A password is a collection of characters that is used, usually in conjunction with a username, as a means of authentication.

learn more… | top users | synonyms (1)

2
votes
1answer
46 views

How to disable user's password via puppet securely?

I have my SSH servers setup to use only Public Key authentication with password authentication disabled. When adding users through puppet I would like to disable user passwords. So far I have came ...
0
votes
1answer
1k views

“svn: Cannot negotiate authentication mechanism” for OSX CLI and WinXp TortoiseSVN, but linux CLI works

I had a working subversion server which used the passwd file which stores passwords in clear text. My requirements changed so that passwords now need to be encrypted. I did everything according to ...
1
vote
1answer
26 views

SFTP password wrong from remote, but not from local

From my server, connecting to it via eth0 (not localhost), I can connect via SFTP: Apr 9 10:02:40 domain sshd[11526]: Accepted password for test from 1.x.x.x port 45335 ssh2 From a remote ...
-1
votes
1answer
29 views

Storing unencrypted web app / WordPress passwords - explain to a client

I have a problem with a client who is complaining about a WordPress installation having an unencrypted MySQL database password in the wp-config.php file. I've tried explaining this to him by stating ...
10
votes
7answers
24k views

Web interface to allow users to change their Active Directory password

I have a few web applications that use Active Directory to authenticate. What I would like to be able to do is provide a simple web page that would allow users to update their AD password. This ...
3
votes
3answers
76 views

john the ripper to evaluate relative password strength

I was wondering whether JtR is a good solution to test password strength. I'm not interested in actually finding the passwords (I'd rather not in fact), what I'd like is to run JtR in a way which ...
-1
votes
1answer
26 views

Changing password in OpenVAS command line

I've been trying to find the right OAP command for changing the password for OpenVAS users. It is possible to change it the Greenbone Security Assistent interface. But i can't find it for doing it ...
0
votes
0answers
12 views

MySQL/MariaDB CLI limits max password? [migrated]

I've got strange problem - my MariaDB instance CLI (Linux) does enforce limit on how long password can be. For example, setting password like this UPDATE mysql.user SET ...
0
votes
1answer
1k views

watchguard fb x10 and x15 password reset

Is it possible to reset the password on watchguard fb x10 and x15 devices without clearing the config? We have 2 of these devices, they appear to have a serial port but not sure if that provides a ...
0
votes
1answer
611 views

password protect apache vhost + reverse proxy

I wish to create a password protected vhost for selected clients (clients.mysite.com) We have a windows reverse proxy with some vhosts (www, static, secure). I am not using htaccess files as this is ...
1
vote
4answers
954 views

How to pass a password with punctuation characters to 'mount' command?

I have a shell script that mounts several samba shares one after the other. I want my users to have to enter in their password only once. I can pass in a password using the following, mount -v -t ...
1
vote
0answers
24 views

Passwordless public key is not working

this is my fist help ask here despite being a daily reader in order to learn. I am working on a Unix environment (both Solaris and Aix servers) and my public key suddenly stopped working after ...
4
votes
1answer
31 views

pam_cracklib: preventing users from using passwords that contain common words

We would like to prevent users from using words such as the organisation name or their username as part of the password. The default behaviour of pam_cracklib when given a dictionary seems to be to ...
1
vote
2answers
929 views

Windows 7 - store network password

Windows 7 keeps asking for a password every time I mount a webdav. I don't want to store a password in a .bat file because it's so insecure. Is there any way to force system store it? Manually ...
39
votes
6answers
3k views

Is it OK to set up passwordless `sudo` on a cloud server?

Sorry if the question is vague but I don't know a better way to ask and I didn't see the caveats/tradeoffs of the approach discussed here. I love the idea of accessing servers via keys, so that I ...
4
votes
2answers
51 views

Best practices for updating passwords on a large number of machines running Windows Server 2012?

I'm going through the process of updating passwords on a dozen or so machines running Windows Server 2012 over RDP from an Apple keyboard. I can't press CTRL ALT DEL or CTRL ALT END because those ...
1
vote
2answers
486 views

TigerVNC + SSH without a VNC Password?

