A password is a collection of characters that is used, usually in conjunction with a username, as a means of authentication.

learn more… | top users | synonyms (1)

5
votes
1answer
5k views

How to check if my Supermicro IPMI is compromised with plaintext admin password over the web?

I've some Supermicro servers with IPMI running, and as described in this blog (http://blog.cari.net/carisirt-yet-another-bmc-vulnerability-and-some-added-extras) there's a critical vulnerability to ...
1
vote
3answers
95 views

Unable to change domain password even if the password is complex

I have a problem with users not being able to change their passwords. When they try to change the password, they get this error: "Your new password does not meet the length, complexity, or history ...
1
vote
3answers
7k views

Recover password for datasource in Weblogic

Is there a way to recover the password for a jdbc datasource, which I used in a Weblogic Application server? I could change it, but since I'm not entirely sure, where we use the database, that would ...
1
vote
1answer
294 views

Google Authenticator - generate new set of emergency codes

I use Google Authenticator on my SSH servers with Andoid app for generating codes. After I run $ google-authenticator application create set of emergyncy keys: ...
0
votes
1answer
3k views

PowerVault MD3000 Password Reset Console Password

I need to reset the password on a Dell PowerVault MD3000. I have the necessary password reset cable and am able to get to the point where I am prompted for the "password from Dell Technical Support" ...
0
votes
1answer
31 views

How to save output from grub-md5-crypt to a file ?

I am using Cent OS 6.5 and I want to save the generated output and md5 hash from grub-md5-crypt command to a file. The grub-md5-crypt command asks us to set a password. I want the password(which I ...
0
votes
1answer
22 views

Removing a mySQL database without password? [duplicate]

So about 6 months ago I set up a wheezy server and at the same time I installed MySQL even though I didn't need it. I've now updated to Jessie and need the database but can not remember the password ...
0
votes
0answers
13 views

Config passwordhook.dll in ws 2012 r2

Do you have any ideas how should i configure the "Environment" value in passwordhook.dll ? The available documentation for this dll is not so good. Right now, i'm using my Path from Environment ...
-2
votes
0answers
16 views

How to run a service account without user password? [migrated]

I regularly change user-account password, after doing so I have to manually update Fiddler -It's a web debugging proxy- service account credentials. Is there a way to create/run Fiddler service ...
0
votes
1answer
35 views

Mobile Encryption Password

I'm wondering what other people do for this. I have a client who needs to meet HIPAA Security Compliance. I have two things I'm wondering about. I need to encrypt all laptops that leave this ...
0
votes
1answer
2k views

“svn: Cannot negotiate authentication mechanism” for OSX CLI and WinXp TortoiseSVN, but linux CLI works

I had a working subversion server which used the passwd file which stores passwords in clear text. My requirements changed so that passwords now need to be encrypted. I did everything according to ...
0
votes
1answer
612 views

Active Directory Self Service Password Reset [closed]

I have a large group of AD users and I need to provide them with a method for changing their own password in case they forget them. I am looking a third party self password reset application to enable ...
0
votes
1answer
17 views

How to find difference in sending passwords to ProFTPD

There is a CentOS Server with proftpd installed, that works for a long time. Now I create a user the right way as the last time and check it with ftp command on windows CMD and it works. ...
2
votes
2answers
58 views

HIPPA Compliance - Home PC Use

I have some more questions on HIPPA Compliance. I'm considering presenting the idea of a RDS server to my clients who are family practice. If they use Home PCs to remote in, do these PCs have to be ...
1
vote
5answers
373 views

How to establish trust relationship when logging in with the old password and network disabled?

