A password is a collection of characters that is used, usually in conjunction with a username, as a means of authentication.

learn more… | top users | synonyms (1)

6
votes
2answers
366 views

Logins take a long time

After upgrading to Debian 7.4 password authentication from any service take a long time. This is true for SSH logins, sudo'ing and authentication with dovecot (which is configured to use PAM). I am ...
0
votes
1answer
2k views

Ubuntu 12.04 LTS: Changing Mysql root Password [duplicate]

I did an upgrade from 10.04 to 12.04 today. I wanted to access MySQL afterwards, but I've forgot the root password... So I tried some guides from the net but none is working for me. Im not even sure ...
1
vote
1answer
1k views

OpenLDAP to Samba 4 Migration, create middle layer / webservice for user initiated password migration/change?

for the last few days I have been looking into migrating an old linux server running a OpenLDAP/Samba 3 configuration with about 100 users to a new SBS Server running Samba 4 (like Zentyal or UCS). ...
3
votes
1answer
118 views

The ipmitool conundrum

We have been trying to migrate to a better password management system on our server. The problem was that all this days we were using a proprietary algorithm to create a hash (a decryptable hash). In ...
4
votes
1answer
512 views

Changing password expiration policy at next password change

We have a password policy with a maximum password age of 180 days. For various reasons we need to change it to 90 days, with a minimum impact for the users. Our users are normally warned about the ...
0
votes
1answer
128 views

Password reset is not working

I am using krb5 authentication to authenticate users in my machine. I am trying to change my password using passwd command but it failed. ~:$ passwd ~:$ Changing Password for bharathi ~:$ Kerberos 5 ...
2
votes
0answers
126 views

Restrict access to a subdomain with web.config on IIS7?

I need to password protect a "dev" subdomain on a server with the web.config file on IIS7. I don't have access to anything besides the files and web.config, so I can't install modules or anything else ...
6
votes
1answer
6k views

How to check if my Supermicro IPMI is compromised with plaintext admin password over the web?

I've some Supermicro servers with IPMI running, and as described in this blog (http://blog.cari.net/carisirt-yet-another-bmc-vulnerability-and-some-added-extras) there's a critical vulnerability to ...
1
vote
1answer
656 views

Puppet random password generating

I am going to install around 100 mysql servers and I would like to have different root password on every of them. I am going to use puppet mysql (https://forge.puppetlabs.com/puppetlabs/mysql) which ...
0
votes
1answer
478 views

Encrypted Passwords on Exim Mailserver (Vestacp)

I just setup an Ubuntu 14.04 Server with VestaCp and want to secure the Mailserver. I already enabled ssl for exim and dovecot. The only thing I'm still fighting with is exim to accept encrypted ...
0
votes
1answer
370 views

I changed mysql root password and I cant access It. password contained some chars

using this command I changed root password mysqladmin -u root password fg$pkh@567fghu And now I cant access mysql. Is this because mysql parse the chars other than what I expect? Also I ...
2
votes
2answers
1k views

Configuring sudo to not prompt for password on non-allowed commands

There is plenty of information on how to make sudo not prompt for passwords (NOPASSWD). Let's say I have user alice, and this line in my sudoers: alice ALL=(root) NOPASSWD: /bin/myadmintool This ...
0
votes
1answer
610 views

ProFTPd mod_sftp mod_sftp_sql

I am working on Ubuntu 12.04 I have setup a ProFTPd service with SSL/TLS, virtual users stored in a MySQL database and quota (mod_tls, mod_sql, mod_sql_mysql, mod_quotatab, mod_quotatab_sql). It works ...
-1
votes
1answer
5k views

why cannot I type password in putty? [closed]

When I open a session in putty to connect to the server, the console asks: login as: so I type root or another username then the console ask username@ip.ip.ip.ip's password: From here I can't type ...
1
vote
2answers
3k views

Password Changes and Exchange Activesync AD lockouts

Not sure how others are doing this but the main issue we are having arises when a user changes their password on a PC. When they change it the ActiveSync on the phone does not update automatically. It ...
2
votes
1answer
4k views

SSH is not working .. Password promt is not coming

I am not able to SSH into my ubuntu server since yesterday. I am not using any keyless or public key method.. Its simple SSH with username and password everytime.. However I can do a VNC session ...
0
votes
3answers
460 views

MySQL - Does the change in MySQL master db password affect on slave db?

