Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.
0
votes
0answers
8 views
CentOS gnome vnc required authentication of administrator
I followed this guide from DigitalOcean to install gnome for my CentOS 7 vps, and I got the gnome access with my user account with sudo privilege.
But the message pops up:
Authentication is ...
1
vote
1answer
10 views
Conditionally unlock a password, on a read-only filesystem
I'm building an embedded system that normally one would not log in to, but we need a way for developers to get in for debugging and development. The rootfs is normally read-only (but can be remounted ...
-1
votes
2answers
41 views
Why does sudo not prompt for a password again after “command not found”?
I observe this issue below:
abc@ubuntu:~$ sudo - i
[sudo] password for abc:
sudo: -: command not found
abc@ubuntu:~$ sudo -i
root@ubuntu:~#
sudo command seems to fail with error "command not ...
3
votes
0answers
13 views
Iptables - Limit Connections per Port
I'm currently interested in setting up a server running a software called shadowsocks- to quickly summarize my problem, shadowsocks authenticates users via a port number and password, and given the ...
1
vote
0answers
18 views
stunnel No certificate returned unknown CA
I have 2x stunnels linux based, 1 server, 1 client.
What I am trying to do is to use a stunnel client and with verify 3 it authenticates the user based on the certificate.
Here are the config files ...
1
vote
0answers
82 views
VNC - Too many authentication failures
I've been trying to Google, but all of the issues refers connection from PC to remote VNC server.
So. I have an issue with VNC communication from Android to Linux. I have installed a TightVNC Server ...
2
votes
0answers
32 views
/etc/pam.d configuration
This is an example of the /etc/pam.d/sshd configuration file on a FreeBSD 11.0 freshly-installed system:
#
# $FreeBSD: releng/11.0/etc/pam.d/sshd 197769 2009-10-05 09:28:54Z des $
#
# PAM ...
1
vote
0answers
27 views
NGINX: control access to a location with both auth_basic and auth_ldap?
I am running NGINX 1.8.0 with nginx-auth-ldap. I have an application running at /app using auth_ldap for authentication/authorization. It works.
server {
listen 80;
...
location /app/ {
...
3
votes
1answer
97 views
SSH login without password with kerberos
I try to login onto a server which only supports login with kerberos authentication. Here's what I try:
kinit [email protected]
aklog -c foo.org
ssh server
But then I'm asked again for a password.
Here'...
1
vote
0answers
18 views
I need to shell in with an IPA user and run a program as root with no passwords
We are setting up a deployment job from our continuous integration tool, and we have the need to shell into a Centos 7 box with an FreeIPA managed user and run a script as root.
Since this all has ...
1
vote
0answers
107 views
SVN errors E170013, E120190 - An error occurred during authentication
I am trying to connect to my company SVN server in Ubuntu 16.04 and keep getting the following errors:
$ svn list https://path_to_repo
svn: E170013: Unable to connect to a repository at URL 'https://...
0
votes
1answer
28 views
switch to root takes long time [duplicate]
I have a system (RHEL) and switching to root takes about 1 minute. (su - root)
However, switching to any another user takes less than 1 second.
Is there a way to debug, why does switching to root take ...
3
votes
5answers
117 views
Why am I still getting a password prompt with ssh with key authentication? [duplicate]
I have two Oracle Linux 7.1 servers setup (devapp and subversion are the hostnames). What I want to do is ssh into subversion from devapp without having to enter a password. I followed this guide: ...
1
vote
0answers
71 views
pam_faillock and AD/CentOS 7.2
So, I have a CentOS 7.2 system and I used realmd to join the AD domain. I can do a # id {username}@{domain} which perfectly lists all of the AD information for that user. Awesome!
Using stock pam.d/...
0
votes
1answer
33 views
automate file delete in remote server
We run an application which creates a lot of directories. Once the application completes we do not need those directories. Hence we want to delete them as they are consuming lots of space. The problem ...
1
vote
1answer
30 views
Use sssd to join a redhat 7 machine to Active Directory domain without prompting the password
How do I use sssd to join a redhat 7 machine to Active Directory domain without prompting the password? I am trying to automate the domain join.
realm join -U adjoin --client-software=sssd abc.com
1
vote
2answers
118 views
rsync as another user
when I run follow command as normal user everything works correctly:
fabio@myclient:~$ rsync -rv myserver:~/backup /home/fabio/backup/
It works without any user interaction, but I need to run in a ...