I have two computers in the same domain that I use, recently I changed the domain password on one of them. When I tried to login with the same account on the other machine I get: The trust ...
1
vote
1answer
31 views

I switched my password hashing from md5 to ssha512, now exim4 won't accept smtp-logins

I have recently switched my password hashing from md5 to ssha512. This works fine with dovecot, so I can read incoming mail without problems. It does not work as well for exim4. Log output from ...
0
votes
0answers
16 views

Wbadmin [startbackup] keeps prompting for password

I am running Wbadmin for backup purposes in a batch file, however the batch execution halts, prompting for a password although the password is provided. First attempt - include password in command: ...
0
votes
0answers
31 views

CentOS 7 - root password works only once

I have a very strange issue here. My root password works only once, and as soon as I log out, it ceases to function. Subsequent attempts to log in come back as ‘login incorrect’. I have to drop back ...
-2
votes
1answer
59 views

Office 365 password change does not require iPhone settings update

Today I came to a pal and he was insecure because he changed his Office 365 password in his OWA web app but he did not need to update it on other devices afterwards (like his iPhone, etc.) - so he ...
-2
votes
2answers
35 views

Changing Password in Exchange Server only [closed]

I created 1 user in AD and created mail box in exchange 2010 server. We implemented password policy for changing password in 45 days. I was having crunch on licenses so, I deleted AD user and did not ...
1
vote
3answers
3k views

Possible to get cleartext password?

I have hosting service hosted on more than 20+ Plesk servers, version 11. As in the previous versions, the passwords were not encrypted, then if i had to design some tools to manage the hosting ...
3
votes
4answers
131 views

Our server hosting provider asked for our root password

I work at a company that develops and hosts a small business critical system. We have an "Elastic cloud server" from a professional hosting provider. I recently got an email from them saying that ...
2
votes
1answer
8k views

Unknown LDAP cn=config admin password

When I installed OpenLDAP I was asked to create a password for an admin user but now I realize there's another admin user for cn=config whose password I don't know. Does anyone know how should I ...
2
votes
1answer
12k views

Reset the OpenLDAP root password [closed]

How to change the LDAP root password. In my root machine "/etc/ldap/sldap.d" file is not there. insted of the file sldap.d directory only is there. I have generated the password by using "slappasswd ...
8
votes
2answers
19k views

HOWTO: Disable complex password policy on Hyper-V Server 2008?

How do you disable the password complexity requirements on a Microsoft Hyper-V Server 2008 R2? Keep in mind that when you log into the server, the only UI you have is: And you cannot run ...
28
votes
7answers
131k views

Disable password complexity rule in Active Directory

Where do I go to disable the password complexity policy for the domain? I've logged onto the domain controller (Windows Server 2008) and found the option in local policies which is of course locked ...
19
votes
2answers
1k views

Why are md5 passwords hashed differently?

I've been wondering for a while, why does running "echo 'helloworld' | openssl passwd -1 -stdin" yield different results every time?If I put any of the hashes in my /etc/shadow I can use them as my ...
13
votes
4answers
1k views

Temporarlly increasing sudo's timeout for the duration of an install script

I'm trying to write a script, that will install a bunch of software, I'd like to not have to run everything as root, so I'd like to be able to prompt for a password and then go about the install, ...
0
votes
0answers
44 views

Password protect folder and allow all subfolders (apache)

I'm trying to password protect one folder on my web site using an .htaccess file with an .htpasswd file. It works and I get it to password protect it. Can I add something to my folders .htaccess file ...
2
votes
3answers
2k views

What is the longest password for SSH?

What is the longest (how much characters) for SSH password? I like strong and long password but dont know the character limit. Thanks.
3
votes
1answer
86 views

How can I tell which users credentials are cached on a local system?

I'm troubleshooting cached credentials on Windows 7, specifically Smart Card logins, and I would like to know how I can find out which users currently have their credentials cached on the machine. I ...
0
votes
1answer
73 views

Windows “User must change password at next logon” with kiosks?

