Questions tagged [password]
A password is a collection of characters that is used, usually in conjunction with a username, as a means of authentication.
2
votes
1answer
75 views
Set password for local admin account on all computers in domain
Before you consider what I want to achieve as insane from a security standpoint, please continue reading:
I'm setting the password for the local admin account on all computers in the domain with a ...
8
votes
1answer
661 views
SELinux reset root password
Disclaimer: This question is not to solve the problem of changing root password while SELinux is active because there are a lot of guides to solve that already. This is more of how SELinux does that ...
0
votes
1answer
8 views
Proftpd user migration login denied
I migrated ProFTPd on a bigger server including ftpd.passwd and proftpd.conf.
The service is running. Unfortunately none of the old passes would work.
To analyze the situation I have re-generated one ...
0
votes
0answers
10 views
Need to reset password. I can login the computer with fingerprint [migrated]
Win 10. I forgot my password. I can still login the computer using fingerprint everyday ( I am typing this question using this computer now), but I need to find out my password in case.
The current ...
0
votes
1answer
35 views
Why does sshpass still prompt for a password?
The context :
Debian Stretch workstation trying to SSH to numerous GNU/Linux servers (mostly RH and Debian)
I can not change the SSH configuration of the remote servers
I know this is far from ideal, ...
1
vote
1answer
34 views
Sudo: cannot setup user to avoid being asked for password
I run:
sudo visudo
and set this line for my user
myuser ALL=(ALL) NOPASSWD: ALL
however, I am still asked a password when I run a sudo command
how can I setup the user so that the password ...
0
votes
0answers
19 views
Error Installing Certificate - Cisco WLC - Password protected PEM
So I will start with saying, I'm not good at all with certificates, I got this .pem file that I'm going to upload to a WLC for Webauth, since the old one is from GeoTrust.
At first the .pem didn't ...
0
votes
1answer
7 views
Glassfish 4 fresh download won't work
I downloaded a fresh glassfish4 ZIP, decompressed it and ran it. However, I cannot access the admin console on localhost:4848, it keeps redirecting to index.jsf from unknown, and the server log keeps ...
1
vote
1answer
60 views
How to enforce “User must change password at next logon” on Linux domain member?
I have an Ubuntu Server 18.04 domain member joined to Active Directory. Everything is working well, except for getting the AD User must change password at next login setting to be respected.
I ...
0
votes
0answers
46 views
module pw-sha2.la appears to be missing from /usr/lib64/openldap how can I add this back to my installation?
The issue I'm having with openldap 2.4.40 is on an ec2 instance of amazon linux ami release 2018.03 -- I want to load the pw-sha2.la module to increase password hash complexity. The way I had ...
0
votes
0answers
39 views
Multiple different LM hashes per NT hash
i was charged with testing the security of our domain, and i opened the NTDS in order to check if LM hashes are in use, i used two methods
1. dcsync
2. WPR (a windows software)
in both cases i see ...
0
votes
2answers
57 views
How can I disable the password reset prompt at ssh login for expired password? (RHEL 6.9)
Environment:
Red Hat Enterprise Linux Server release 6.9 (Santiago)
LDAP provided by Oracle Directory Server running on Solaris
How do I turn off the automatic change password prompt when a user ...
0
votes
0answers
66 views
Does not work nginx htaccess for special page in redmine
i have system of management of projects redmine. Also, i have nginx, like reverse proxy for redmine. So, i need to block some page in redmine, for users. In redmine.conf, i did:
location /projects/...
1
vote
0answers
50 views
Cannot login with account on RHEL 7.5 server with DISA STIG Profile enabled
This has happened several times now, and I am getting frustrated.
I don't know how it happens, but sometimes a user account gets locked out. I change their passwd, either through passwd or chpasswd. ...
0
votes
0answers
14 views
Windows 2012 R2 DCOM issue
I have software installed on my machine (IBM Rational System Architect XT). It has placed a file in the DCOM section of my server. I have set the file to use a system account to run the application. ...
0
votes
0answers
20 views
How to create an admin account that has the capability to reset user password with ppolicy implemented in openLDAP centos7?
I need a lower level account because rootDN account bypasses passwordpolicy overlays in ldap.
Here is my base ldif file:
dn: dc=compaid,dc=com
dc: compaid
objectClass: top
objectClass: domain
dn: ...
