Sponsored links for this tag
Passwords have been used in computing since as early as 1961, on MIT's Compatible Time-Sharing System - one of the first multi-user machines. They are generally used in combination with a username to authenticate a user's access to various resources that are not public. For added security, passwords ...
3
votes
2answers
70 views
Are there huge drawbacks to using an excel 2010 document for password management?
At my old job, we used an open-source, (IMO) secure method for managing network infrastructure, and other important hosts' passwords [with Keepass]. At my new job however, it seems like they're using ...
1
vote
2answers
51 views
SSH on Debian: Password prompt hang
Alright so a friend is having an issue on his SSH login prompt where the username prompt responds instantly (right when you connect VIA ssh), but the password prompt (right after you enter the ...
-6
votes
1answer
172 views
How to access setup of this router? [closed]
I have this no-name router:
(that’s UIS1400 on the sticker)
It has an IP address of 192.168.1.1 and identifies itself as ISSCFG when requesting the username/password combo. How do I access setup ...
0
votes
0answers
6 views
What Are the Risks of Storing a “Personal” Email Password Password Locally? [migrated]
I sometimes use MS Outlook 2010 on my home PC to check my personal Hotmail, but I have to type my password in every time I connect. What risks would I face if I allowed MS Outlook to memorize my ...
0
votes
0answers
13 views
Which password entropy for MS-CHAPv2
I am looking at connecting in a reasonably secured way mobiles to an enterprise WiFi network.
The current solutions would be user certificates on the mobiles (they are unfortunately exportable) or ...
1
vote
0answers
24 views
How do I manually perform a password check using AIXpert?
One of the AIXpert tools is to perform a check of the root password against a dictionary (usually /etc/security/aixpert/dictionary/English). If I want to run this check manually, how would I do it?
...
0
votes
4answers
52 views
MySQL wants a password but it's empty
mysql -uroot
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)
mysql -uroot -p
Enter password: <-- leave blank, hit enter without entering anything
...
4
votes
1answer
121 views
Managing service passwords with Puppet
I'm setting up my Bacula configuration in Puppet. One thing I want to do is ensure that each password field is different. My current thought is to hash the hostname with a secret value that would ...
0
votes
0answers
23 views
openssl_digest vs hash vs hash_hmac? Difference between SALT & HMAC? [migrated]
openssl_digest vs hash vs hash_hmac
I want to use SHA512 for storing password.
Which of the above methods are best to use? Why?
What is the difference between SALT & HMAC?
I just read ...
2
votes
1answer
59 views
Expired “authentication token” for user with deleted password
The Setup:
1) The user's password was deleted with "passwd -d " command
2) The user has cron jobs running
The Problem:
Once every 30 days (default password expiration policy) the cron fails with an ...
1
vote
0answers
35 views
Tomcat 7.0.16 not accepting password for webapp
I am trying to set up Tomcat to password protect an entire webapp, but when I get the password prompt, it's not accepting the username/password I'm providing to it (just keeps prompting for the ...
0
votes
2answers
50 views
How does changing a GPG encryption key's passphrase work?
I know that I can do (edit: fixed this; I'm interested in gpg NOT openssh)
gpg --edit-key
...to change my passphrase for my key, but I'm not sure what this means.
If I'm encrypting data on box A ...
1
vote
1answer
148 views
How to migrate windows users and retain passwords?
I am moving a web application from one server to another, where users log in with Windows accounts (local server accounts, not AD). I want the migration to be as smooth as possible, but re-creating ...
2
votes
0answers
102 views
How secure is IPsec w/RSA but without XAuth username/passwords?
I'm using pfSense 2.0 and have an IPsec VPN configured (which uses the Raccoon IPsec daemon).
I'm connecting to the VPN using my iPhone (iOS 5).
However, the iPhone doesn't allowing saving of XAuth ...
7
votes
2answers
208 views
What's the best solution to manage root password of thousands servers
I'm a system administrator. In the production environment I need to manage thousands of servers. My colleagues and I uses a central manage server and distribute its public key through other servers. ...
