Questions tagged [password]
A password is a collection of characters that is used, usually in conjunction with a username, as a means of authentication.
0
votes
1answer
16 views
emc bios default password
I have a EMC server that hasn't been used for a while and I am trying to repurpose it. I am having trouble getting into the bios as it seems to be locked behind a password by default.
Hardware:
EMC ...
-2
votes
0answers
15 views
password protect folder for ubuntu 16.04 [closed]
I need to set password for accessing some folders in linux ubuntu 16.04.
I'm using a vm in google cloud, so no access to GUI, only terminal.
have tried encfs, but it is not effective.
1
vote
2answers
47 views
Why does password expire, if none is set?
Why does the password expire?
I am logging in with public key (without password) since several days. Today I get this message:
> ssh modlink_foo_q@server
You are required to change your password ...
0
votes
2answers
72 views
password unavailability on AWS
I have one windows instance.
whenever I try to get the password of that instance.
It shows me the error
The instance is already running from last 24 hrs.
Is there any other way to retrieve the ...
-1
votes
1answer
33 views
Cannot find Passfilt.dll on 2008 DC
I am trying to locate the standard password filter program called passfilt.dll on my 2008 DC. I searched the whole C drive but I could not find it.
According to documentation, it should be in c:\...
4
votes
3answers
693 views
AWS Instance Password lost after Login
As the title suggested I have lost my Linux Instance password. I have already accessed it via putty and it's ppk key. But I don't remember the password of system.
Is there any another way to access ...
5
votes
1answer
127 views
How to test if ssh server allows passwords?
I want to test whether or not an ssh server allows passwords and immediately close the connection without actually attempting a login.
Something like this:
allows_password=$(ssh --some-option ...
2
votes
1answer
112 views
Set password for local admin account on all computers in domain
Before you consider what I want to achieve as insane from a security standpoint, please continue reading:
I'm setting the password for the local admin account on all computers in the domain with a ...
10
votes
1answer
835 views
SELinux reset root password
Disclaimer: This question is not to solve the problem of changing root password while SELinux is active because there are a lot of guides to solve that already. This is more of how SELinux does that ...
0
votes
1answer
10 views
Proftpd user migration login denied
I migrated ProFTPd on a bigger server including ftpd.passwd and proftpd.conf.
The service is running. Unfortunately none of the old passes would work.
To analyze the situation I have re-generated one ...
0
votes
1answer
202 views
Why does sshpass still prompt for a password?
The context :
Debian Stretch workstation trying to SSH to numerous GNU/Linux servers (mostly RH and Debian)
I can not change the SSH configuration of the remote servers
I know this is far from ideal, ...
1
vote
1answer
42 views
Sudo: cannot setup user to avoid being asked for password
I run:
sudo visudo
and set this line for my user
myuser ALL=(ALL) NOPASSWD: ALL
however, I am still asked a password when I run a sudo command
how can I setup the user so that the password ...
0
votes
0answers
22 views
Error Installing Certificate - Cisco WLC - Password protected PEM
So I will start with saying, I'm not good at all with certificates, I got this .pem file that I'm going to upload to a WLC for Webauth, since the old one is from GeoTrust.
At first the .pem didn't ...
0
votes
1answer
9 views
Glassfish 4 fresh download won't work
I downloaded a fresh glassfish4 ZIP, decompressed it and ran it. However, I cannot access the admin console on localhost:4848, it keeps redirecting to index.jsf from unknown, and the server log keeps ...
1
vote
1answer
146 views
How to enforce “User must change password at next logon” on Linux domain member?
I have an Ubuntu Server 18.04 domain member joined to Active Directory. Everything is working well, except for getting the AD User must change password at next login setting to be respected.
I ...
0
votes
0answers
58 views
module pw-sha2.la appears to be missing from /usr/lib64/openldap how can I add this back to my installation?
The issue I'm having with openldap 2.4.40 is on an ec2 instance of amazon linux ami release 2018.03 -- I want to load the pw-sha2.la module to increase password hash complexity. The way I had ...
0
votes
0answers
41 views
Multiple different LM hashes per NT hash
i was charged with testing the security of our domain, and i opened the NTDS in order to check if LM hashes are in use, i used two methods
1. dcsync
2. WPR (a windows software)
in both cases i see ...
