A password is a collection of characters that is used, usually in conjunction with a username, as a means of authentication.

learn more… | top users | synonyms (1)

2
votes
1answer
45 views

How to disable user's password via puppet securely?

I have my SSH servers setup to use only Public Key authentication with password authentication disabled. When adding users through puppet I would like to disable user passwords. So far I have came ...
1
vote
1answer
26 views

SFTP password wrong from remote, but not from local

From my server, connecting to it via eth0 (not localhost), I can connect via SFTP: Apr 9 10:02:40 domain sshd[11526]: Accepted password for test from 1.x.x.x port 45335 ssh2 From a remote ...
-1
votes
1answer
29 views

Storing unencrypted web app / WordPress passwords - explain to a client

I have a problem with a client who is complaining about a WordPress installation having an unencrypted MySQL database password in the wp-config.php file. I've tried explaining this to him by stating ...
-1
votes
1answer
26 views

Changing password in OpenVAS command line

I've been trying to find the right OAP command for changing the password for OpenVAS users. It is possible to change it the Greenbone Security Assistent interface. But i can't find it for doing it ...
0
votes
0answers
12 views

MySQL/MariaDB CLI limits max password? [migrated]

I've got strange problem - my MariaDB instance CLI (Linux) does enforce limit on how long password can be. For example, setting password like this UPDATE mysql.user SET ...
1
vote
0answers
24 views

Passwordless public key is not working

this is my fist help ask here despite being a daily reader in order to learn. I am working on a Unix environment (both Solaris and Aix servers) and my public key suddenly stopped working after ...
4
votes
1answer
31 views

pam_cracklib: preventing users from using passwords that contain common words

We would like to prevent users from using words such as the organisation name or their username as part of the password. The default behaviour of pam_cracklib when given a dictionary seems to be to ...
4
votes
2answers
51 views

Best practices for updating passwords on a large number of machines running Windows Server 2012?

I'm going through the process of updating passwords on a dozen or so machines running Windows Server 2012 over RDP from an Apple keyboard. I can't press CTRL ALT DEL or CTRL ALT END because those ...
39
votes
6answers
3k views

Is it OK to set up passwordless `sudo` on a cloud server?

Sorry if the question is vague but I don't know a better way to ask and I didn't see the caveats/tradeoffs of the approach discussed here. I love the idea of accessing servers via keys, so that I ...
2
votes
1answer
297 views

When does password expire when unchecking “Password never expires”

On a Windows Server 2008 R2 AD, if you uncheck the account option "Password never expires" on a User Account, does the password expire instantly, or does it get set to the period defined in the ...
5
votes
1answer
97 views

Combination of SSH key auth, and two-factor authentication

I was wondering if it is possible to accomplish the following, all at the same time: Disable root logins Enable SSH login for personal user, only via SSH keys Enable SSH login for unprivileged user, ...
1
vote
1answer
42 views

Password change reminder Ubuntu

I have an encrypted hard drive on my Linux box. When it was ready for me to change my password because of the 60 day expiration I ran into a problem. I changed the password and once I shutdown my ...
0
votes
0answers
30 views

Where does ISPConfig store the MySQL credentials?

I need to know where ISPConfig keeps the rest of its MySQL credentials So, we reset the root MySQL password, and ever since, whenever I try to install wordpress via ISPConfig , it gives me ...
0
votes
2answers
60 views

What is the purpose of openssl passwd

I'm reading "Reliably Deploying Rails Applications" Regarding defining users to be set up by Chef, it says: “Next we need to define users, inside data_bags/users copy the file deploy.json.example to ...
3
votes
3answers
75 views

john the ripper to evaluate relative password strength

I was wondering whether JtR is a good solution to test password strength. I'm not interested in actually finding the passwords (I'd rather not in fact), what I'd like is to run JtR in a way which ...
2
votes
2answers
60 views

AD LDAP No Password Required

I've got a question about AD accounts that have the setting PASSWD_NOTREQD enabled on them. What exactly does this setting do? From my own research, it appears that this will cause the account to ...
7
votes
2answers
209 views

How can a standard Windows user change their password from the command line?