0
votes
2answers
92 views
Active Directory password change: Re-Allow current password?
My question is that simple:
Can I configure an active directory in a way that when a user wants/needs to change his password, his current one isn't forbidden (if it's in compliance with the current ...
-1
votes
2answers
140 views
Use PowerShell to send a secure email that contains a password [closed]
I'm implementing to write a PowerShell script to send a secured email which contains password in it. I've been investigating the good ways to implement, but I cannot find out a proper method.
The ...
0
votes
0answers
23 views
Dovecot: How can I set the default computational complexity for dovecot key derivation function (Argon2)?
I'm using Debian 9 in my system, and I'd like to use the Argon2 key derivation function for Dovecot. According to docs, there's a parameter -r that can determine the computational complexity. I can do ...
0
votes
3answers
199 views
Can you set the number of rounds that ansible's password_hash jinja2 filter uses?
In ansible, it's pretty convenient to use something like this:
- name: Make sure user password is set
user:
name: my_user
password: "{{ user_password|password_hash('sha512', 'SomeSalt') }}"...
-1
votes
3answers
37 views
Active Directory user ID Password [closed]
I need to know the password of an User ID in Active directory without resetting it. Is this possible? If so how?
Resetting password is not an option because almost 900 servers have the current ...
0
votes
0answers
36 views
Is it bad practice to have empty root password even if SSH key authentication is enforced?
I have a personal, private VPS with two users, an unprivileged user and root. The only way to access the server is by SSH, and key authentication is enforced. Would it be a bad thing if I removed the ...
0
votes
1answer
33 views
GCP Login policy for instances
Inside gcp instance, there is missing pam.d module. Also it has it's own wrapper over ssh, so you have to use glcoud tool's ssh to get into the instance. While it is easy to setup login lockout policy ...
google-cloud-platform
0
votes
1answer
100 views
New Centos7 install - AD logins are not asking for password
Very strange one this.
I've built a new Centos7 server today, exactly the same way (I believe) as a tonne of others that I've done.
I use the 'realm join domain.name' command to join the server to our ...
0
votes
1answer
110 views
Linux FTP server which can work with unsalted SHA256 hashes?
Problem
Some old WS_FTP server stopped booting at work after a Windows update. The corresponding admin is long gone. The only information I have is :
file structure
user names
unsalted SHA256 hash ...
0
votes
0answers
633 views
How do I export my pem file to pfx with a password on the command line
I need to pass the password via the command line during the exporting in a bash script.
IBM has this on their website
openssl pkcs12 -export -in "$pem" -inkey "$key" -out "$pfx" -passout pass:pkcs12 ...
0
votes
1answer
307 views
SSH Connection ask password for postgres user
I would like to get $PGDATA from server with SSH connection under postgres user but I have some issues:
ssh postgres@myServer
postgres@myServer's password:
But I don't know the password and I don't ...
4
votes
1answer
408 views
can I reset the clock on an expired password in AD?
I have a customer who's users all access the solution via RDP and whom are all set to 'password never expires' in AD.
We're enforcing a password expiration policy and introducing a self-serve ...
0
votes
1answer
86 views
How to add pre-hashed password to ejabberd with ansible
I know that I can add users using the ansible ejabberd_user module, but there doesn't seem to be a way to add a user with a pre-hashed password.
I want this:
- name: create a user if it does not ...
2
votes
0answers
59 views
Jenkins on Windows: How to encrypt the httpsKeyStorePassword in jenkins.xml?
I'm running Jenkins, currently 2.89.3 on Windows, and have managed to configure SSL (...hooray!...).
Problem now is that I want to encrypt the -httpsKeyStorePassword defined in jenkins.xml, but ...
0
votes
0answers
69 views
Recover (not reset) user password on Seagate NAS running Windows Storage Server 2012
I think I am asking this in the right place. If not, let me know and I'll find somewhere more suitable.
I am trying to find out if there is any way to recover a user password on Windows Storage ...
1
vote
1answer
941 views
Encrypted or Password Protected Docker Container
I have some Docker containers. I want to login the containers with a password.
Is it possible?
If it is not possible then is there way to encrypt some folders in Docker?
I have tried rkt as well. I ...