2
votes
2answers
172 views
How does the Task Scheduler save passwords on Windows 7?
If I save a password for a scheduled task, or in a service's logon credentials, is it safe?
It seems to me that Windows saves this password encrypted somehow, but since Windows has to decipher it, so ...
4
votes
1answer
55 views
LDAP passwords encryption (userPassword attribute)
I'm trying to import passwords from an LDAP to a MySQL database. When I look at the userPassword attribute for the known password test I get this:
userPassword:: ...
0
votes
0answers
68 views
secure way to store passwords in unix
OS: Unix (variety of flavors, redhat, hp, aix)
We need to store passwords on the operating system. We have jobs that need to log into other systems and databases. We are looking for a way to store ...
0
votes
2answers
144 views
Xampp: How to change your Tomcat default user and password?
I have recently installed Xampp, and I am now learning JSP but after copying my .jsp file into the required file and starting Tomcat it won't let me access the manager without a user and password.
...
1
vote
1answer
81 views
debian: cannot change password
As the root user, I can change the password:
hussie:/home/claudiu# passwd
Enter new password:
Retype new password:
passwd: password updated successfully
As a non-root user I cannot:
...
-1
votes
1answer
46 views
how to remove password from pdf documents? [closed]
I recently bought membership to a online course. It has hundreds of PDFs, and each PDF has a password, a DIFFERENT password at that. It is too late to get a refund, and I plan to use that knowledge ...
2
votes
4answers
136 views
Can I change a user password in Linux from the command line with no interactivity?
I have a specific use case where I would really like to be able to change a user's password with a single command with no interactivity. This is being done in a safe fashion (over SSH, and on a system ...
0
votes
2answers
52 views
Registered password filter on Windows 2008 never fires
I've written a custom password filter for Windows Domain Controllers (a passfilt.dll) and registered it according to the instructions (put it in the system32 folder and updated the registry key)
But ...
0
votes
1answer
38 views
Openldap ppolicy, how to unlock account?
I have enabled OpenLDAP password policy overlay and account lockout is now working fine. On 5 authentication failures the account is getting locked out. On resetting the password the account becomes ...
0
votes
1answer
49 views
password protect apache vhost + reverse proxy
I wish to create a password protected vhost for selected clients (clients.mysite.com)
We have a windows reverse proxy with some vhosts (www, static, secure). I am not using htaccess files as this is ...
6
votes
6answers
189 views
Back up and restore Active Directory password per user
For administrative purposes, I sometimes need to log in as another user to diagnose a problem with their account. I'd like to be able to do this without having to change their password so I don't ...
1
vote
1answer
46 views
SSL certificates with password encrypted key at hosting provider
We are a software company and offer hosting to our clients. We have a VPS at a large Dutch datacenter. For some of the applications, we need an SSL certificate which we'd like to encrypt with a ...
-1
votes
4answers
60 views
File and Database encryption
Just curious what do you guys use for file or database encryption? Any good programs out there or techniques employed for securing IT personal information? Main reason is the company I work for has ...
0
votes
2answers
125 views
sshpass not work is ther an alternative?
I use a small programm = sshpass
to use ssh in a script to execute commands on linux routers
Is there a alternative to sshpass
because sshpass works at the moment not correctly (Bugs) - ...
1
vote
2answers
72 views
apache users linux
I'm working with Apache on an ec2 box. I'm trying to generate keys for a user, apache on the system.
However, I don't have permission, because it's ec2. So, I sudo - and get asked for a password for ...
2
votes
1answer
121 views
How to exclude a user from an applied password policy
I have received a requirement that a single user needs to be excluded from the company's password policy (the CEO if you ask).
as such, I have tried the following with no success.
I have copied the ...
1
vote
1answer
49 views
How does VisualSVN store passwords?
We are running a VisualSVN Server that needs ~300 users to be created. As the need to mass create users is likely to reoccur, I'd prefer not to task someone with data entry for account creation. I've ...
-1
votes
1answer
50 views
Create a temporary password Windows Server 2008
How do you create a password in Windows Sever 2008 that forces the user to change said password on login? I'm creating the accounts for our team and would like people to change from the random ...