0
votes
0answers
21 views
google authenticator with sddm not working
So I have my gentoo hardened installation on which I'm trying to use sddm with google authenticator, however if I require its use sddm wont let me login anymore, using lightdm it works fine but I want ...
0
votes
1answer
49 views
Passwordless User
I am root in a system. There seems to be a passwordless user in this system I try becoming a different specific user by using "su - username", and get a "Password" prompt. No matter if I enter a ...
1
vote
1answer
54 views
Postfix using a RESTful API for authentication
Is it possible to connect Postfix to a RESTful API to validate password/username?
What I imagine an ideal scenario is if Postfix handled the LOGIN or PLAIN methods (behind TLS only, but that is ...
1
vote
0answers
31 views
Using alernative openLDAP UID to authenticate to Active Directory
I'm using Winbind to authenticate users to Active Directory. Everything is working perfectly when the usernames match. The problem is that many of the users have different usernames for Windows and ...
1
vote
1answer
35 views
Dante authenticating user
I have this VPS that has 5 external/public ip addresses and, on only one of them I want to allow user 'someuser' to login in dante:
internal: 122.231.9.3 port = 1080
external: 122.231.9.3
...
1
vote
0answers
119 views
Debian can't connect to university Wi-Fi via captive portal
Debian 8.5, NetworkManager 0.9.10.0 (stable)
Trying to connect to my university's Wi-Fi (which should be redirecting to a captive portal for authentication steps) doesn't work – clicking on the ...
2
votes
0answers
93 views
Apache group authorization with mod_lookup_identity
I need to have some users authenticated against an Active Directory database, and I'd like to use mod_authnz_pam over mod_authnz_ldap for that. The users will have access to certains folders, ...
1
vote
1answer
122 views
Open source alternative to Google authenticator app
I've set up Google authenticator as 2FA for ssh and it works great, but authenticator app for Android is not open source anymore. Is there a good real open source alternative?
2
votes
1answer
142 views
Force authentication to use sssd not nslcd
What I did was:
vim /etc/sysconfig/authconfig
USESSSDAUTH=yes
USESSSD=yes
FORCELEGACY=no
Then:
authconfig --enablesssd --enablesssdauth --enablelocauthorize --update
...
4
votes
5answers
757 views
Does ssh send the password over the network?
Basically the entire question is in the headline: Does ssh send the password over the network? Presuming of course that login via username and password is used.
I'm asking because if ssh doesn't send ...
4
votes
0answers
55 views
Can SSH public key authentication use pam_group?
I'm configuring some servers to use LDAP (via PAM) to authenticate users. Additionally, I use pam_group to add all users to some system groups like audio/video/vboxusers/....
My PAM configuration ...
0
votes
0answers
47 views
Unable to Authenticate PhPVirtualBox Remote host - Firewall off - Auth Off
I am trying to get the most very basic setup running that I can build upon for controlling a remote Virtualbox installation.
The setup :
Server A :
192.168.1.10
Oracle VM VirtualBox web service ...
1
vote
0answers
75 views
proxy authentication failed but for selected packages only
I have recently installed Ubuntu 14.0.1 version on my machine. I use a proxy server to access internet and for this I have to provide the necessary IP address of the proxy server, port number and my ...
1
vote
0answers
74 views
Encrypt directory on Linux
I need to create an encrypted directory (to be then filled with files and subdirectories) in a Linux ext4 filesystem, accessible to just one user. It should be:
visible (just the root) from the non-...
0
votes
2answers
41 views
Is there any way to impose user validation with yum?
I am trying to set up a package distribution via yum. Is there any way to restrict who can install the package from the server side (running RHEL 7.1)?
I imagine that it is possible by whitelisting ...
1
vote
0answers
122 views
postgresql auth against samba active directory
I've recently set up a new Samba4 Active Directory to handle centralized authentication for my small office network. On this server is also a postgresql-9.5 instance, and I'm trying to have it ...
3
votes
1answer
257 views
PAM failing to authenticate sudo, after successfully contacting ssh-agent
Setting up PAM sudo authentication, using ssh-agent, on 14.04.1-Ubuntu server LTS.
I'm still unable to successfully authenticate sudo, via the ssh-agent, using PAM.