I want to change the MySQL DB password on the master db. My question is: do we have to care for the slave DB when changing the master database password?
3
votes
1answer
7k views

How can I trace the source of repeated account lockout against Exchange server?

I have an AD user account that is being repeatedly and frequently locked out, I have been able to trace the lockout to the Exchange server CAS array. However I am at a loss as to how to continue the ...
1
vote
2answers
2k views

VMware ESXi 5.5 : cannot login after password changed

It looks strange, but after changing the "root" password I cannot login anymore. I followed exactly the process according to Vsphere 5.5 reset root and I used copy-and-paste for the password but ...
1
vote
2answers
3k views

scp using a password on the command line

I am trying to write a script that will deploy a build created on my desktop machine (windows/cygwin) to a machine in my test environment (linux). I would like to use scp to copy the build to the ...
0
votes
1answer
588 views

Password Rules histsize Ineffective for Some Users

We're trying to deploy a tightened password policy on an AIX 5.3: Users are not allowed to reused last 24 passwords. So, I change histsize from the previous value from 5 to 24 in /etc/security/user, ...
2
votes
1answer
457 views

IIS Basic Authentication only protects directories, not individual files?

I really hope this isn't a duplicate, but I wasn't able to find anything like this on here. My issue is: I have a subdirectory on a Windows (not sure if 2008 R2 or 2012) server with IIS 8.5 that I ...
2
votes
1answer
382 views

How to recover root password?

I have a FreeBSD box which I forgot the root password to. I do have physical access, so I can reboot the box if I need to. How do I reset my password?
1
vote
4answers
107 views

Is it risky to disable SSH passwords? [closed]

This is a very basic question, do bear with me.. I'm setting up a VPS and it seems as though disabling SSH users from logging in with a password is recommended for security. If I authorize the SSH ...
0
votes
1answer
2k views

CentOS PAM unable to open /etc/pam.d/system-auth

In gdm I have checked "Require smartcard login" but forgot about adding any smartcard for authentication. Then I've tried to boot from LiveCD and disable SC auth. Something went wrong and now I am not ...
3
votes
1answer
534 views

How to deal with passwords during automated deployment? [closed]

As responsible admins we know of common weaknesses like CWE-260: Password in Configuration File http://cwe.mitre.org/data/definitions/260.html CWE-522: Insufficiently Protected Credentials ...
30
votes
9answers
13k views

How to hide a password passed as command line argument?

I'm running a software daemon that requires for certain actions to enter a passphrase to unlock some features which looks for example like that: $ darkcoind masternode start <mypassphrase> ...
-1
votes
1answer
45 views

Reduce unwanted “connect to network” attempts with wireless password [closed]

My university recently added a 5-digit (WEP) network password to their wireless network. (This is in addition to a login page that requires university credentials.) I emailed them, and they said the ...
-2
votes
3answers
8k views

proftpd gives 'login incorrect' error

I have had proftpd installed for a while now but since today I can not sign into the ftp server. I keep getting the error 530 login incorrect. I restarted proftpd in debug mode and got the below ...
-1
votes
2answers
85 views

Security in users having sudo access

How to protect my passwords list (in different databases for example) in a UNIX environment where most of the users have sudo access to other user IDs? I have a script (main.sh) with the following ...
1
vote
2answers
229 views

Force domain password change in the future?

I want to force all my domain users to change their passwords, but I want it to happen on a specific day in the future. Is there a way I can automate that today, either using a GPO or PowerShell ...
4
votes
1answer
18k views

How to disable user's password via puppet securely?

