A password is a collection of characters that is used, usually in conjunction with a username, as a means of authentication.

learn more… | top users | synonyms (1)

3
votes
2answers
321 views

Changing Windows password policy [closed]

We currently have the almost defacto standard of requiring complex passwords on our Windows AD domain. But this XKCD cartoon caught my eye a few months ago when it came up on Coding Horror (I think): ...
1
vote
3answers
196 views

Your thoughts on managing passwords in a corporate server environment

Good evening, I'm thinking about implementing some way to manage passwords for our Linux/Windows servers based solely on security concerns and an ever growing number of servers. How do you do it? ...
5
votes
2answers
2k views

Are there huge drawbacks to using an excel 2010 document for password management?

At my old job, we used an open-source, (IMO) secure method for managing network infrastructure, and other important hosts' passwords [with Keepass]. At my new job however, it seems like they're using ...
1
vote
2answers
1k views

SSH on Debian: Password prompt hang

Alright so a friend is having an issue on his SSH login prompt where the username prompt responds instantly (right when you connect VIA ssh), but the password prompt (right after you enter the ...
1
vote
1answer
156 views

Which password entropy for MS-CHAPv2

I am looking at connecting in a reasonably secured way mobiles to an enterprise WiFi network. The current solutions would be user certificates on the mobiles (they are unfortunately exportable) or ...
1
vote
0answers
96 views

How do I manually perform a password check using AIXpert?

One of the AIXpert tools is to perform a check of the root password against a dictionary (usually /etc/security/aixpert/dictionary/English). If I want to run this check manually, how would I do it? ...
1
vote
4answers
276 views

MySQL wants a password but it's empty

mysql -uroot ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES) mysql -uroot -p Enter password: <-- leave blank, hit enter without entering anything ...
6
votes
3answers
2k views

Managing service passwords with Puppet

I'm setting up my Bacula configuration in Puppet. One thing I want to do is ensure that each password field is different. My current thought is to hash the hostname with a secret value that would ...
5
votes
1answer
1k views

Expired “authentication token” for user with deleted password

The Setup: 1) The user's password was deleted with "passwd -d " command 2) The user has cron jobs running The Problem: Once every 30 days (default password expiration policy) the cron fails with an ...
1
vote
0answers
355 views

Tomcat 7.0.16 not accepting password for webapp

I am trying to set up Tomcat to password protect an entire webapp, but when I get the password prompt, it's not accepting the username/password I'm providing to it (just keeps prompting for the ...
2
votes
2answers
1k views

How does changing a GPG encryption key's passphrase work?

I know that I can do (edit: fixed this; I'm interested in gpg NOT openssh) gpg --edit-key ...to change my passphrase for my key, but I'm not sure what this means. If I'm encrypting data on box A ...
2
votes
3answers
6k views

How to migrate windows users and retain passwords?

I am moving a web application from one server to another, where users log in with Windows accounts (local server accounts, not AD). I want the migration to be as smooth as possible, but re-creating ...
2
votes
1answer
881 views

How secure is IPsec w/RSA but without XAuth username/passwords?

I'm using pfSense 2.0 and have an IPsec VPN configured (which uses the Raccoon IPsec daemon). I'm connecting to the VPN using my iPhone (iOS 5). However, the iPhone doesn't allowing saving of XAuth ...
9
votes
2answers
1k views

What's the best solution to manage root password of thousands servers

I'm a system administrator. In the production environment I need to manage thousands of servers. My colleagues and I uses a central manage server and distribute its public key through other servers. ...
2
votes
2answers
4k views

How does the Task Scheduler save passwords on Windows 7?

If I save a password for a scheduled task, or in a service's logon credentials, is it safe? It seems to me that Windows saves this password encrypted somehow, but since Windows has to decipher it, so ...
4
votes
1answer
625 views

LDAP passwords encryption (userPassword attribute)

I'm trying to import passwords from an LDAP to a MySQL database. When I look at the userPassword attribute for the known password test I get this: userPassword:: ...
0
votes
3answers
6k views

Xampp: How to change your Tomcat default user and password?