0
votes
2answers
113 views
How can I disable the password reset prompt at ssh login for expired password? (RHEL 6.9)
Environment:
Red Hat Enterprise Linux Server release 6.9 (Santiago)
LDAP provided by Oracle Directory Server running on Solaris
How do I turn off the automatic change password prompt when a user ...
0
votes
0answers
107 views
Does not work nginx htaccess for special page in redmine
i have system of management of projects redmine. Also, i have nginx, like reverse proxy for redmine. So, i need to block some page in redmine, for users. In redmine.conf, i did:
location /projects/...
2
votes
1answer
81 views
Cannot login with account on RHEL 7.5 server with DISA STIG Profile enabled
This has happened several times now, and I am getting frustrated.
I don't know how it happens, but sometimes a user account gets locked out. I change their passwd, either through passwd or chpasswd. ...
0
votes
0answers
16 views
Windows 2012 R2 DCOM issue
I have software installed on my machine (IBM Rational System Architect XT). It has placed a file in the DCOM section of my server. I have set the file to use a system account to run the application. ...
0
votes
0answers
21 views
How to create an admin account that has the capability to reset user password with ppolicy implemented in openLDAP centos7?
I need a lower level account because rootDN account bypasses passwordpolicy overlays in ldap.
Here is my base ldif file:
dn: dc=compaid,dc=com
dc: compaid
objectClass: top
objectClass: domain
dn: ...
0
votes
2answers
112 views
Active Directory password change: Re-Allow current password?
My question is that simple:
Can I configure an active directory in a way that when a user wants/needs to change his password, his current one isn't forbidden (if it's in compliance with the current ...
-1
votes
2answers
244 views
Use PowerShell to send a secure email that contains a password [closed]
I'm implementing to write a PowerShell script to send a secured email which contains password in it. I've been investigating the good ways to implement, but I cannot find out a proper method.
The ...
0
votes
0answers
31 views
Dovecot: How can I set the default computational complexity for dovecot key derivation function (Argon2)?
I'm using Debian 9 in my system, and I'd like to use the Argon2 key derivation function for Dovecot. According to docs, there's a parameter -r that can determine the computational complexity. I can do ...
0
votes
3answers
277 views
Can you set the number of rounds that ansible's password_hash jinja2 filter uses?
In ansible, it's pretty convenient to use something like this:
- name: Make sure user password is set
user:
name: my_user
password: "{{ user_password|password_hash('sha512', 'SomeSalt') }}"...
-1
votes
3answers
38 views
Active Directory user ID Password [closed]
I need to know the password of an User ID in Active directory without resetting it. Is this possible? If so how?
Resetting password is not an option because almost 900 servers have the current ...
0
votes
0answers
36 views
Is it bad practice to have empty root password even if SSH key authentication is enforced?
I have a personal, private VPS with two users, an unprivileged user and root. The only way to access the server is by SSH, and key authentication is enforced. Would it be a bad thing if I removed the ...
0
votes
1answer
37 views
GCP Login policy for instances
Inside gcp instance, there is missing pam.d module. Also it has it's own wrapper over ssh, so you have to use glcoud tool's ssh to get into the instance. While it is easy to setup login lockout policy ...
google-cloud-platform
0
votes
1answer
154 views
New Centos7 install - AD logins are not asking for password
Very strange one this.
I've built a new Centos7 server today, exactly the same way (I believe) as a tonne of others that I've done.
I use the 'realm join domain.name' command to join the server to our ...
0
votes
1answer
259 views
Linux FTP server which can work with unsalted SHA256 hashes?
Problem
Some old WS_FTP server stopped booting at work after a Windows update. The corresponding admin is long gone. The only information I have is :
file structure
user names
unsalted SHA256 hash ...
0
votes
0answers
779 views
How do I export my pem file to pfx with a password on the command line
I need to pass the password via the command line during the exporting in a bash script.
IBM has this on their website
openssl pkcs12 -export -in "$pem" -inkey "$key" -out "$pfx" -passout pass:pkcs12 ...
0
votes
1answer
406 views
SSH Connection ask password for postgres user
I would like to get $PGDATA from server with SSH connection under postgres user but I have some issues:
ssh postgres@myServer
postgres@myServer's password:
But I don't know the password and I don't ...