I have my SSH servers setup to use only Public Key authentication with password authentication disabled. When adding users through puppet I would like to disable user passwords. So far I have came ...
1
vote
1answer
238 views

SFTP password wrong from remote, but not from local

From my server, connecting to it via eth0 (not localhost), I can connect via SFTP: Apr 9 10:02:40 domain sshd[11526]: Accepted password for test from 1.x.x.x port 45335 ssh2 From a remote ...
-1
votes
1answer
72 views

Storing unencrypted web app / WordPress passwords - explain to a client

I have a problem with a client who is complaining about a WordPress installation having an unencrypted MySQL database password in the wp-config.php file. I've tried explaining this to him by stating ...
0
votes
1answer
795 views

Changing password in OpenVAS command line

I've been trying to find the right OAP command for changing the password for OpenVAS users. It is possible to change it the Greenbone Security Assistent interface. But i can't find it for doing it ...
1
vote
0answers
141 views

Passwordless public key is not working

this is my fist help ask here despite being a daily reader in order to learn. I am working on a Unix environment (both Solaris and Aix servers) and my public key suddenly stopped working after ...
4
votes
1answer
457 views

pam_cracklib: preventing users from using passwords that contain common words

We would like to prevent users from using words such as the organisation name or their username as part of the password. The default behaviour of pam_cracklib when given a dictionary seems to be to ...
4
votes
2answers
150 views

Best practices for updating passwords on a large number of machines running Windows Server 2012?

I'm going through the process of updating passwords on a dozen or so machines running Windows Server 2012 over RDP from an Apple keyboard. I can't press CTRL ALT DEL or CTRL ALT END because those ...
49
votes
8answers
5k views

Is it OK to set up passwordless `sudo` on a cloud server?

I love the idea of accessing servers via keys, so that I don't have to type in my password every time I ssh into a box, I even lock my user's (not root) password (passwd -l username) so it's ...
3
votes
1answer
3k views

When does password expire when unchecking “Password never expires”

On a Windows Server 2008 R2 AD, if you uncheck the account option "Password never expires" on a User Account, does the password expire instantly, or does it get set to the period defined in the ...
5
votes
1answer
928 views

Combination of SSH key auth, and two-factor authentication

I was wondering if it is possible to accomplish the following, all at the same time: Disable root logins Enable SSH login for personal user, only via SSH keys Enable SSH login for unprivileged user, ...
1
vote
1answer
88 views

Password change reminder Ubuntu

I have an encrypted hard drive on my Linux box. When it was ready for me to change my password because of the 60 day expiration I ran into a problem. I changed the password and once I shutdown my ...
2
votes
2answers
3k views

What is the purpose of openssl passwd

I'm reading "Reliably Deploying Rails Applications" Regarding defining users to be set up by Chef, it says: “Next we need to define users, inside data_bags/users copy the file deploy.json.example to ...
3
votes
3answers
285 views

john the ripper to evaluate relative password strength

I was wondering whether JtR is a good solution to test password strength. I'm not interested in actually finding the passwords (I'd rather not in fact), what I'd like is to run JtR in a way which ...
2
votes
1answer
3k views

AD LDAP No Password Required

I've got a question about AD accounts that have the setting PASSWD_NOTREQD enabled on them. What exactly does this setting do? From my own research, it appears that this will cause the account to ...
14
votes
2answers
8k views

How can a standard Windows user change their password from the command line?

On Windows Server 2008 R2, I have a standard (non-administrator) local user (not an Active Directory account, though the server is in a domain) who has access to the server only via PowerShell ...
1
vote
2answers
45 views

No password for account when using SSH on server?

Our Server has disabled password-based ssh login and only works with publickey. When I add new users with adduser, it prompts for a password however and I cannot leave it empty. When I generate a ...
0
votes
2answers
780 views

Does openldap support pbkdf2 hash algorithm?

Since pbkdf2 (Password-Based Key Derivation Function 2) is a more secure hash function, so I wonder if current openldap implementation support pbkdf2 (pbkdf2_sha256 for example)? I have found some ...
0
votes
2answers
178 views

Should I set the password when creating new user using useradd command?

I know that when creating a new user by useradd, I could set his password by -p option, but it seems insecure, then what the right way to create a user and set his password? I do this in two steps: ...
0
votes
1answer
99 views

Where does server store the users random salt for password

In order to make passwords more secure , a random salt is added to the password before harshing occurs . I am assuming the salt is stored on the server in an associative array [username:salt] and ...