I have recently installed Xampp, and I am now learning JSP but after copying my .jsp file into the required file and starting Tomcat it won't let me access the manager without a user and password. ...
2
votes
2answers
3k views

debian: cannot change password

As the root user, I can change the password: hussie:/home/claudiu# passwd Enter new password: Retype new password: passwd: password updated successfully As a non-root user I cannot: ...
-1
votes
1answer
84 views

how to remove password from pdf documents? [closed]

I recently bought membership to a online course. It has hundreds of PDFs, and each PDF has a password, a DIFFERENT password at that. It is too late to get a refund, and I plan to use that knowledge ...
3
votes
4answers
2k views

Can I change a user password in Linux from the command line with no interactivity?

I have a specific use case where I would really like to be able to change a user's password with a single command with no interactivity. This is being done in a safe fashion (over SSH, and on a system ...
3
votes
3answers
1k views

Registered password filter on Windows 2008 never fires

I've written a custom password filter for Windows Domain Controllers (a passfilt.dll) and registered it according to the instructions (put it in the system32 folder and updated the registry key) But ...
1
vote
1answer
614 views

Openldap ppolicy, how to unlock account?

I have enabled OpenLDAP password policy overlay and account lockout is now working fine. On 5 authentication failures the account is getting locked out. On resetting the password the account becomes ...
0
votes
1answer
611 views

password protect apache vhost + reverse proxy

I wish to create a password protected vhost for selected clients (clients.mysite.com) We have a windows reverse proxy with some vhosts (www, static, secure). I am not using htaccess files as this is ...
6
votes
6answers
1k views

Back up and restore Active Directory password per user

For administrative purposes, I sometimes need to log in as another user to diagnose a problem with their account. I'd like to be able to do this without having to change their password so I don't ...
1
vote
1answer
91 views

SSL certificates with password encrypted key at hosting provider

We are a software company and offer hosting to our clients. We have a VPS at a large Dutch datacenter. For some of the applications, we need an SSL certificate which we'd like to encrypt with a ...
-1
votes
4answers
86 views

File and Database encryption [closed]

Just curious what do you guys use for file or database encryption? Any good programs out there or techniques employed for securing IT personal information? Main reason is the company I work for has ...
0
votes
2answers
2k views

sshpass does not work. Is there an alternative?

I use a small programm = sshpass to use ssh in a script to execute commands on linux routers Is there a alternative to sshpass because sshpass works at the moment not correctly (Bugs) - ...
1
vote
2answers
191 views

apache users linux

I'm working with Apache on an ec2 box. I'm trying to generate keys for a user, apache on the system. However, I don't have permission, because it's ec2. So, I sudo - and get asked for a password for ...
2
votes
1answer
2k views

How to exclude a user from an applied password policy

I have received a requirement that a single user needs to be excluded from the company's password policy (the CEO if you ask). as such, I have tried the following with no success. I have copied the ...
3
votes
2answers
823 views

How does VisualSVN store passwords?

We are running a VisualSVN Server that needs ~300 users to be created. As the need to mass create users is likely to reoccur, I'd prefer not to task someone with data entry for account creation. I've ...
-1
votes
1answer
177 views

Create a temporary password Windows Server 2008

How do you create a password in Windows Sever 2008 that forces the user to change said password on login? I'm creating the accounts for our team and would like people to change from the random ...
1
vote
1answer
571 views

How to safely store proxy passwords in system-wide linux config files?

I'm working on a VM in a university environment, where several other users also have root access. Take a config file like /etc/rhsm/rhsm.conf: proxy_hostname = proxy_port = proxy_user = ...
1
vote
1answer
68 views

Exchange 2007, expired passwords and mail forwarding

We have a handful of users that require a company email address and have all emails forwarded to an external address; usually they are third-party contractors and only need email. Since these users ...
-1
votes
1answer
77 views

Resetting pst password on a system that is using Symantic Endpoint Protection [closed]

I work for a company that employs Symantec Endpoint Protection. I have a user that has forgotten the password to their pst file. I've tried running a few password reset programs but Symantec treats ...
118
votes
4answers
4k views

Is my password compromised because I forgot to hit Enter after ssh username?