On Windows Server 2008 R2, I have a standard (non-administrator) local user (not an Active Directory account, though the server is in a domain) who has access to the server only via PowerShell ...
0
votes
2answers
35 views

No password for account when using SSH on server?

Our Server has disabled password-based ssh login and only works with publickey. When I add new users with adduser, it prompts for a password however and I cannot leave it empty. When I generate a ...
0
votes
2answers
91 views

Does openldap support pbkdf2 hash algorithm?

Since pbkdf2 (Password-Based Key Derivation Function 2) is a more secure hash function, so I wonder if current openldap implementation support pbkdf2 (pbkdf2_sha256 for example)? I have found some ...
0
votes
2answers
35 views

Should I set the password when creating new user using useradd command?

I know that when creating a new user by useradd, I could set his password by -p option, but it seems insecure, then what the right way to create a user and set his password? I do this in two steps: ...
0
votes
1answer
49 views

Where does server store the users random salt for password

In order to make passwords more secure , a random salt is added to the password before harshing occurs . I am assuming the salt is stored on the server in an associative array [username:salt] and ...
0
votes
0answers
63 views

Pam password policy not working for root

I was following this guide (http://xmodulo.com/2013/12/set-password-policy-linux.html) for setting up pam and password for policy for CentOS. Everything works great except the root or any user's ...
1
vote
1answer
50 views

recovering from a plaintext password in usermod -p

My small office's server was under attack yesterday and today and apparently the hacker gained access through a weak password (i.e. I am to blame entirely). The moment I noticed this, I fysically ...
1
vote
0answers
45 views

How can I prompt Mac clients connecting to RDS/Terminal Services to change password at first login?

This is my first implementation of Remote Desktop Services/Terminal Services; we are using it as a solution for Mac clients that need to run a piece of new Windows-only software. My question is about ...
1
vote
2answers
79 views

Logging in as another user in Windows without resetting their password?

If you own the administrator account on Windows Domain, is there a way of logging into a user account without resetting the password? We have users that log in remotely, and I need to work on their ...
-3
votes
1answer
31 views

How to recover public key password? [closed]

I created a new instance of a server on my VPS provider and when I was doing the initial server setup it prompted me for a password, which I don't remember. Is there anything I can do in this ...
0
votes
0answers
24 views

No login to ftp allowed [duplicate]

I recently installed VSFTPD on my os ( kali linux ), and I set up file vsftp.chroot_list with one line in it, which is root. As my root's password is toor, I opened ftp: ftp> open (to) ...
-2
votes
1answer
64 views

Rsync and ssh script

I really dont need ssh keys. The server has good security implemented. I need the script to input the password without user usage/interaction. How can I make this? Its CentOS release 6.5 (Final) ...
0
votes
2answers
249 views

Allow linux root user mysql root access without password

On cPanel when I am logged in as root and type "mysql" without hostname and password it gives me direct access to mysql root user. I would like to do this for one of my non-cpanel server where the ...
4
votes
1answer
89 views

Safely providing passwords to a linux daemon

I have a linux daemon that accesses some services (db etc). It needs some passwords for this. What would be the best way to give the passwords to the daemon in a secure manner? I currently store the ...
-1
votes
1answer
25 views

Forgot MySQL password

Today I realized that I forgot the MySQL password, or that somebody else changed it (I doubt it). Is there any possibility that I can get the root password? I have access to all the machine (as it's ...
-2
votes
1answer
19 views

EC2 Password expire dont have previous password

Our server guys setup a password expire policy but never set a password for the default user now the password has expired but I am unable to change it as it asks for the current password which we dont ...
0
votes
2answers
68 views

Active Directory Self Service Password Reset

I have a large group of AD users and I need to provide them with a method for changing their own password in case they forget them. I am looking a third party self password reset application to enable ...
1
vote
2answers
192 views

Open Directory Password Location and Encryption Method

Background: I would like to use Google Apps Directory Sync (GADS) to synchronize user accounts and passwords from a Mac OS X Server (10.9) running Open Directory. GADS is installed on a Ubuntu 12.04 ...
7
votes
1answer
193 views

Does the password truly expire?

