views
pkexec shows in command line instead of GUI pop-up [closed]
I just hopped to Pop!_os yesterday and pkexec executes in terminal.
It also ran into the error:
polkit-agent-helper-1: error response to PolicyKit daemon: GDBus.Error:org.freedesktop.PolicyKit1.Error....
- 11
1
vote
1
answer
73
views
How to use password for ftp user and still maintain pem authentication for root?
I have got a machine (ubuntu 20.04.2) with root access and root authentication is done strictly with pem file. There is need to setup vsftpd & ftp user which has been done. But ftp user cannot ...
- 13
1
vote
0
answers
11
views
Getting Error 503 trying to connect with Grouper with user and pass via python
I have an apache proxy server setup with following in my .htaccess file
#Header always set Access-Control-Allow-Origin "*"
Header onsuccess unset Access-Control-Allow-Origin
Header always ...
- 11
1
vote
1
answer
265
views
How to reconfigure ldap server connection on Debian 10 client?
I have a Debian 10 system which was configured to talk to an OpenLDAP server (10.5.5.35) for password, group and shadow. I need to switch the host over to a Duo Auth Proxy (10.5.5.50). I thought I ...
- 55
1
vote
0
answers
941
views
Disabling the Ubuntu 21.04 "Authentication Required" Pop-Up?
I'd like to disable the GUI "Authentication Required" pop-up on a desktop Ubuntu 21.04 system.
The information I've managed to find generally points to sudo visudo and adding a line like ...
- 111
0
votes
1
answer
313
views
How to set the default username and password for LxQt Desktop in Debian
I am having a Debian system which is having:
pstree
sddm--->Xorg
|
| -->LxQt
where sddm is service running as a combination of Xorg(server) and LxQt(Desktop application).
I want ...
- 123
0
votes
2
answers
97
views
disable my own sudo for current shell?
Is it possible to prevent sudo from gaining root without password only in the current session (e.g. bash shell process?)
I've noticed that ruby's bundle underhandedly used my sudo powers, without ...
- 413
0
votes
1
answer
38
views
How can Linux VMs detect usb smart cards on Windows laptops?
I am trying to set up ssh authentication on Azure/AWS hosted Linux VMs with USB Feitain smart cards. I have ran into a problem because the virtual machines need to be able to read the smart cards on ...
1
vote
3
answers
664
views
Apache 2.4, basic file authentication ignored
I have the following in my (Debian-style, split-file) config
<VirtualHost *>
ServerName www.example.org
DocumentRoot /var/www/example
CustomLog /var/log/apache2/example/access.log combined
<...
- 11
0
votes
0
answers
322
views
How can I separate PAM authorization for login from sudo (using Duo)?
I recently installed Duo on an Ubuntu test server using these instructions: https://duo.com/docs/duounix
While 2FA authentication for login works as expected, I was not expecting every use of sudo to ...
- 629
0
votes
0
answers
415
views
Neomutt: add gmail account using password manager (KeepassXC)
I installed neomutt recently I am not able to add my gmail account to it.
How can I authenticate in neomutt as gmail client without writing password in
config files as plain text ? I am using ...
- 829
0
votes
1
answer
46
views
When using SSH is it possible to prevent password authentication only if a certificate exists in the user's home directory?
I am spinning up a public facing server with SSH running for remote access. Every standard human user will be using a certificate for authentication.
However one very limited functional account exists ...
- 45
1
vote
0
answers
21
views
Is it possible to put an increment on unlock_time for every failed login attempt?
I have Debian 10.7 machine with a PAM setup:
auth [success=1 default=ignore] pam_unix.so nullok_secure
auth required pam_deny.so
auth required pam_tally2.so ...
- 11
0
votes
2
answers
56
views
Authentication precedence
In nsswitch.conf file I have an entry "passwd files sss". Also I have the evidence that the server is having LDAP authentication. Since the "files" for passwd is enabled and it ...
- 1
2
votes
1
answer
125
views
GitHub auth and ssh keys on Debian: I've tried everything I could find
GitHub auth continues to fail for me despite my taking all the advice I could find on the Internet.
Here are the permissions on my .ssh directory and keys. I have changed the private key permissions ...
1
vote
1
answer
28
views
AD Authentication for Linux VMs
If you have 100's of Linux VM's is it possible to get them all authenticating with an AD LDAP, but more importantly there is no local id needed in every single /etc/passwd and /etc/group of the 100 VM'...
- 11