Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.
0
votes
0answers
8 views
How to authenticate Linux accounts with PAM using PHP without giving www-data shadow
Sort of as a follow up to this: Securest way to authenticate users against /etc/shadow using PHP? and because there hasn't been anything relevant that I've seen on Ubuntu 16.04.
I'm trying to ...
1
vote
1answer
22 views
Running a shell script on X failed login attempts
I'd like to run a script if the login on my machine fails 3 times (not ssh, but someone in terminal trying to login, or someone trying to physically login). Also, is if it is possible to configure the ...
0
votes
0answers
47 views
PBIS auth.log requirement “user ingroup nopasswdlogin” not met by user “[email protected]”
I want to use my Windows AD credentials to login the Ubuntu 16.04 machine. I use PBIS (PowerBroker Identity Services) AD-bridge from Beyondtrust version 8.5.2.265. Windows version is Windows Server ...
0
votes
1answer
11 views
Centos Authconf Error
I am currently trying to the authentication and authorisation on centos with the following command:
authconfig --enableforcelegacy --update
And it throws me following message, since I am pretty new ...
2
votes
0answers
101 views
getent shadow shows password hashes for some users
If I execute
sudo getentshadow
I see password hashes for all the local users who have them. For most of the LDAP accounts I only see * in the password field. However, for a few LDAP users, I see ...
0
votes
0answers
19 views
su authentication failure & sudo: /usr/bin/sudo must be owned by uid 0 and have the setuid bit set [duplicate]
today I was attempting to setup nginx and I made a huge mistake. I'm on Manjaro KDE Edition (16.10.3).
Since nginx gave me 403 - forbidden, I gave a look at Resolving "403 Forbidden" error and, since ...
1
vote
1answer
57 views
pine (Alpine) with GMail 2-step Authentication enabled?
I always get a message:
IMAP Authentication canceled
And then:
Retrying plain authentication after [ALERT] application-specific
When I look at my google security settings I can't find any option ...
0
votes
0answers
22 views
CentOS gnome vnc required authentication of administrator
I followed this guide from DigitalOcean to install gnome for my CentOS 7 vps, and I got the gnome access with my user account with sudo privilege.
But the message pops up:
Authentication is ...
1
vote
1answer
18 views
Conditionally unlock a password, on a read-only filesystem
I'm building an embedded system that normally one would not log in to, but we need a way for developers to get in for debugging and development. The rootfs is normally read-only (but can be remounted ...
-1
votes
2answers
126 views
Why does sudo not prompt for a password again after “command not found”?
I observe this issue below:
abc@ubuntu:~$ sudo - i
[sudo] password for abc:
sudo: -: command not found
abc@ubuntu:~$ sudo -i
root@ubuntu:~#
sudo command seems to fail with error "command not ...
3
votes
0answers
33 views
Iptables - Limit Connections per Port
I'm currently interested in setting up a server running a software called shadowsocks- to quickly summarize my problem, shadowsocks authenticates users via a port number and password, and given the ...
1
vote
0answers
71 views
stunnel No certificate returned unknown CA
I have 2x stunnels linux based, 1 server, 1 client.
What I am trying to do is to use a stunnel client and with verify 3 it authenticates the user based on the certificate.
Here are the config files ...
2
votes
0answers
333 views
VNC - Too many authentication failures
I've been trying to Google, but all of the issues refers connection from PC to remote VNC server.
So. I have an issue with VNC communication from Android to Linux. I have installed a TightVNC Server ...
2
votes
0answers
52 views
/etc/pam.d configuration
This is an example of the /etc/pam.d/sshd configuration file on a FreeBSD 11.0 freshly-installed system:
#
# $FreeBSD: releng/11.0/etc/pam.d/sshd 197769 2009-10-05 09:28:54Z des $
#
# PAM ...
1
vote
0answers
37 views
NGINX: control access to a location with both auth_basic and auth_ldap?
I am running NGINX 1.8.0 with nginx-auth-ldap. I have an application running at /app using auth_ldap for authentication/authorization. It works.
server {
listen 80;
...
location /app/ {
...
4
votes
1answer
299 views
SSH login without password with kerberos
I try to login onto a server which only supports login with kerberos authentication. Here's what I try:
kinit [email protected]
aklog -c foo.org
ssh server
But then I'm asked again for a password.
Here'...
