Questions tagged [password]

Questions regarding password-based authentication and password management

172 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5
votes
0answers
6k views

How to change password of LDAP user?

Is it possible to change password for logged in LDAP user using passwd command? I have logged in to server1 using testuser. Trying to change password for itself (testuser) and got the below error. ...
4
votes
0answers
3k views

getent shadow shows password hashes for some users

If I execute sudo getent shadow I see password hashes for all the local users who have them. For most of the LDAP accounts I only see * in the password field. However, for a few LDAP users, I see ...
4
votes
0answers
505 views

Mail Server user management issue using Postfix+Dovecot+RainLoop

I'm using mail server using postfix+dovecot (over TLS/SSL), RainLoop as my WebClient, and using auth-system.conf.ext so user's password will be read by/from pam. Consider at least 10 users using this ...
4
votes
3answers
1k views

Is it possible to convert linux salted sha512 password hash to LDAP format?

We have an LDAP server which stores passwords and other user data. The server is not used for authentication of client machines though but only for authentication of client apps. So users change their ...
4
votes
1answer
271 views

Prevent users changing password in FreeBSD

How can I prevent a user to change its password in FreeBSD. In Linux i can do this by using chage -m 99999 <username> where chage is found in shadow-utils Reason for this is I created one shell ...
3
votes
0answers
116 views

How to prevent 'chpasswd' linux command by time or days with pam?

I have Ubuntu 18 OS and I am trying to prevent all users from running 'chpasswd' command after 17:00 o'clock. I need to use pam for this. My /etc/pam.d/chpasswd file: # The PAM configuration file ...
3
votes
2answers
2k views

Difficult authorized_keys login problem only for root on Solaris 11

Here's a difficult ssh problem I can't figure out on Solaris 11, although I think I'm an experienced UNIX/Linux sysadmin. :) I've copied the root@server1:/root/.ssh/id_rsa.pub file to: root@server2:/...
3
votes
1answer
628 views

Cannot login SSH with key, always asking password

There is a issue confusing me for couple of days. I have 3 Servers. A, B and C. I want access B and C from A via ssh. I have set public key/ authorized_keys ... on A,B,C. Scenario #1: Access B(.133)...
3
votes
1answer
75 views

Unlock the encrypted Volumes after restarting the server via SSH

I used the sudo shutdown -r to restart my Mac server via SSH. However, after restarting the server, I discovered that two volumes are offline due to encryption. What I am trying to do is input the ...
3
votes
1answer
76 views

Can I make cross-computer sharing compatible with tinfoil-hat security (password managers, email, etc.)

Preface: I realize the following is asking for tinfoil-hat type security, but I'm really curious for answers to my questions -- not suggestions to enable two-factor logons on gmail, etc. and call it a ...
3
votes
2answers
3k views

Warn about password expiration without forcing change

It's pretty simple. I would like to figure out what combination of changes in /etc/login.defs and/or /etc/pam.d/system-auth-ac. I would need to perform to allow the following behavior: I want a user'...
3
votes
1answer
586 views

Change password hashing to PBKDF2 on Debian-based OS

I'm looking for a way to change the hashing scheme on my Debian-based OS from sha512 to pbkdf2. Searching the internet hasn't helped much. The closest I've got is this question: Enable Blowfish-based ...
3
votes
1answer
213 views

Printing through a Samba server without recording the password in plaintext

I need to access a printer through a Samba server. In CUPS, I could make it work by entering a device location such as smb://username:password@hostname/printer_name. However, it would mean for my ...
3
votes
1answer
391 views

Why sudo won't remember my password?

