Questions tagged [authentication]
Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.
531
questions
1
vote
0answers
23 views
AD Authentication for Linux VMs
If you have 100's of Linux VM's is it possible to get them all authenticating with an AD LDAP, but more importantly there is no local id needed in every single /etc/passwd and /etc/group of the 100 VM'...
0
votes
2answers
37 views
Efficiently handle malicious connection attempts to server? (Logged as “Connection closed by xx port xx [preauth]” in /var/log/auth.log)?
I wanted to know what efficient way is there to handle malicious attempts to connect to my server. As mentioned, the attempts show up logged in /var/log/auth.log as Connection closed by IPaddress port ...
0
votes
1answer
29 views
Need help with a script that uses passwd and shadow
I would like assistance with something I have to do.
I need to verify if all users in passwd are also in shadow, if the primary group exists, if the homedir exists and if it belongs to the correct ...
1
vote
0answers
94 views
Unlock i3lock on i3wm using finger print sensor (fprint)
I am trying to set up my i3lock that I would be able to unlock it using finger print sensor on my thinkpad x390 yoga.
I have set up my i3lock in .config/i3/config:
exec --no-startup-id xss-lock --...
0
votes
1answer
267 views
fprintd: The driver encountered a protocol error with the device
I am trying to make work my finger print sensor thinkpad x390 yoga. I installed printfd package using yay. When I try to run fprintd-enroll, I get this error:
Using device /net/reactivated/Fprint/...
0
votes
1answer
25 views
automating entering username and password on terminal using bash [duplicate]
Actually, the command I'm running is
sudo openvpn nl-free-01.protonvpn.com.udp.ovpn
So this asks for username and password every time I run the command
Enter Auth Username:
Enter Auth Password:
I ...
0
votes
0answers
21 views
Add Support CRAM-MD5 or DIGEST-MD5 to SMTP server
I use a CentOS Linux server release 7.8.2003 (Core) by Godaddy.
My problem is that the SMTP mail server (dovecot-2.3.10.1-1.cp1186.x86_64 and exim-4.93-5.cp1186.x86_64) doesn't accept CRAM-MD5 or ...
0
votes
1answer
32 views
Is it possible to make a user that can only log in using su?
I want to make a user that can only be accessed using su.
I can see in the login.conf man page there are different authentication types, and one of the example types is su, but I am unable to discover ...
0
votes
1answer
46 views
Accidentally deleted user, lost all user permission/privilege to sudo
This is my fourth day in Linux OS from windows.
I don't know why I did it, but I enter this command sudo deluser <MYUSER> sudo. After entering the command, I lost all my sudo privileges. And ...
0
votes
0answers
18 views
Wireless authentication RX Association Response codes
While authenticating with wpa2, I see lines like RX AssocResp from <mac> (capab=0x8431 status=0 aid=1) in dmseg. I searched the web and also read the authentication method. I couldn't find the ...
0
votes
1answer
40 views
SSH doesn't prompt for new password when expired
I'd like to setup SSH to prompt for a new password when a user's existing one is expired, but currently it just fails to login. I use Kerberos as an authentication backend. You can see this user's ...
0
votes
0answers
12 views
create user on the fly for ssh-ca
I want to use ssh-ca to grant access to servers.
What I don't want is, that all user are using the same system user for access.
Is it possible to create the systemuser on-the-fly when the ssh ...
3
votes
1answer
53 views
Why when we type wrong password in terminal it has long delay to respond? [duplicate]
I don't know it's just my experience or not, but every time I type a wrong password in terminal, it takes 2 or 3 seconds to respond. And I think It's a very long time for a computer.
Does anybody know ...
1
vote
1answer
36 views
Verify SSH authentication with Bash Shell Script?
I need to test SSH authentication on a few servers. Let say the IP Addresses of those servers are saved in ip.txt file
I've written similar script in Python using paramiko and netmiko module.
The ...
0
votes
0answers
14 views
docker prompts for password (osx)
I just installed Docker Desktop for Mac, but docker commands (docker info, docker build, etc.) prompt me for a password.
I know this can be silenced on Linux, but MacOS does not have usermod.
How do I ...
1
vote
1answer
1k views
authentication is required to create a color profile on ubuntu 20.04
I upgrade Ubuntu version from 18.04 to 20.04
But when update is complete i found a issues again and again on screen.
Here is the screenshot in given below:
How to fix these issues. I entered my ...