Is there a way to allow users to change their passwords from a web page in Windows? We have a client that has hundreds of 'kiosk' workstations because all the users use web services that have their ...
3
votes
10answers
8k views

Real one-time passwords (OTP) on Linux other than S/Key? [closed]

Surely it is no good idea to log into a remote system from an untrusted computer. But sometimes it is plain necessary. Exposing an unencrypted SSH keyfile is no option of course. Entering a regular ...
1
vote
1answer
32 views

doveadm pw may generate invalid password if a special charactare is used

I have a dovecot server running on an Ubuntu 14.04 server, which reads the login-data (user/domain/password) from a mysql-database. The passwords are saved as salted SHA256 hashes. To generate these, ...
0
votes
1answer
56 views

Amazon EC2 Centos instance needs sudo password after update

I've got a terrible problem on a running webserver. It's a webserver running on CentOS, one of the default Amazon EC2 AMI's (images). I've been able to ssh to the server and do my thing until now. ...
0
votes
0answers
17 views

mysql password automatically sets to blank after package update

This is strange as I never personally experienced this except in our servers. Whenever we do package updates with mysql packages included in the updates, mysql password is set to empty password and we ...
47
votes
8answers
4k views

Is it OK to set up passwordless `sudo` on a cloud server?

I love the idea of accessing servers via keys, so that I don't have to type in my password every time I ssh into a box, I even lock my user's (not root) password (passwd -l username) so it's ...
31
votes
7answers
2k views

What would you do if you realized your email hosting provider could see your passwords?

We received an email last year from our hosting provider regarding one of our accounts- it had been compromised and used to deliver a rather generous helping of spam. Apparently, the user had reset ...
1
vote
0answers
323 views

LDAP with SSSD: force user to change password - 'ShadowLastChange' not working

I have CentOS6, with LDAP user authentication, using OpenLDAP and SSSD. I'm trying to force user to change the password. According to this ServerFault question I tried to set ShadowLastChange to 0, ...
0
votes
1answer
43 views

how do you secure mysql without a server root password?

I'm currently trying to install mySQL server on a centos6.5 server. I do not have a root password because i use a SSH Key Pair to access the server. During the installation process the prompt says: ...
-2
votes
3answers
6k views

proftpd gives 'login incorrect' error

I have had proftpd installed for a while now but since today I can not sign into the ftp server. I keep getting the error 530 login incorrect. I restarted proftpd in debug mode and got the below ...
-1
votes
2answers
49 views

How to set specify encryption hash when creating Linux user? [closed]

I want to create a few Linux user on my computer to test JohnTheRipper against different kind of password (including length, charset and encryption hash method). How can I easily specify which hashing ...
1
vote
1answer
5k views

Change user password on other domain command line

I'd like to change user's password using cmd.exe on domain account. I tried net user user_name * /domain but it doesn't work, because my user is on another domain. How can I specify, to which ...
-2
votes
1answer
22 views

User is not in passwd list [closed]

Some user forgot his password and I want to restore it being root. For that I use, in su : #passwd <user> passwd: user '<user>' does not exist I know the user is there because trying ...
12
votes
4answers
4k views

How to reset or recover admin account password for MySQL?

I have a MySQL database that I "inherited" and I was not given the admin credentials. I do however have access to the box that it runs on. Is there a way to either recover the admin credentials or ...
0
votes
1answer
45 views

Add a field to the Linux Login

Thanks all in advance. The question is simple. I want to ask the user the reason for login in Linux Production Servers. Login prompt will ask as common for user, password and the "Reason for Login" ...
-6
votes
2answers
49 views

How to protect Windows Server 2008 r2 from persons, which have physical access to computer? [closed]

One server is available for other users, and we think that someone may steal passwords from it. I can not set a password on boot, because sometimes there is electricity failure, and UPS can hold it ...
0
votes
2answers
608 views

SQLSTATE[HY000] [1045] Access denied for user 'admin'@'localhost' (using password: YES) [closed]

I've changed the password for admin user of mysql in phpmyadmin and now I can't access neither my Plesk panel and neither mysql via ssh. The error it triggers is: SQLSTATE[HY000] [1045] Access denied ...
6
votes
1answer
645 views

CentOS requires entering password twice for sudo, login

At every login or sudo prompt, the server always rejects the password when it is first supplied, but accepts it the second time. I found this thread which describes what seems to be the same problem, ...
1
vote
1answer
59 views

Cisco Router: ran 'no enable password'; 'enable' still asks for a password

I have a Cisco router (it's hard to access physically so I can't tell you the model) being used as a NAT without a firewall (inside the network in such a way that that does not pose a security thread) ...