1
vote
1answer
100 views
How to safely store proxy passwords in system-wide linux config files?
I'm working on a VM in a university environment, where several other users also have root access. Take a config file like /etc/rhsm/rhsm.conf:
proxy_hostname =
proxy_port =
proxy_user =
...
1
vote
1answer
26 views
Exchange 2007, expired passwords and mail forwarding
We have a handful of users that require a company email address and have all emails forwarded to an external address; usually they are third-party contractors and only need email.
Since these users ...
-1
votes
1answer
45 views
Resetting pst password on a system that is using Symantic Endpoint Protection
I work for a company that employs Symantec Endpoint Protection. I have a user that has forgotten the password to their pst file. I've tried running a few password reset programs but Symantec treats ...
93
votes
4answers
2k views
Is my password compromised because I forgot to hit Enter after ssh username?
I've just tried logging into a Fedora (release 13 Goddard) server using SSH (PuTTY, Windows). For some reason the Enter after typing my username didn't go through and I typed in my password and hit ...
0
votes
1answer
84 views
Install mysql-server and set password from the command line?
I am installing MySQL via the command line: sudo apt-get install mysql-server. During the installation process, it prompts me for a root password.
How can I specify the MySQL password without having ...
0
votes
3answers
71 views
Using admin credentials to log on as a user vs. storing passwords
Our office uses a Windows Domain with Active Directory to manage user access to machines and network resources. The IT staff maintains a record of everyone user's password, which is used mainly for ...
1
vote
1answer
93 views
PHP Script for end user to change Samba password
I'm looking for a PHP script that helps users change their own Samba password on a server. Basically just an interface to smbpasswd. The user would ideally enter their samba username, current password ...
2
votes
1answer
111 views
Active Directory GPO for Password Policy Not Applying from Default Domain Policy
Ok. I have implemented a Password Policy. I know from previous posts that it cannot be applied from within an OU so I have configured it from the Default Domain Policy. I run RSOP.msc from a client ...
2
votes
2answers
87 views
How can i easily password protect a site in Apache/Windows?
I have a website i'm hosting in Apache (on Windows), and i'd like to protect it so that anyone going in needs to enter a password. This is not meant to be a fortress of security, I know this sucks, ...
1
vote
1answer
35 views
Apache/htaccess - password protect a site by domain name
Is it posible to protect a website if the site was called by a given domain name?
e.g.
www.domain.com -> no password protection
www.domain.net -> password protection
Both of the URLs are routed ...
1
vote
1answer
90 views
Why warn users weeks before their passwords expire? [closed]
At my workplace (and I am told many others), several password-requiring systems warn users every day during the two week period before their passwords expire. The warning consists of a dialog box that ...
0
votes
2answers
325 views
Change an Active Directory password in C#
At first, please forgive my English, it is not my mother tongue.
Then, here is my problem: I'm working on a web platform that manage the Active Directory. I can create, delete, edit a group, user, ...
2
votes
3answers
567 views
How to pass password to scp command used in bash script?
I have a bash script that makes dump of DB then copies file from one server to another but it always asks for password before connection.
scp file.tar.gz root@xxx.xxx.xxx.194:/backup
Is there a way ...
3
votes
1answer
43 views
Services Accounts
We have a service account that is a member of the domain admins group. This is something that makes me exceptionally uncomfortable.
I am looking to change this as soon as possible but am fairly new ...
0
votes
1answer
73 views
Change cadmin's password
I dont get something and I need your help. I have some machines under active directory on an SBS 2008. When I install a program a prompot appears to insert administrator credentials. The username I ...
-1
votes
4answers
108 views
Active Directory; list of users previous passwords? [closed]
I know that some other companies are able to intercept their users passwords when they log on to the network. I also know that these companies create a giant database of passwords that cannot be used ...
0
votes
2answers
85 views
Restore a saved Remote-Desktop Password?
Some fool in my company has scrapped the page with the root password for our hyper-v server.
Fortunately I've saved the password in the Remote Desktop Connection, so I'm able to connect remotely. How ...