4
votes
1answer
591 views
can I reset the clock on an expired password in AD?
I have a customer who's users all access the solution via RDP and whom are all set to 'password never expires' in AD.
We're enforcing a password expiration policy and introducing a self-serve ...
0
votes
1answer
88 views
How to add pre-hashed password to ejabberd with ansible
I know that I can add users using the ansible ejabberd_user module, but there doesn't seem to be a way to add a user with a pre-hashed password.
I want this:
- name: create a user if it does not ...
2
votes
0answers
70 views
Jenkins on Windows: How to encrypt the httpsKeyStorePassword in jenkins.xml?
I'm running Jenkins, currently 2.89.3 on Windows, and have managed to configure SSL (...hooray!...).
Problem now is that I want to encrypt the -httpsKeyStorePassword defined in jenkins.xml, but ...
0
votes
0answers
91 views
Recover (not reset) user password on Seagate NAS running Windows Storage Server 2012
I think I am asking this in the right place. If not, let me know and I'll find somewhere more suitable.
I am trying to find out if there is any way to recover a user password on Windows Storage ...
1
vote
1answer
1k views
Encrypted or Password Protected Docker Container
I have some Docker containers. I want to login the containers with a password.
Is it possible?
If it is not possible then is there way to encrypt some folders in Docker?
I have tried rkt as well. I ...
0
votes
0answers
65 views
Mail for iOS error connecting to Courier IMAP, no password authentication
I’ve successfully installed postfix and Courier IMAP in an Ubuntu server 16.04 installation. I have set up a new user, set postfix to use the Maildir format, and created the Maildir directories in the ...
0
votes
1answer
397 views
How to hide a password from ps, if it's given to a process via script or command line
So I have a certain program, which is running almost 24/7.
I have a start script I've written in bash which simply does:
./app --user XXX --pass YYY
There are a few more options, but they are ...
1
vote
0answers
387 views
`runas` without password for hundreds of users
I'm working with a tool that runs programs on behalf of hundreds users on multiple machines. This works fine on Linux because I can just run as "root" and use su or sudo to impersonate them without a ...
1
vote
1answer
800 views
ansible ssh connections with two factor auth
I'm setting ansible to manage a whole farm of servers. My approach is the following:
Allow a user to connect to all servers protecting his connections with a heavy RSA key, passphrase protected, and ...
1
vote
2answers
443 views
Do password expiry rules reducing the security of the system?
The problem
I regularly have a debate with my CTO which usually begins something like this ...
CTO: My password expired, that should never happen.
Me : It's a security risk to never expire ...
0
votes
0answers
415 views
Sierra Mac user cannot change AD password after letting it expire
I have a Sierra (10.12) Mac whose user let his AD password expire. He now cannot change his AD password from this Mac. We have had 2 others on El Capitan or Yosemite over the years that did the same ...
0
votes
1answer
2k views
Enable Password Policy in OpenLDAP 2.4.44
I am trying to enable user password policies in my OpenLDAP 2.4.44 instance based on the osixia/docker-openldap Docker image.
Basically, following this description, I have set up following structure ...
0
votes
0answers
61 views
How can I reset password and email it using a CSV?
In a nutshell, I have a CSV file with First name, Last name, and personal Email. I would like to use this file to rest the users passwords and then send them an email with their login information.
I ...
3
votes
3answers
244 views
How does “your new password must differ at least n characters from the previous” work when only hash codes are stored?
I am wondering how the password policy "your new password must differ at least n characters from your old password" works.
My understanding is that the OS never actually stores the old passwords ...
1
vote
0answers
1k views
haproxy ssl password protected private key
Usage: Haproxy as SSL termination
Requirement: Our private keys are password protected and we are not allowed to remove the password for the private key
Problem:
If i run the following command ...
1
vote
1answer
541 views
What characters are allowed for the username and password in FreeRADIUS?
I am testing the WLAN functionalities of a device connecting to a RADIUS server. This RADIUS server is located on a Raspberry Pi with Raspbian Stretch and is using FreeRADIUS 3.0 and Hostapd. For EAP-...
0
votes
1answer
174 views
Sending password to rdesktop securely
I want to send password to rdesktop so that it doesn't show up in ps. Is there any safe alternative for passing with command-line parameter? I even can develop an application for this if it helps. Any ...