I have a RHEL 6 system with TigerVNC installed. It is configured to only allow VNC connections through SSH. Thus, a user can only connect to VNC if they successfully establish an SSH connection to ...
1
vote
3answers
923 views

Cannot to change my root password on Xenserver

I try to change my root password on my Xenserver 6.0. I follow these steps: enter boot: menu.c32 selecet xe-serial and press tab add "single" before the 2nd triple hyphens and i press enter. I have ...
2
votes
1answer
297 views

When does password expire when unchecking “Password never expires”

On a Windows Server 2008 R2 AD, if you uncheck the account option "Password never expires" on a User Account, does the password expire instantly, or does it get set to the period defined in the ...
5
votes
1answer
97 views

Combination of SSH key auth, and two-factor authentication

I was wondering if it is possible to accomplish the following, all at the same time: Disable root logins Enable SSH login for personal user, only via SSH keys Enable SSH login for unprivileged user, ...
1
vote
1answer
42 views

Password change reminder Ubuntu

I have an encrypted hard drive on my Linux box. When it was ready for me to change my password because of the 60 day expiration I ran into a problem. I changed the password and once I shutdown my ...
0
votes
0answers
31 views

Where does ISPConfig store the MySQL credentials?

I need to know where ISPConfig keeps the rest of its MySQL credentials So, we reset the root MySQL password, and ever since, whenever I try to install wordpress via ISPConfig , it gives me ...
0
votes
2answers
60 views

What is the purpose of openssl passwd

I'm reading "Reliably Deploying Rails Applications" Regarding defining users to be set up by Chef, it says: “Next we need to define users, inside data_bags/users copy the file deploy.json.example to ...
2
votes
2answers
60 views

AD LDAP No Password Required

I've got a question about AD accounts that have the setting PASSWD_NOTREQD enabled on them. What exactly does this setting do? From my own research, it appears that this will cause the account to ...
2
votes
3answers
930 views

How to set up two-factor authentication with OTP on FreeBSD?

I have a FreeBSD server that I like to be able to get to from anywhere. Normally I use SSH publickey to log in, or if I don't have my SSH private key available then I might use regular password over ...
7
votes
2answers
209 views

How can a standard Windows user change their password from the command line?

On Windows Server 2008 R2, I have a standard (non-administrator) local user (not an Active Directory account, though the server is in a domain) who has access to the server only via PowerShell ...
0
votes
2answers
35 views

No password for account when using SSH on server?

Our Server has disabled password-based ssh login and only works with publickey. When I add new users with adduser, it prompts for a password however and I cannot leave it empty. When I generate a ...
0
votes
2answers
91 views

Does openldap support pbkdf2 hash algorithm?

Since pbkdf2 (Password-Based Key Derivation Function 2) is a more secure hash function, so I wonder if current openldap implementation support pbkdf2 (pbkdf2_sha256 for example)? I have found some ...
0
votes
2answers
35 views

Should I set the password when creating new user using useradd command?

I know that when creating a new user by useradd, I could set his password by -p option, but it seems insecure, then what the right way to create a user and set his password? I do this in two steps: ...
1
vote
2answers
79 views

Logging in as another user in Windows without resetting their password?

If you own the administrator account on Windows Domain, is there a way of logging into a user account without resetting the password? We have users that log in remotely, and I need to work on their ...
0
votes
1answer
49 views

Where does server store the users random salt for password

In order to make passwords more secure , a random salt is added to the password before harshing occurs . I am assuming the salt is stored on the server in an associative array [username:salt] and ...
1
vote
1answer
50 views

recovering from a plaintext password in usermod -p

My small office's server was under attack yesterday and today and apparently the hacker gained access through a weak password (i.e. I am to blame entirely). The moment I noticed this, I fysically ...
0
votes
0answers
63 views

Pam password policy not working for root

I was following this guide (http://xmodulo.com/2013/12/set-password-policy-linux.html) for setting up pam and password for policy for CentOS. Everything works great except the root or any user's ...
1
vote
0answers
45 views

How can I prompt Mac clients connecting to RDS/Terminal Services to change password at first login?

