0
votes
1answer
321 views

LDAP userPassword only works with plaintext

I have setup openLDAP server on an ubuntu machine. I am trying to test user authentication, but am running into a problem. If, in ldap, the userPassword contains a plaintext password, authentication ...
0
votes
3answers
5k views

How to change expired LDAP user password under linux?

can somebody give an advice how to change the LDAP password already expired? I have an LDAP user and the password for this user is expired: # su user You are required to change your password ...
0
votes
1answer
118 views

LameUser trying - apache2 webserver authentication - IP range to access without pass prompt others with it

I have (maybe silly) question regarding the apache2 webserver and security - I am trying to archieve this: Users connecting from 192.168.1.24 not to be prompted for password and allowed Others asked ...
11
votes
7answers
1k views

is it okay to use random URLs instead of passwords? [closed]

Is it considered "safe" to use URL constructed from random characters like this? http://example.com/EU3uc654/Photos I'd like to put some files/picture galleries on a webserver that are only to be ...
1
vote
3answers
292 views

MySQL wants a password but it's empty

mysql -uroot ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES) mysql -uroot -p Enter password: <-- leave blank, hit enter without entering anything ...
6
votes
3answers
2k views

Managing service passwords with Puppet

I'm setting up my Bacula configuration in Puppet. One thing I want to do is ensure that each password field is different. My current thought is to hash the hostname with a secret value that would ...
0
votes
1answer
88 views

Protect by password the / and /index.php but not the other scripts

In the document root of my web server (Apache 2.2.15 on CentOS 6.0) I have an /index.php script, which I'd like to be password protected and then few helper scripts (/helper1.php, /helper2.php, ...) ...
2
votes
1answer
236 views

Password change prompt for SFTP

In our Linux server we have implemented password aging policy. On expiration SSH gives prompt for changing password on successful authentication. However SFTP doesn't give the prompt to change ...
1
vote
2answers
89 views

How can I tell what auth methods a server supports?

I'm trying to ssh to a box using a dsa key. I'm prompted for my pass-phrase, but then it defaults to using password authentication. Seems like it would do this if the first authentication failed, but ...
4
votes
1answer
621 views

Slappasswd output randomized

I was expecting slappasswd to produce a fixed hash but it appears that the output is randomized as I never get the same output for the same input password: $ slappasswd -s secret ...
2
votes
1answer
2k views

Set root password in Amazon EC2

I am trying to set the root password on Amazon EC2 (CentOS machine). When I try passwd, I get this: [root@domU-11-33-39-00-85-21 ~]# passwd Changing password for user root. passwd: Authentication ...
0
votes
1answer
2k views

Share a folder with no authentication request

i'm running Windows XP SP3 , in a workgroup. I need to share a folder on volume C: (FAT32 formatted) and i need this to be available in R/W to everybody, without asking for a login. I mean i dont want ...
0
votes
1answer
434 views

PAM cracklib vs login.defs

If there are different parameters set for minimum password length in pam_cracklib and login.defs. Which takes precedence ? Any good docs/books about PAM ?
3
votes
4answers
819 views

How can I enable both password and public key authentication with OpenSSH

I would like for sshd to verify the users' public key and then prompt for their password, rather than just one or the other. Is this possible?
3
votes
3answers
2k views

Two-Factor Authentication - SSH using Keys & Local Account Password

Is it possible and feasible to setup a linux box to first require a valid key file before prompting for the user's local account credentials? Our setup is that we have to open ssh on a machine to the ...
0
votes
1answer
1k views

Changing LDAP password without using LdapAdmin

our former sysadmin went from fulltime to 'on demand' and left me with the "task" to administer part of the local network. One of my jobs is changing users' passwords (they can't do it themselves ...
0
votes
1answer
2k views

IIS7 manager password problems after Windows administrator password change

Our network administrator recently left and, until we get another one, I'm filling in trying to keep the servers running :o I changed the administrator password for the server (Windows Server 2008), ...
2
votes
1answer
379 views

Apache avoid password protection for a single file

I want to protect an entire virtual host in Apache, but I still want to allow public access to a single file. The virtual host proxies all requests to a Tomcat server on the back end. What's the best ...
0
votes
1answer
226 views

Get Safari to use different autocompletion on different URLs on same hostname

I have a webserver publishing different services over the same SSL VirtualHost, the two most commonly used being PhpMyAdmin and Cacti. These (and others) use 'cookie' style authentication, asking user ...
2
votes
1answer
90 views

SSH authentication working unless ran from script?

I have set up my server to allow key/pair authentication by following instructions similar to what is found in this post. As far as I can tell that is working correctly. If I do the following, for ...
4
votes
4answers
3k views

ubuntu - how can I avoid typing a password on every admin action?

I just set-up ubuntu 9.10 on my computer, and I'm trying to figure out how to avoid typing a password on every action that requires sudo privileges. I just want to type a password once on login and ...
2
votes
3answers
773 views

Can sshd authenticate each incoming connection with both a key AND a password?

I want to configure sshd to require that a connection authenticate with both a key and a password. I haven't looked at using PAM or other external authentication methods yet, but my guess at the ...
4
votes
4answers
1k views

Enforce SSH key passwords?

I'm looking at removing password-based logins for SSH. However, I don't want to allow passwordless ssh keys, as that would be even worse. How can I make sure that only SSH keys which have passwords ...
2
votes
2answers
587 views

Trac and ssh password synchronization

I have a standalone server (Ubuntu 9.04) set up for a project that uses Trac (Apache, mod_python) and subversion. I create local user accounts so project members that are given commit access to the ...
1
vote
1answer
120 views

Domain password replication

We have an interesting situation. We have two domains, one, called Smith(not really, but you get the idea) which is our main office based domain against which users are authenticated on login. ...
1
vote
2answers
5k views

Open LDAP Authentication - How to verify userPassword without bind?

What I am doing... Trying to implement single-sign-on for our organization’s all machines, blogs, wiki’s, CRM, HRM, project management tools, SVN, etc, etc... We have OpenLDAP installed and ...
10
votes
7answers
25k views

Web interface to allow users to change their Active Directory password

I have a few web applications that use Active Directory to authenticate. What I would like to be able to do is provide a simple web page that would allow users to update their AD password. This ...
1
vote
6answers
9k views

Change Active Directory password over VPN

We've got a few users in a remote office that only access any of the servers through the SonicWALL Global VPN Client. Their machines are members of the Active Directory domain here, so they can ...
3
votes
5answers
1k views

disable SSH authentication on same domain, if the same user

I want to use SSH between two computers on the same domain with the same user, and I don't want to type the password. here's an example: [user@pc1 ~]$ ssh pc2 if pc1 and pc2 are on the same domain, ...