1
vote
0answers
26 views
I need to shell in with an IPA user and run a program as root with no passwords
We are setting up a deployment job from our continuous integration tool, and we have the need to shell into a Centos 7 box with an FreeIPA managed user and run a script as root.
Since this all has ...
1
vote
0answers
267 views
SVN errors E170013, E120190 - An error occurred during authentication
I am trying to connect to my company SVN server in Ubuntu 16.04 and keep getting the following errors:
$ svn list https://path_to_repo
svn: E170013: Unable to connect to a repository at URL 'https://...
0
votes
1answer
36 views
switch to root takes long time [duplicate]
I have a system (RHEL) and switching to root takes about 1 minute. (su - root)
However, switching to any another user takes less than 1 second.
Is there a way to debug, why does switching to root take ...
3
votes
5answers
159 views
Why am I still getting a password prompt with ssh with key authentication? [duplicate]
I have two Oracle Linux 7.1 servers setup (devapp and subversion are the hostnames). What I want to do is ssh into subversion from devapp without having to enter a password. I followed this guide: ...
1
vote
0answers
122 views
pam_faillock and AD/CentOS 7.2
So, I have a CentOS 7.2 system and I used realmd to join the AD domain. I can do a # id {username}@{domain} which perfectly lists all of the AD information for that user. Awesome!
Using stock pam.d/...
0
votes
1answer
33 views
automate file delete in remote server
We run an application which creates a lot of directories. Once the application completes we do not need those directories. Hence we want to delete them as they are consuming lots of space. The problem ...
1
vote
1answer
45 views
Use sssd to join a redhat 7 machine to Active Directory domain without prompting the password
How do I use sssd to join a redhat 7 machine to Active Directory domain without prompting the password? I am trying to automate the domain join.
realm join -U adjoin --client-software=sssd abc.com
1
vote
2answers
271 views
rsync as another user
when I run follow command as normal user everything works correctly:
fabio@myclient:~$ rsync -rv myserver:~/backup /home/fabio/backup/
It works without any user interaction, but I need to run in a ...
0
votes
0answers
41 views
google authenticator with sddm not working
So I have my gentoo hardened installation on which I'm trying to use sddm with google authenticator, however if I require its use sddm wont let me login anymore, using lightdm it works fine but I want ...
0
votes
1answer
65 views
Passwordless User
I am root in a system. There seems to be a passwordless user in this system I try becoming a different specific user by using "su - username", and get a "Password" prompt. No matter if I enter a ...
1
vote
1answer
96 views
Postfix using a RESTful API for authentication
Is it possible to connect Postfix to a RESTful API to validate password/username?
What I imagine an ideal scenario is if Postfix handled the LOGIN or PLAIN methods (behind TLS only, but that is ...
1
vote
0answers
40 views
Using alernative openLDAP UID to authenticate to Active Directory
I'm using Winbind to authenticate users to Active Directory. Everything is working perfectly when the usernames match. The problem is that many of the users have different usernames for Windows and ...
1
vote
1answer
47 views
Dante authenticating user
I have this VPS that has 5 external/public ip addresses and, on only one of them I want to allow user 'someuser' to login in dante:
internal: 122.231.9.3 port = 1080
external: 122.231.9.3
...
1
vote
0answers
159 views
Debian can't connect to university Wi-Fi via captive portal
Debian 8.5, NetworkManager 0.9.10.0 (stable)
Trying to connect to my university's Wi-Fi (which should be redirecting to a captive portal for authentication steps) doesn't work – clicking on the ...
2
votes
0answers
120 views
Apache group authorization with mod_lookup_identity
I need to have some users authenticated against an Active Directory database, and I'd like to use mod_authnz_pam over mod_authnz_ldap for that. The users will have access to certains folders, ...
1
vote
1answer
162 views
Open source alternative to Google authenticator app
I've set up Google authenticator as 2FA for ssh and it works great, but authenticator app for Android is not open source anymore. Is there a good real open source alternative?
2
votes
1answer
239 views
Force authentication to use sssd not nslcd
What I did was:
vim /etc/sysconfig/authconfig
USESSSDAUTH=yes
USESSSD=yes
FORCELEGACY=no
Then:
authconfig --enablesssd --enablesssdauth --enablelocauthorize --update
...
4
votes
5answers
930 views
Does ssh send the password over the network?
Basically the entire question is in the headline: Does ssh send the password over the network? Presuming of course that login via username and password is used.
I'm asking because if ssh doesn't send ...