I've just tried logging into a Fedora (release 13 Goddard) server using SSH (PuTTY, Windows). For some reason the Enter after typing my username didn't go through and I typed in my password and hit ...
0
votes
1answer
512 views

Install mysql-server and set password from the command line?

I am installing MySQL via the command line: sudo apt-get install mysql-server. During the installation process, it prompts me for a root password. How can I specify the MySQL password without having ...
0
votes
3answers
696 views

Using admin credentials to log on as a user vs. storing passwords

Our office uses a Windows Domain with Active Directory to manage user access to machines and network resources. The IT staff maintains a record of everyone user's password, which is used mainly for ...
1
vote
1answer
1k views

PHP Script for end user to change Samba password

I'm looking for a PHP script that helps users change their own Samba password on a server. Basically just an interface to smbpasswd. The user would ideally enter their samba username, current password ...
2
votes
1answer
2k views

Active Directory GPO for Password Policy Not Applying from Default Domain Policy

Ok. I have implemented a Password Policy. I know from previous posts that it cannot be applied from within an OU so I have configured it from the Default Domain Policy. I run RSOP.msc from a client ...
2
votes
2answers
3k views

How can i easily password protect a site in Apache/Windows?

I have a website i'm hosting in Apache (on Windows), and i'd like to protect it so that anyone going in needs to enter a password. This is not meant to be a fortress of security, I know this sucks, ...
1
vote
1answer
275 views

Apache/htaccess - password protect a site by domain name

Is it posible to protect a website if the site was called by a given domain name? e.g. www.domain.com -> no password protection www.domain.net -> password protection Both of the URLs are routed ...
1
vote
1answer
218 views

Why warn users weeks before their passwords expire? [closed]

At my workplace (and I am told many others), several password-requiring systems warn users every day during the two week period before their passwords expire. The warning consists of a dialog box that ...
0
votes
2answers
3k views

Change an Active Directory password in C#

At first, please forgive my English, it is not my mother tongue. Then, here is my problem: I'm working on a web platform that manage the Active Directory. I can create, delete, edit a group, user, ...
15
votes
6answers
118k views

How to pass password to scp command used in bash script? [duplicate]

Possible Duplicate: Connect through SSH and type in password automatically, without using a public key I have a bash script that makes dump of DB then copies file from one server to another ...
5
votes
1answer
77 views

Services Accounts

We have a service account that is a member of the domain admins group. This is something that makes me exceptionally uncomfortable. I am looking to change this as soon as possible but am fairly new ...
0
votes
1answer
102 views

Change cadmin's password

I dont get something and I need your help. I have some machines under active directory on an SBS 2008. When I install a program a prompot appears to insert administrator credentials. The username I ...
-1
votes
4answers
511 views

Active Directory; list of users previous passwords? [closed]

I know that some other companies are able to intercept their users passwords when they log on to the network. I also know that these companies create a giant database of passwords that cannot be used ...
0
votes
2answers
2k views

Restore a saved Remote-Desktop Password?

Some fool in my company has scrapped the page with the root password for our hyper-v server. Fortunately I've saved the password in the Remote Desktop Connection, so I'm able to connect remotely. How ...
0
votes
1answer
87 views

Protect by password the / and /index.php but not the other scripts

In the document root of my web server (Apache 2.2.15 on CentOS 6.0) I have an /index.php script, which I'd like to be password protected and then few helper scripts (/helper1.php, /helper2.php, ...) ...
0
votes
1answer
378 views

openldap: how to implement password policies?

I would like to implement password policies for all openldap users. there are 2 things i would like to do: password aging (users should be forced to change their passwords at least every 90 days) ...