0
votes
0answers
61 views
Mail for iOS error connecting to Courier IMAP, no password authentication
I’ve successfully installed postfix and Courier IMAP in an Ubuntu server 16.04 installation. I have set up a new user, set postfix to use the Maildir format, and created the Maildir directories in the ...
0
votes
1answer
358 views
How to hide a password from ps, if it's given to a process via script or command line
So I have a certain program, which is running almost 24/7.
I have a start script I've written in bash which simply does:
./app --user XXX --pass YYY
There are a few more options, but they are ...
1
vote
0answers
329 views
`runas` without password for hundreds of users
I'm working with a tool that runs programs on behalf of hundreds users on multiple machines. This works fine on Linux because I can just run as "root" and use su or sudo to impersonate them without a ...
1
vote
1answer
670 views
ansible ssh connections with two factor auth
I'm setting ansible to manage a whole farm of servers. My approach is the following:
Allow a user to connect to all servers protecting his connections with a heavy RSA key, passphrase protected, and ...
1
vote
2answers
341 views
Do password expiry rules reducing the security of the system?
The problem
I regularly have a debate with my CTO which usually begins something like this ...
CTO: My password expired, that should never happen.
Me : It's a security risk to never expire ...
0
votes
0answers
391 views
Sierra Mac user cannot change AD password after letting it expire
I have a Sierra (10.12) Mac whose user let his AD password expire. He now cannot change his AD password from this Mac. We have had 2 others on El Capitan or Yosemite over the years that did the same ...
0
votes
1answer
1k views
Enable Password Policy in OpenLDAP 2.4.44
I am trying to enable user password policies in my OpenLDAP 2.4.44 instance based on the osixia/docker-openldap Docker image.
Basically, following this description, I have set up following structure ...
0
votes
0answers
59 views
How can I reset password and email it using a CSV?
In a nutshell, I have a CSV file with First name, Last name, and personal Email. I would like to use this file to rest the users passwords and then send them an email with their login information.
I ...
0
votes
0answers
94 views
samba4 ad-dc windows xp cannot change password
I have some windows xp from which can’t change passowrd, in log.samba I find:
[2017/10/26 11:49:22.681147, 0, pid=8667] …/auth/gensec/gensec.c:241(gensec_verify_features)
Did not manage to negotiate ...
3
votes
3answers
203 views
How does “your new password must differ at least n characters from the previous” work when only hash codes are stored?
I am wondering how the password policy "your new password must differ at least n characters from your old password" works.
My understanding is that the OS never actually stores the old passwords ...
1
vote
0answers
1k views
haproxy ssl password protected private key
Usage: Haproxy as SSL termination
Requirement: Our private keys are password protected and we are not allowed to remove the password for the private key
Problem:
If i run the following command ...
0
votes
1answer
480 views
What characters are allowed for the username and password in FreeRADIUS?
I am testing the WLAN functionalities of a device connecting to a RADIUS server. This RADIUS server is located on a Raspberry Pi with Raspbian Stretch and is using FreeRADIUS 3.0 and Hostapd. For EAP-...
0
votes
1answer
153 views
Sending password to rdesktop securely
I want to send password to rdesktop so that it doesn't show up in ps. Is there any safe alternative for passing with command-line parameter? I even can develop an application for this if it helps. Any ...
0
votes
1answer
56 views
Unable to login to dedicated server over remote desktop
I have a dedicated server which I rented on online.net. It's a Windows Server 2012. I changed the administrator password from within the server, but now I can't login to my server over remote desktop. ...
0
votes
1answer
291 views
Apache password Authentication does not work
I use Apache 2.4.27 on a win10 machine. I followed all the steps found here.
I added just a single user ("dennis") that can access a folder with username/password. It worked fine, and the first time ...
1
vote
0answers
90 views
Debian 8; Run sudo in a screen session at boot without password prompt?
I want to create a startup/boot script that allows me to run a couple of Screen sessions.
This I have been able to achieve through creating a script on /etc/init.d/bashfilehere
But when I need to run ...
-2
votes
1answer
345 views
automated change password on linux servers [closed]
Dear friends and colleges
Each half year we need to change the password on our redhat Linux servers ,
we have 8723 servers!!! In our company
Is it possible to automate password changing each half ...
-1
votes
1answer
661 views
Sql Server user password changes by itself
This the same question as this:
Sql server automatically change password
However, the user never specified how he fixed it, he only said that he fixed it. I am having the exact same issue. ...
