58
votes
How to automate SSH login with password?
SSH single sign-on is usually achieved with public key authentication and an authentication agent. You could easily add your test VM key to an existing auth agent (see example below). Other methods ...
41
votes
Allow linux root user mysql root access without password
For mysql 5.7+, if you set empty password for the initial setup, mysql will automatically use auth_socket as a strategy. An attempt to update password without change the strategy will have no result. ...
36
votes
How to automate SSH login with password?
I am surprised nobody mentioned plink from the putty-tools package in Ubuntu:
plink user@domain -pw mypass [cmd]
It also available on Windows and the syntax is mostly compatible with the openssh ...
36
votes
how to disable SSH login with password for some users?
Match in sshd_config works well. You should use Match all to end the match block if you're using openssh 6.5p1 or above. Example:
PasswordAuthentication no
Match User root
PasswordAuthentication yes
...
35
votes
Accepted
Why is the maximum length of OpenWrt’s root password 8 characters?
This is because DES-based crypt (AKA 'descrypt') truncates passwords at 8 bytes, and only checks the first 8 for the purpose of password verification.
That's the answer to your direct question, but ...
25
votes
Is PermitRootLogin=prohibit-password still necessary when PasswordAuthentication=no?
prohibit-password means authenticate with any allowed mechanism that is not password and not keyboardinteractive. See sshd_config PermitRootLogin
PasswordAuthentication no just means authenticate ...
21
votes
How do you recover you RDS master user username?
It is 2019 now. It is 'Databases' on the sidebar, 'Configuration' on the navigation bar. And look for username.
19
votes
Accepted
SELinux reset root password
I was able to duplicate this issue in a freshly installed CentOS 7.5 system.
Here is what is happening:
When you boot with init=/bin/bash there are two issues you may run into:
The root filesystem ...
19
votes
Why is the maximum length of OpenWrt’s root password 8 characters?
I modified this in /etc/login.defs:
PASS_MAX_LEN 8
problem fixed.
Important additions:
After I changed the above parameters, although I can set a password larger than 8 digits, it is ...
15
votes
Accepted
What is a correct way(s) to allow login to an IIS site through a reverse proxy?
The problem is NTLM authentication (note WWW-Authenticate: NTLM ...), AKA Windows Authentication.
NTLM authentication authenticates connections instead of requests, and this is somewhat contradicts ...
15
votes
Accepted
How to test if ssh server allows passwords?
I found my old script:
ssh -v -n \
-o Batchmode=yes \
-o StrictHostKeyChecking=no \
-o UserKnownHostsFile=/dev/null \
DOES_NOT_EXIST@localhost 2>&1 | grep password
The -o Batchmode=...
14
votes
User can't change password due to complexity
IIRC the error is the generic error for any password change issue.
Based on your comment of:
This is however not true, when:
a) An Administrator resets to a new password or
b) the user ...
12
votes
Accepted
What is the default password in Google Developers Console?
The user account for GCE instance or Cloud Shell has access to elevate the privileges using sudo. The password for the user accounts is not configured out of the box. You can change user account ...
12
votes
disable maximum password length on Windows Server
Run rsop.msc on the machine that is giving you the issues. Then look under:
Computer Conf > Windows Settings > Security Settings > Account Pol > Password Pol
Under there, it will show you Source GPO ...
11
votes
Accepted
disable maximum password length on Windows Server
Im not sure about disabling it, It not sure if you want to degrade security on the server.
Start a command prompt as administrator in windows
Run the following command:
net user MyUser ...
10
votes
How do you recover you RDS master user username?
With the new updated RDS UI, the username is present in the Details section of the Instance Information screen.
From the List of your running Instances, click an instance name to see information ...
9
votes
How to automate SSH login with password?
I prefer passh https://github.com/clarkwang/passh
sshpass is broken by design.
when the ssh server is not added already in my known_hosts, sshpass will not show me the message to add the server to ...
9
votes
How to change my MySQL root password back to empty?
Note that starting with MySQL 5.7, the validate_password plugin is active by default, and prevents you from using an empty password.
You need to disable this plugin to allow for an empty password:
...
8
votes
How secure is a bluetooth keyboard against password sniffing?
Since most of the answers are 10 years old as of today here are the 2018 results of some german security researches on the topic. They claim that modern BT keyboards have their most critical weakness ...
8
votes
Best practice for storing password for ssh
Best practice is NOT to use password. You should always use the keys to authenticate.
But you are not able to prevent the usage of the password or the key if it is written as plaintext in some code. ...
8
votes
Accepted
Why does password expire, if none is set?
The value of your encrypted password (or the lack thereof) does not change the fact that a password expiry policy has been set.
See https://linux.die.net/man/3/shadow and https://linux.die.net/man/5/...
7
votes
How do you recover you RDS master user username?
Here is the command that you can use to get the master username of your RDS:
aws --profile=prod rds describe-db-instances
--region us-east-1
--db-instance-identifier YOUR-RDS-IDENTIFIER-HERE
...
7
votes
Accepted
Is there some way a user with an asterisk as password in /etc/shadow but a correct login shell in /etc/passwd would be able to login via SSH?
A * in the location of the hashed password in /etc/shadow effectively disables all password based logins as no user input will ever result in a hash value of *. But the user can still login with his/...
7
votes
AWS Instance Password lost after Login
Your screenshot says "server refused our key". That means you don't have the private key for your instance. I'm not sure there is a password.
You can try something like this to mount the volume then ...
6
votes
How to automate SSH login with password?
Depending on your automation needs, perhaps Ansible would be a good fit for you. It can nicely manage things like prompting for password, prompting for sudo password, various ways of changing use, ...
6
votes
How can I reduce the verbosity of certain Ansible tasks to not leak passwords into syslog?
The no_log attribute hides data in syslog. It can be applied to a single task
- name: secret task
shell: /usr/bin/do_something --value={{ secret_value }}
no_log: True
or the playbook:
- hosts: ...
6
votes
Is there any way to log entered password from ssh?
You can visualize the failed user names after you turn up the verbosity of the log in sshd_config¹, but there is no way to see the failed passwords as this could be a potential security issue and ...
6
votes
SSH ask password once, reuse password until timeout finishes
It's not what you want to hear, but this is what key-based authentication is for. So long as you put a passphrase on your private key, it's no less secure than password authentication.
You can use ssh-...
6
votes
How do I export my pem file to pfx with a password on the command line
You need to use the -passin in your command, due to the key you've used in the -inkey needs a password. Also, the exported pkcs12 file will need a password, so you need to use -passout as well.
So, ...
6
votes
How do I protect a PDF document with a password that varies from one opening device to another?
Forget it.
What you're asking for is a DRM. Hollywood has spent fortunes on this, even including it in physical hardware.
It hasn't worked. There's not one series that's not available pirated. If ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
password × 929active-directory × 122
linux × 115
security × 113
ssh × 109
windows × 101
mysql × 52
authentication × 51
ubuntu × 39
password-management × 38
login × 33
root × 33
windows-server-2008 × 30
group-policy × 28
ldap × 26
encryption × 26
apache-2.2 × 25
sudo × 23
windows-server-2003 × 22
user-accounts × 21
openldap × 20
users × 20
centos × 19
pam × 19
windows-7 × 18