This is my first implementation of Remote Desktop Services/Terminal Services; we are using it as a solution for Mac clients that need to run a piece of new Windows-only software. My question is about ...
-3
votes
1answer
31 views

How to recover public key password? [closed]

I created a new instance of a server on my VPS provider and when I was doing the initial server setup it prompted me for a password, which I don't remember. Is there anything I can do in this ...
49
votes
3answers
34k views

how to disable SSH login with password for some users?

On Linux (Debian Squeeze) I would like to disable SSH login using password to some users (selected group or all users except root). But I do not want to disable login using certificate for them. ...
2
votes
2answers
3k views

debian: cannot change password

As the root user, I can change the password: hussie:/home/claudiu# passwd Enter new password: Retype new password: passwd: password updated successfully As a non-root user I cannot: ...
0
votes
0answers
24 views

No login to ftp allowed [duplicate]

I recently installed VSFTPD on my os ( kali linux ), and I set up file vsftp.chroot_list with one line in it, which is root. As my root's password is toor, I opened ftp: ftp> open (to) ...
4
votes
1answer
89 views

Safely providing passwords to a linux daemon

I have a linux daemon that accesses some services (db etc). It needs some passwords for this. What would be the best way to give the passwords to the daemon in a secure manner? I currently store the ...
27
votes
22answers
2k views

Password best practices

Given the recent events with a 'hacker' learning and retrying passwords from website administrators, what can we suggest to everyone about best practices when it comes to passwords? use unique ...
-2
votes
1answer
64 views

Rsync and ssh script

I really dont need ssh keys. The server has good security implemented. I need the script to input the password without user usage/interaction. How can I make this? Its CentOS release 6.5 (Final) ...
0
votes
2answers
250 views

Allow linux root user mysql root access without password

On cPanel when I am logged in as root and type "mysql" without hostname and password it gives me direct access to mysql root user. I would like to do this for one of my non-cpanel server where the ...
47
votes
8answers
104k views

How to automate SSH login with password?

How to automate SSH login with password? I'm configuring my test VM, so heavy security is not considered. SSH chosen for acceptable security with minimal configuration. ex) echo password | ssh ...
1
vote
2answers
192 views

Open Directory Password Location and Encryption Method

Background: I would like to use Google Apps Directory Sync (GADS) to synchronize user accounts and passwords from a Mac OS X Server (10.9) running Open Directory. GADS is installed on a Ubuntu 12.04 ...
0
votes
2answers
68 views

Active Directory Self Service Password Reset

I have a large group of AD users and I need to provide them with a method for changing their own password in case they forget them. I am looking a third party self password reset application to enable ...
16
votes
7answers
73k views

Disable password complexity rule in Active Directory

Where do I go to disable the password complexity policy for the domain? I've logged onto the domain controller (Windows Server 2008) and found the option in local policies which is of course locked ...
1
vote
1answer
204 views

Pure FTPd and MySQL, working with sha512

I'm currently developing an application for shared hosting, using a complete MySQL backend for the machine. I've set up all my services, and they're quite operational, however I've a little problem ...
2
votes
1answer
106 views

How can I bulk reset windows service passwords across a service farm?

My company supports a number of windows services which use integrated security/windows authentication to manage their connections to the database. So these windows service all run with a special ...
-1
votes
4answers
8k views

How to password protect a folder in windows server 2003 over the network [closed]

I was wondering if anyone would be able to help me solve this problem. I have a several computers on a network. Of that network, there is one server(Windows server 2003) that acts as a file server. ...
48
votes
19answers
6k views

Best Practise and Solutions for Sharing Passwords

We have various passwords that need to be known to more than one person in our company. For example, the admin password to our internet routers, the password for our web-host, and also a few "non-IT" ...