6
votes
2answers
749 views
How to retrieve ssh password with a working ssh key
I always login a server with a ssh key, so I am not sure what my actual password was anymore. I would need to guess a couple of times. However the server has fail2ban and I don't want to trigger that. ...
0
votes
1answer
49 views
How to specify a password for non-interactive commands with systemctl on a remote host?
Here is what I want to do. I have .service files for a bunch of services spread across multiple hosts. I want to write a shell script that can start or stop all the services, without having to have ...
0
votes
0answers
29 views
libcurl with ca_cert + private_key + cert_chain : working with OPENSSL but not with NSS
I'm writing an HTTP class (in C++) that abstracts the underlying implementation, and I want to be able to deal with a server using strong authentication.
My implementation uses libcurl.
The user of my ...
0
votes
0answers
11 views
How to authenticate user without agetty login prompt?
I want to write a shell script based on cdm which not only lets the user choose which session to run, but also asks for their username and password.
Just to give some details: it uses dialog, which ...
1
vote
0answers
138 views
How can I get my fingerprint reader to work alongisde my password?
I have a Lenovo Thinkpad T430 with an integrated fingerprint reader. I want to make it work alongside my password, not replace it. What I mean by this is that, when a password prompt comes up, I want ...
0
votes
0answers
19 views
Centos7 SELinux user context not received from FreeIPA
Hopefully there is something simple I am missing here.
I have FreeIPA 4.6.6 (can not update at this time), Centos 7 and Centos 6 systems.
SELinux is in permissive mode.
Logins on the Centos 6 system ...
2
votes
2answers
140 views
OAUTHBEARER authentication fails in mutt
I've used OAUTHBEARER authentication to use mutt with GMail for a while, but I've run into a an issue that I can't figure out. When I launch mutt I get OAUTHBEARER authentication failed. Here is ....
0
votes
0answers
35 views
eToken not detected
I want to use an Aladdin eToken Pro 32k 4.2B on Fedora 32 but it is not detected. It shows as another model in lsusb:
Bus 003 Device 009: ID 0529:0600 Aladdin Knowledge Systems eToken Pro 64k (4.2)
...
0
votes
0answers
23 views
Status(UP/DOWN) of Session based Application hosted on Tomcat server in UNIX
I need to check the status (UP/DOWN) of an application (https://w45ra0377.abc.com:12345) that is hosted on a server in UNIX.
This is a session authenticated application.
I tried with the below CURL ...
0
votes
0answers
10 views
How can I enforce HTTP basic authentication on an Apache directory that is an alias?
I'm using Ubuntu 18.04 with Apache 2.4. I have created this htpasswd file ...
$ ls -al /etc/apache2/.htpasswd
-rwxr-xr-x 1 www-data root 49 Aug 20 20:57 /etc/apache2/.htpasswd
I have this in my /etc/...
0
votes
0answers
30 views
How to limit number of connected device to network in freeradius?
I'm using freeradius for central authentication in my network. but i want to limit the number of connected device to my network to 2 device per username.
Is there any option to do that?
0
votes
1answer
25 views
Creating new user by creating new folder
I would like to ask a doubt regarding the creation of new user in Ubuntu. Normally we use "Users and Group" GUI application, terminal, etc for creating new users. But I would like to know, ...
0
votes
0answers
40 views
Where is the “delay on a wrong password login” at the KDE login?
Please note this is a "mechanism, not policy" question. That means I do NOT want to discuss security policies, just the mechanism that implements them.
I am using the latest Kubuntu 20.04 ...
0
votes
1answer
204 views
Debian libpangoft2-1.0.so.0 undefined symbol hb_glib_script_from_script
I was installing some common packages I used everyday, like i3wm, jq, bat-musl, kitty, and so on, in a mostly fresh recent Debian. Then, when I tried to run a i3-msg command, I received the following ...
0
votes
1answer
59 views
How to login into a web with curl?
Testing site: http://testing-ground.scraping.pro/login
Username: admin
Password: 12345
Curl help
-u, --user <user:password> Server user and password
Here is the web form
wolf@linux:~$ curl ...
0
votes
1answer
55 views
User Synchronizing
Is there any possible way to synchronize my main server's /etc/shadow, /etc/passwd, /etc/gshadow and /etc/group?
I have 1000+ users and it's a hassle to loop userdel and loop useradd.
I tried placing ...
0
votes
1answer
31 views
dovecot authentication against passed-file
currently i am facing some issues with dovecot and authentication against a passed-file.
