58 votes

How to automate SSH login with password?

SSH single sign-on is usually achieved with public key authentication and an authentication agent. You could easily add your test VM key to an existing auth agent (see example below). Other methods ...
nrolans's user avatar
  • 763
41 votes

Allow linux root user mysql root access without password

For mysql 5.7+, if you set empty password for the initial setup, mysql will automatically use auth_socket as a strategy. An attempt to update password without change the strategy will have no result. ...
chaintng's user avatar
  • 519
36 votes

How to automate SSH login with password?

I am surprised nobody mentioned plink from the putty-tools package in Ubuntu: plink user@domain -pw mypass [cmd] It also available on Windows and the syntax is mostly compatible with the openssh ...
eadmaster's user avatar
  • 837
36 votes

how to disable SSH login with password for some users?

Match in sshd_config works well. You should use Match all to end the match block if you're using openssh 6.5p1 or above. Example: PasswordAuthentication no Match User root PasswordAuthentication yes ...
Trevor Hateley's user avatar
35 votes
Accepted

Why is the maximum length of OpenWrt’s root password 8 characters?

This is because DES-based crypt (AKA 'descrypt') truncates passwords at 8 bytes, and only checks the first 8 for the purpose of password verification. That's the answer to your direct question, but ...
Royce Williams's user avatar
25 votes

Is PermitRootLogin=prohibit-password still necessary when PasswordAuthentication=no?

prohibit-password means authenticate with any allowed mechanism that is not password and not keyboardinteractive. See sshd_config PermitRootLogin PasswordAuthentication no just means authenticate ...
exore's user avatar
  • 468
21 votes

How do you recover you RDS master user username?

It is 2019 now. It is 'Databases' on the sidebar, 'Configuration' on the navigation bar. And look for username.
kklw's user avatar
  • 319
19 votes
Accepted

SELinux reset root password

I was able to duplicate this issue in a freshly installed CentOS 7.5 system. Here is what is happening: When you boot with init=/bin/bash there are two issues you may run into: The root filesystem ...
Michael Hampton's user avatar
19 votes

Why is the maximum length of OpenWrt’s root password 8 characters?

I modified this in /etc/login.defs: PASS_MAX_LEN 8 problem fixed. Important additions: After I changed the above parameters, although I can set a password larger than 8 digits, it is ...
Alan42's user avatar
  • 571
15 votes
Accepted

What is a correct way(s) to allow login to an IIS site through a reverse proxy?

The problem is NTLM authentication (note WWW-Authenticate: NTLM ...), AKA Windows Authentication. NTLM authentication authenticates connections instead of requests, and this is somewhat contradicts ...
Maxim Dounin's user avatar
  • 3,666
15 votes
Accepted

How to test if ssh server allows passwords?

I found my old script: ssh -v -n \ -o Batchmode=yes \ -o StrictHostKeyChecking=no \ -o UserKnownHostsFile=/dev/null \ DOES_NOT_EXIST@localhost 2>&1 | grep password The -o Batchmode=...
coolaj86's user avatar
  • 971
14 votes

User can't change password due to complexity

IIRC the error is the generic error for any password change issue. Based on your comment of: This is however not true, when: a) An Administrator resets to a new password or b) the user ...
TheCleaner's user avatar
  • 32.8k
12 votes
Accepted

What is the default password in Google Developers Console?

The user account for GCE instance or Cloud Shell has access to elevate the privileges using sudo. The password for the user accounts is not configured out of the box. You can change user account ...
Faizan's user avatar
  • 1,438
12 votes

disable maximum password length on Windows Server

Run rsop.msc on the machine that is giving you the issues. Then look under: Computer Conf > Windows Settings > Security Settings > Account Pol > Password Pol Under there, it will show you Source GPO ...
Cory Knutson's user avatar
  • 1,876
11 votes
Accepted

disable maximum password length on Windows Server

Im not sure about disabling it, It not sure if you want to degrade security on the server. Start a command prompt as administrator in windows Run the following command: net user MyUser ...
Anthony Fornito's user avatar
10 votes

How do you recover you RDS master user username?