4
votes
0answers
70 views
Can SSH public key authentication use pam_group?
I'm configuring some servers to use LDAP (via PAM) to authenticate users. Additionally, I use pam_group to add all users to some system groups like audio/video/vboxusers/....
My PAM configuration ...
0
votes
0answers
61 views
Unable to Authenticate PhPVirtualBox Remote host - Firewall off - Auth Off
I am trying to get the most very basic setup running that I can build upon for controlling a remote Virtualbox installation.
The setup :
Server A :
192.168.1.10
Oracle VM VirtualBox web service ...
1
vote
0answers
104 views
proxy authentication failed but for selected packages only
I have recently installed Ubuntu 14.0.1 version on my machine. I use a proxy server to access internet and for this I have to provide the necessary IP address of the proxy server, port number and my ...
1
vote
0answers
101 views
Encrypt directory on Linux
I need to create an encrypted directory (to be then filled with files and subdirectories) in a Linux ext4 filesystem, accessible to just one user. It should be:
visible (just the root) from the non-...
0
votes
2answers
51 views
Is there any way to impose user validation with yum?
I am trying to set up a package distribution via yum. Is there any way to restrict who can install the package from the server side (running RHEL 7.1)?
I imagine that it is possible by whitelisting ...
1
vote
0answers
148 views
postgresql auth against samba active directory
I've recently set up a new Samba4 Active Directory to handle centralized authentication for my small office network. On this server is also a postgresql-9.5 instance, and I'm trying to have it ...
3
votes
1answer
392 views
PAM failing to authenticate sudo, after successfully contacting ssh-agent
Setting up PAM sudo authentication, using ssh-agent, on 14.04.1-Ubuntu server LTS.
I'm still unable to successfully authenticate sudo, via the ssh-agent, using PAM.
Here are my relevant /var/log/...
5
votes
0answers
236 views
How to pass private ssh key via string, not a file?
I have a text of a private key file. I want to connect via ssh to other node, yet the gateway I am in does not provide me with file system access. How to pass a text representation of key and not a ...
0
votes
0answers
40 views
VNC client with possibility to specify username, and encryption keys
My KVMoIP from ADDER requires connection with username and encryption. The telnet prompt mentions RFB 4.0. None of my Linux clients can do that?
I tried vncviewer, xvnc4viewer, and vinaigre, each the ...
0
votes
0answers
80 views
Git + Nginx - Is it safe to have https auth for cloning and pushing to repo, while remove any auth from gitweb block?
I have following nginx configuration on Ubuntu 14.04 to use together with git httpd backend and gitweb to anonymous browse of repo and push/clone with authentication. Is it safe to use such or I ...
1
vote
1answer
83 views
2 Factor Authentication - ask about token only at first login
I've set up google OTP authentication and RSA key authentication on my server but it's very anoing, after some time, to type OTP from phone every time.
I would like to know if there is any possibility ...
0
votes
1answer
25 views
Add a second authentication to user log in
trap '' 2
code=`oathtool --base32 --totp "xxxxxxxxxxxx"`
echo -n Enter Code:
read -s password
echo ""
if [ "$password" == "$code" ]; then
echo "You are allowed in"
else
exit
fi
trap ...
2
votes
0answers
24 views
Might any damage have been caused when cancelling the update manager in Linux Mint during an update?
My Linux Mint Update Manager was running an update - a very big one. It was in the middle of downloading package files, and it was taking way too long and I had to stop it, so I clicked Cancel. When I ...
1
vote
2answers
159 views
“SSH Virtual Kiosk”. Does “PermitEmptyPasswords yes” work? - How to make ssh user with empty password, so random users can use it?
How to make properly secure ssh account with empty password for running trusted binary? I'd like to make a kind of "virtual ssh Kiosk" for random users, while limiting "demo app" behind ssh "pseudo-...
3
votes
2answers
430 views
WPA supplicant dropping/disconnecting NIC in hotel wifi
TL;DR
WPA Supplicant intermittently fails on my Raspberry Pi 3 when using a USB Wifi dongle. It appears to do this when "reconnecting" to or changing access points in the hotel.
WPA GUI states: "...
-2
votes
2answers
47 views
linux + ssh login took time from one server to another
I have a central Linux server (Red Hat version 6.5), and from this server I establish SSH sessions to other servers.
To one server the SSH login took around 5 seconds, while to all others
it took ...