Here some details about the environment:
Centos 7 (3.10.0-042stab142.1)
postfix (2:2.10.1-9.el7)
dovecot (1:2....
0
votes
0answers
63 views
Is autologin dangerous? (Debian/Linux)
If only I use my desktop computer (Debian), can I turn off password entry when I log in (xfce/lightdm) as user (not root)? The user account (user) has a password, but in the settings I only turn on ...
0
votes
0answers
14 views
svn authentication on unsafe machine
i need to access some repository on an unsafe server. I dont want to store my password anywhere else than current session. What I came up with so far is combination of
histcontrol ignorespace
then ...
1
vote
0answers
198 views
Understanding /var/log/auth.log in Ubuntu
I am having an hard time understanding some lines inside my auth.log file from Ubuntu. Can you help me breaking down the pieces of this one?
pkexec: pam_unix(polkit-1:session): session opened for ...
3
votes
1answer
5k views
Why `su` gives “su: Authentication failure” even when running as root?
Somewhat like in How to suppress su authentication failure warning?, but it actually does not run the command at all.
# su limited
su: Authentication failure
# su -s /bin/bash limited
su: ...
0
votes
1answer
47 views
LDAP Synchronization with Local Users
How would I go about regularly copying user account data from /etc/passwd on one machine into LDAP?
The situation I'm in is that I'm the sysadmin for an academic computer cluster. We have one master ...
-1
votes
2answers
155 views
Sudo asks for password even after `sudo su` without pass
I have already sudo-ed to an account, by running sudo su - <username> and when I try to run apt from this account I am getting the message:
[sudo] password for <username>:
which I don't ...
0
votes
0answers
101 views
Winbind connecting to AD DC on port 139
I have a Samba server on Linux which is integrated with Windows AD for user authentication. Everything is working fine, but we see a lot of Firewall denies on port 139. Upon investigation, I found ...
0
votes
0answers
83 views
How can I authenticate to Linux from AD using a KeyTab files?
I was reading the following blog post https://docs.microsoft.com/en-gb/archive/blogs/pie/all-you-need-to-know-about-keytab-files
I went through the exercise and created the keytab file and used it on ...
0
votes
0answers
14 views
Authentication for iproute2 tunnel
I'm looking at creating a simple point to point tunnel using iproute, as described here: linux.it
But something very basic is bothering me...there is no authentication. Does that mean the IP ...
0
votes
2answers
105 views
Execute GUI programs as root without password
I know that in order to execute a CLI program using sudo, but without the need to typing your password, all you need to do is put
user ALL = NOPASSWD: /path/to/your/program
in /etc/sudoers, or even ...
0
votes
1answer
48 views
Does “Polkit” make use of linux capabilities?
I know that some authentication programs like KDE's KAuth can use polkit as the backend.And what makes polkit special is that it can grant some specific privileges to a non-privileged process.A ...
2
votes
0answers
87 views
Strongswan AUTH_FAILED
I am trying to configure VPN server Strongswan and have a problem: the server always sends to the clients the following response:
IKE_AUTH [ N(AUTH_FAILED) ]
I've tried to change log level editing ...
0
votes
1answer
105 views
Custom user access to Zimbra webmail
I know it's a specific topic, but it could be broadened to a more general context.
I have a Zimbra mail server on CentOS, only used via webmail, where i need to differentiate user capability to login ...
0
votes
0answers
215 views
why does apache 2.4 with ldap authorization and starttls configured still does simple bind?
We have a recent apache 2.4 setup on suse enterprise linux 15 sp1. The apache server has kerberos authentication configured which works fine for authenticating users in a "joined" active directory ...
0
votes
1answer
34 views
How can I set a policy to enable public key authentication only if the pubkey has a password that meets requirements?
How can I set a policy to enable public key authentication only if the pubkey has a password that meets requirements?
Currently people make keys with ssh-keygen. We want to enforce creation and use ...
0
votes
0answers
63 views
Can Samba use a file containing a blacklist of users?
I currently use pam_listfile.so to blacklist users trying to log in via ssh, with a line like this in /etc/pam.d/system-auth:
auth required pam_listfile.so item=user sense=deny file=/etc/users....
0
votes
1answer
49 views
If someone logs into serial and exits console without logout, how do I automatically logout?
am using a debian based linux system. There is a console access to it via Lantronix SLC8000 Advanced Console Manager. When I login it asks for username and password (Both Console manager and server )
...