I use sudo in many systems, but I have one of them that makes me type my password each time I run sudo. All the others remember it for a while. This is debian 7.4 wheezy and sudo 1.8.5 I found this : ...
3
votes
2answers
28k views

vsftp user authentication problems

I configured my ftp user's home dir to /var/www and set a password but I cannot login with ftp 127.0.0.1, it keep giving me 530 Login incorrect. Why is this? I'm sure I have typed the password right. ...
3
votes
2answers
2k views

Linux Mint MATE: Disable encrypted volume password dialog

I'm running the MATE edition of Linux Mint on my laptop. I have an external USB disk with a LUKS container on it. The USB disk is connected to the laptop's docking station. Whenever I connect the ...
3
votes
0answers
3k views

Changing Samba/LDAP password with passwd

We've installed CentOS Directory Server (389 DS) and have Samba using it as a backend. This works great except that when enabling password syncing in the smb.conf it is only synced one way. I could ...
3
votes
0answers
170 views

Restrict usage of the same password during a time period

I need to configure a server with some requisites on the password changing: in addition to other requisites, I need to ensure that, on a password change, it is not repeated (last 5 passwords) and ...
3
votes
0answers
1k views

Getting a short wifi password to work on Linux Mint

Wifi password became a problem to me. My wifi password consists of only 4 letters but my Linux Mint 12 is expecting more than 7 letters - until then connect button is disabled. Can I work around this ...
2
votes
1answer
78 views

How to disable root password in NixOS?

I tried setting users.users.root.hashedPassword = "*"; similar to sudo passwd -d root or user { 'root': password => '*', require => Package[ruby-shadow], } in Puppet, but after sudo nixos-...
2
votes
0answers
34 views

User input in cronjob

I have created a script which calls another script.I'm implementing this via below cronjob 55 12 * * * cd /backup2 && ./script2.sh The another script ,I'm calling(restore1.sh) requires ...
2
votes
0answers
21 views

How to have synchronized samba passwords with local linux accounts where linux account are the leading system/authority?

How to have synchronized samba passwords with local Linux accounts where Linux accounts are the leading system/authority? This seems to be a surprisingly complex request/requirement. Since I already ...
2
votes
1answer
254 views

Encrypting a password using gpg without constantly asking for password

I have a service that checks my email regularly, and I use gpg to encrypt my email password. The problem is that every time I lock my computer or after a certain amount of time gpg shows a graphical ...
2
votes
0answers
508 views

Automation of ssh change password on 1-st login (no expect)

My account was copied from 1 to a big number of hosts. On every host on 1-st login I get: WARNING: Your password has expired. You must change your password now and login again! Changing password for ...
2
votes
0answers
182 views

PAM: Sequences in Linux Login Password Being Flagged Unexpectedly

I am attempting to implement a password policy on Debian 8. I have the following in /etc/pam.d.common-passowrd: password requisite pam_cracklib.so difok=2 minlen=8 ...
2
votes
0answers
627 views

SSH Remote Port Forward Host Passwordless

I have a Remote Port Forward SSH tunnel from the host1 the host0 at port 10022 through: $ autossh -R 10022:localhost:22 host0 With host0 record in the ~/.ssh/config file both at host1 and host0: # ...
2
votes
0answers
82 views

RHEL7 PAM Password Length based on UID

I'm trying to configure password policy based on different UIDs. So for example: - UID 1000-1999 would have Password minimum lenght of 15 - UID 2000-2999 would have Password minimum lenght of 20 ... ...
2
votes
0answers
65 views

Changing the word “password” at login

Wanted to know if there was a way to change the word password here to say passcode? We use a custom application that authenticates users through passcodes and to not confuse users, I wanted to change ...
2
votes
0answers
161 views

Don't store the encfs password, require explicit mounting

I use encfs to encrypt some data in my dropbox directory. Everything works well. For simplicity let's assume that i have created the directories ~/encrypted and ~/decrypted. Every time I log in into ...
2
votes
0answers
77 views

Disabling password expiry for auto login User Linux

I have a unattended system which runs under test login. Recently, I enabled password expiry for 90 days. All I am expecting is if someone login manually with user test after 90 days it should prompt ...
2
votes
2answers
182 views

Why does root need to enter a password when executing specific commands?