Here are my relevant /var/log/...
4
votes
0answers
171 views
How to pass private ssh key via string, not a file?
I have a text of a private key file. I want to connect via ssh to other node, yet the gateway I am in does not provide me with file system access. How to pass a text representation of key and not a ...
0
votes
0answers
22 views
VNC client with possibility to specify username, and encryption keys
My KVMoIP from ADDER requires connection with username and encryption. The telnet prompt mentions RFB 4.0. None of my Linux clients can do that?
I tried vncviewer, xvnc4viewer, and vinaigre, each the ...
0
votes
0answers
59 views
Git + Nginx - Is it safe to have https auth for cloning and pushing to repo, while remove any auth from gitweb block?
I have following nginx configuration on Ubuntu 14.04 to use together with git httpd backend and gitweb to anonymous browse of repo and push/clone with authentication. Is it safe to use such or I ...
1
vote
1answer
70 views
2 Factor Authentication - ask about token only at first login
I've set up google OTP authentication and RSA key authentication on my server but it's very anoing, after some time, to type OTP from phone every time.
I would like to know if there is any possibility ...
0
votes
1answer
23 views
Add a second authentication to user log in
trap '' 2
code=`oathtool --base32 --totp "xxxxxxxxxxxx"`
echo -n Enter Code:
read -s password
echo ""
if [ "$password" == "$code" ]; then
echo "You are allowed in"
else
exit
fi
trap ...
2
votes
0answers
22 views
Might any damage have been caused when cancelling the update manager in Linux Mint during an update?
My Linux Mint Update Manager was running an update - a very big one. It was in the middle of downloading package files, and it was taking way too long and I had to stop it, so I clicked Cancel. When I ...
1
vote
2answers
137 views
“SSH Virtual Kiosk”. Does “PermitEmptyPasswords yes” work? - How to make ssh user with empty password, so random users can use it?
How to make properly secure ssh account with empty password for running trusted binary? I'd like to make a kind of "virtual ssh Kiosk" for random users, while limiting "demo app" behind ssh "pseudo-...
3
votes
2answers
335 views
WPA supplicant dropping/disconnecting NIC in hotel wifi
TL;DR
WPA Supplicant intermittently fails on my Raspberry Pi 3 when using a USB Wifi dongle. It appears to do this when "reconnecting" to or changing access points in the hotel.
WPA GUI states: "...
-2
votes
2answers
47 views
linux + ssh login took time from one server to another
I have a central Linux server (Red Hat version 6.5), and from this server I establish SSH sessions to other servers.
To one server the SSH login took around 5 seconds, while to all others
it took ...
1
vote
2answers
918 views
mounting a CIFS filesystem directly or via fstab
I am encountering a problem in which mounting a remote CIFS server without an fstab entry works, but mounting through fstab does not.
The following command works:
$ sudo mount -t cifs //w.x.y.z/Home$...
0
votes
0answers
95 views
Authentication required to edit Sudoers - User not listed
I made a small typo in my sudoers file, nothing a simple pkexec can't fix.
The problem is that when I added my user with "adduser name" and added "name" to visudo, as well as the root and sudo groups:...
0
votes
1answer
128 views
Connect to a wireless network as standard user without administrator authentication Linux Mint 17.3
I'm trying to get a standard user on my laptop installed with Linux Mint 17.3 on the wireless. I can get to the internet just fine logged in with an administrator but as soon as i log in with a ...
0
votes
0answers
29 views
Email user temporary code access code when using ssh
I am looking for a way to create my own two factor authentication for ssh. After the user enters the correct login info I would like the terminal to send an email to the user that contains a code ...
2
votes
1answer
123 views
How to restrict su from root to nis clients
We are using NIS services for users login for Unix accounts. We have test machines where users themselves install OS and they get root access. Users are using su from root account to NIS user accounts ...
1
vote
0answers
58 views
Openvpn authentication fail caused by wrong system date time
I have a remote linux device connected as an openvpn client to an openvpn server over TCP,
with standard certificate authentication.
Unfortunately this device has lost the current system Date Time, ...
1
vote
0answers
199 views
how to download a private google spreadsheet from linux command-line?
I have a Google Sheets spreadsheet associated to a Google account, which is private and cannot be made public. I would like to know how to download a private google spreadsheet from the command-line ...
