-1
votes
1answer
47 views

establish passwordless login without asking the user [duplicate]

On Linux when using dsa keys I establish passwordless login with the command ssh-copy-id -i .ssh/id_dsa.pub user@target.host This prompts the user for user's password on target.host. My script ...
2
votes
2answers
108 views

Is it wise to use very secure password for sudo users when using SSH Keys for server login?

I am not asking how to do anything here, rather trying to understand best practices and the "right" way to handle server security. To prevent brute force password attacks, I have secured my server in ...
9
votes
5answers
2k views

In a large Linux only network how would you handle Authentication and User management?

After working with linux for years in small networks, I've started in a company that maintains large windows networks. I know you can cobble a linux host onto an Active Directory network but is there ...
1
vote
1answer
317 views

Why is a linux account not accepting old password after changing password expiration to “never” using chage?

CentOS 5.x I have an old user account that had a password policy in effect that expired. [foo@foobox ~]# chage -l foouser Minimum: 0 Maximum: 90 Warning: 5 Inactive: 5 ...
1
vote
3answers
201 views

Your thoughts on managing passwords in a corporate server environment

Good evening, I'm thinking about implementing some way to manage passwords for our Linux/Windows servers based solely on security concerns and an ever growing number of servers. How do you do it? ...
7
votes
4answers
1k views

Reset user's password without root

Is there any way to allow non-root users to change other user's password. Specifically, is there a way to grant help desk employees the ability to do password resets. The help desk already can reset ...
3
votes
2answers
259 views

Centrally managing logins to lots of linux machines

We have a growing collection of servers, both physical and virtual, which we need to login into. Login is usually with SSH, using an RSA key pair rather than a password (which is switched off in SSH ...
0
votes
1answer
2k views

How to configure password maximum days before it expires?

I want to set Maximum days of a password can be used. So I configure PASS_MAX_DAYS in /etc/login.defs, and PASS_WARN_AGE to warn user before the password expired. In my example, I set PASS_MAX_DAYS = ...
1
vote
1answer
640 views

Password lifetimes, length, complexity and history. Is there something to help?

I need to implement some better control for passwords on a our slackware servers. I have always manually done this but the need for some automation routines to handle a lifetime check, length, ...