On a certain RHEL5 machine, when root is executing commands such as passwd someuser or any other privileged command, the root password is requested for verification and the command can't be executed ...
2
votes
0answers
246 views

How to remember / autofill forms with uzbl

I'm using uzbl to listen radio online, including this French web radio. There's a simple email/password form I would like to be filled automatically (down-right corner link "Se connecter"). Less ...
2
votes
0answers
812 views

Is there a password manager server application

Yet another hackers attack on the infrastructure of companies that offer to store our passwords begs the question: Is there a password manager server application? (Along with browser extensions) ...
2
votes
0answers
708 views

Persistent SSH port forward without public keys

Problem I haven't found a solution to run an SSH port forward in a reliable and persistent fashion, when the server you are connecting to does not support public-key authentication. Question What ...
2
votes
0answers
2k views

dbclient - login without manually typing password

On my router which runs OpenWRT I need a script which will keep a SSH connection alive mostly all the time (small breaks are OK). As the SSH server which I want to connect to takes care of multiple ...
2
votes
0answers
206 views

Integrate my own PAM module with the passwd command

I know that to integrate my module with the passwd command all I need to do is add the following line to the /etc/pam.d/passwd file: password sufficient mymodule.so My question is I want my module ...
2
votes
0answers
581 views

Editing nsswitch.conf to check for files other than /etc/passwd while searching local files for user details

I have a file in /etc named radius which contains the user account details similar to /etc/passwd but of Radius users. How do I configure /etc/nsswitch.conf to check /etc/radius in addition to ...
2
votes
1answer
253 views

Understanding passwd --keep-tokens

On GNU/Linux, I do have trouble understanding the meaning of the --keep-tokens option for passwd. As it doesn't seem to be much used as I am not able to find any examples and only online copies of man ...
2
votes
0answers
185 views

Getting non-stored password from Icedove

I've recently changed my mail password (because of Heartbleed), but I've forgotten the new one. When entering the new password in Icedove, I didn't think of clicking "remember password", but the ...
2
votes
0answers
2k views

samba 4 force user

I have a directory with files owned by Linux user quux. I want to give access to it over CIFS using Samba 4 for two persons so they have different usernames foo and bar and passwords but access the ...
2
votes
1answer
545 views

user password expiring everyday in Linux

I have a user account for Oracle on a Redhat Enterprise Linux 6.8 server. It is supposed to have a non-expiring password, therefore I have disabled password ageing using chage -I -1 -m 0 -M 99999 -E -...
2
votes
1answer
393 views

How to “forget” user credentials after logging in to a windows share (samba)

I logged in from my Mint to a windows share (which is actually a linux running samba, if it's relevant), typed in the password, and got it. Even though I marked it to forget the password immidiatly, ...
2
votes
1answer
52 views

Where do my keypresses go ?

Scenario (Ubuntu 14.04.2) : I wake Ubuntu from suspend. I know (from past experience) that it only takes 2 or 3 seconds for the lock screen to become available. My monitor, however, takes longer - ...
2
votes
1answer
2k views

How to activate the password prompt on Linux Mint Cinnamon lock screen?

I am using Linux Mint 17 Cinnamon. When I lock the screen it shows a dimmed version of my desktop background and the time. So when I want to unlock it, I usually move the mouse and the prompt for ...
1
vote
0answers
56 views

Password does not work anymore

Today I took a look at the /etc/shadow file with the password-hashes without changing it but saving it again. After again starting my PC with Linux Mint 19.4 I entered my password and that also worked....
1
vote
0answers
24 views

How to set up SSH 2FA with either publickey+token or password+token?

I have tried to set up PAM authentication for SSH to a Ubuntu 18.04 server (by modifying the instructions in this guide). I am attempting to set the login so that any of these two combinations is ...
1
vote
1answer
45 views

How to securely store password for use by mount

I would like non-root users to be able to mount certain drives on the local network (or have them be mounted automatically on log-in). To mount network drives (via cifs) a password is passed on over ...
1
vote
1answer
43 views

How to write an “expect” script that checks if the supplied password matches one of multiple possible passwords?

I want to change the password on my server. There are four possible passwords that should all be accepted for changing a password on the server. To achieve this I want write an "expect" script ...
1
vote
1answer
52 views

How to confirm linux root password from ssh root?

How can I check a remote machines root password? I have a remote machines that are normally accessed via ssh root and other users. For security purposes I have a script to change all keys and user ...
1
vote
0answers
32 views

ssh to one machine and than another wihout password

If I ssh a server from my work PC, I do not have to enter password, it uses keys for passwordless authentication. Yet If I use vpn and ssh to connect to my work PC (with a password) and then ssh to ...