With the new updated RDS UI, the username is present in the Details section of the Instance Information screen. From the List of your running Instances, click an instance name to see information ...
Sai Phaninder Reddy J's user avatar
9 votes

How to automate SSH login with password?

I prefer passh https://github.com/clarkwang/passh sshpass is broken by design. when the ssh server is not added already in my known_hosts, sshpass will not show me the message to add the server to ...
Badr Elmers's user avatar
9 votes

How to change my MySQL root password back to empty?

Note that starting with MySQL 5.7, the validate_password plugin is active by default, and prevents you from using an empty password. You need to disable this plugin to allow for an empty password: ...
BenMorel's user avatar
  • 4,607
8 votes

How secure is a bluetooth keyboard against password sniffing?

Since most of the answers are 10 years old as of today here are the 2018 results of some german security researches on the topic. They claim that modern BT keyboards have their most critical weakness ...
perelin's user avatar
  • 221
8 votes

Best practice for storing password for ssh

Best practice is NOT to use password. You should always use the keys to authenticate. But you are not able to prevent the usage of the password or the key if it is written as plaintext in some code. ...
Jakuje's user avatar
  • 10k
8 votes
Accepted

Why does password expire, if none is set?

The value of your encrypted password (or the lack thereof) does not change the fact that a password expiry policy has been set. See https://linux.die.net/man/3/shadow and https://linux.die.net/man/5/...
HBruijn's user avatar
  • 80.2k
7 votes

How do you recover you RDS master user username?

Here is the command that you can use to get the master username of your RDS: aws --profile=prod rds describe-db-instances --region us-east-1 --db-instance-identifier YOUR-RDS-IDENTIFIER-HERE ...
arbabnazar's user avatar
7 votes
Accepted

Is there some way a user with an asterisk as password in /etc/shadow but a correct login shell in /etc/passwd would be able to login via SSH?

A * in the location of the hashed password in /etc/shadow effectively disables all password based logins as no user input will ever result in a hash value of *. But the user can still login with his/...
HBruijn's user avatar
  • 80.2k
7 votes

AWS Instance Password lost after Login

Your screenshot says "server refused our key". That means you don't have the private key for your instance. I'm not sure there is a password. You can try something like this to mount the volume then ...
Tim's user avatar
  • 32.7k
6 votes

How to automate SSH login with password?

Depending on your automation needs, perhaps Ansible would be a good fit for you. It can nicely manage things like prompting for password, prompting for sudo password, various ways of changing use, ...
Cameron Kerr's user avatar
  • 4,109
6 votes

How can I reduce the verbosity of certain Ansible tasks to not leak passwords into syslog?

The no_log attribute hides data in syslog. It can be applied to a single task - name: secret task shell: /usr/bin/do_something --value={{ secret_value }} no_log: True or the playbook: - hosts: ...
Henrik Pingel's user avatar
6 votes

Is there any way to log entered password from ssh?

You can visualize the failed user names after you turn up the verbosity of the log in sshd_config¹, but there is no way to see the failed passwords as this could be a potential security issue and ...
Jakuje's user avatar
  • 10k
6 votes

SSH ask password once, reuse password until timeout finishes

It's not what you want to hear, but this is what key-based authentication is for. So long as you put a passphrase on your private key, it's no less secure than password authentication. You can use ssh-...
James Sneeringer's user avatar
6 votes

How do I export my pem file to pfx with a password on the command line

You need to use the -passin in your command, due to the key you've used in the -inkey needs a password. Also, the exported pkcs12 file will need a password, so you need to use -passout as well. So, ...
Viktor Csomor's user avatar
6 votes

How do I protect a PDF document with a password that varies from one opening device to another?

Forget it. What you're asking for is a DRM. Hollywood has spent fortunes on this, even including it in physical hardware. It hasn't worked. There's not one series that's not available pirated. If ...
vidarlo's user avatar
  • 9,092

Only top scored, non community-wiki answers of a minimum length are eligible