One can enable password expiration (aka password maximum age) on a Windows domain. I'm a little puzzled though about the meaning of that so-called expiration: It looks like the password does not ...
3
votes
4answers
109 views

Our server hosting provider asked for our root password

I work at a company that develops and hosts a small business critical system. We have an "Elastic cloud server" from a professional hosting provider. I recently got an email from them saying that ...
3
votes
2answers
97 views

Active Directory - How to find what machine applied a GPO

I've got a GPO that is configured to change the local builtin Administrator's password on certain machines. I need to find what machines have applied this GPO to themselves. I've written a script that ...
0
votes
1answer
61 views

ssh accepts any password [duplicate]

I'm recovering a server from getting hacked and there is one thing I can't fix: When I ssh (or scp) to the server, no matter what password I give, it lets me log in. I don't know much about the ssh ...
0
votes
2answers
59 views

Required strength for Admin/Windows passwords [closed]

We're trying to come up with a policy for required password-strength for Windows passwords on our domain. I was leaning towards a 10 character minimum with special characters and uppercase. We have a ...
0
votes
1answer
81 views

How can you recover a different admin account password when the default Administrator account is disabled?

If I were to create a admin domain account on a remote Windows Small Business Server (SBS), copy all permissions from the current [default] Administrator account, and then disable the [default] ...
1
vote
0answers
197 views

Windows - user must change password on next logon: “current password” and “new password” boxes do not appear

I have a SBS2011 domain and Windows 7 laptops. I created a user on the domain, set a temporary password and ticked the box to force the user to change password at next logon. Sit at the user's desk ...
-1
votes
2answers
32 views

How do I change a third party service password without stopping my service that depends on that service?

Here's my scenario: I have a service that has to run 24/7 and depends on a third party service that has a password. I need to have that password changed. If I blindly change the password my service ...
0
votes
1answer
441 views

PowerVault MD3000 Password Reset Console Password

I need to reset the password on a Dell PowerVault MD3000. I have the necessary password reset cable and am able to get to the point where I am prompted for the "password from Dell Technical Support" ...
0
votes
0answers
32 views

Can somebody read the challenge password value from client.key, if he get my client.key file?

Can somebody read the challenge password value from client.key if he get my client.key file? This is about easy-rsa, it comes with OpenVPN
0
votes
3answers
87 views

SSH login with Key not working

I followed a guide for password-less login: # Generate Key ssh-keygen #Append Key cat ~/.ssh/id_rsa.pub | ssh user@remotehost 'cat >> ~/.ssh/authorized_keys' #login ssh user@remotehost.com ...
0
votes
2answers
80 views

MySQL without password prompt?

I have a MySQL server with the MySQL root password is an empty string. If I try to connect to MySQL without a password, I am denied. Like this: # mysql ERROR 1045 (28000): Access denied for user ...
0
votes
0answers
55 views

In Windows, how to emulate passing encrypted password into /etc/shadow file to change local user's password?

Trying to automate updating a local account's password on a windows 2008R2 host. On my RH boxes, I can generate password as an encrypted MD5 string and just shove it into the /etc/shadow file. I can ...
0
votes
0answers
30 views

How do change the default JMS broker password in OpenMQ

For security reasons, I need to change the default password of a OpenMQ JMS broker. The broker is running in a Glassfish cluster so I can't use the imqusermgr command line tool. I haven't found any ...
1
vote
0answers
52 views

AuthType Digest Realm Password White Space Issue

I have an issue where I am trying to set a test directory to authenticate using the AuthType Digest. I have been able to successfully complete this but only when the AuthName of .htaccess is one ...
0
votes
0answers
41 views

Findout password after connecting with WPS ?

I have a Cisco router and generated random password for it. I have connected my android mobile with WPS switch. is there any way to find out the password ?