Questions tagged [password]
A password is a collection of characters that is used, usually in conjunction with a username, as a means of authentication.
906
questions
0
votes
0
answers
15
views
Any studies on the hardware costs of server-side password hashing? [closed]
I am researching the state of the art in password security on the web and the general consensus seems to be that server-side hashing with a slow hashing algorithm (Argon2id, bcrypt, scrypt etc) is the ...
Egor Sozonov
0
votes
1
answer
34
views
Is there any way to automate ssh login, without sshpass or expect?
The context here is that I have a series of embedded Linux systems at work. They do not have internet access. They are frequently re-imaged. I do not control the OS image and the owning team is not ...
- 101
0
votes
0
answers
10
views
Authenticate on other apps with OpenLDAP user still working after user password expired
I'm trying to figure out why is this still possible.
For example, we have icinga(web)2 and users are still able to login without promting to change the password.
Also, other apps that are not using ...
- 1
0
votes
0
answers
64
views
Encrypt SVN issue
could anyone advise how to encrypt SVN , Plan to encrypt or disable the SVN from asking if unencrypted passwords should be stored? We never want a user to be able to do that.
Would encrypting the ...
- 1
0
votes
1
answer
40
views
Fine Grained Password Policy Not Taking Effect - have to wait for next password change?
I have set a Fine Grained Password Policy with maximum password age of 180 days along with other settings that are similar to existing password policies.
I set the precedence number to a lower number ...
- 317
1
vote
1
answer
36
views
Can I provide any kind of "hint" for change AD domain password procedure?
We are changing password policy in company.
I would like to provide some kind of "company password policy rules" hint to user when user is changing his password using CTRL+ALT+DEL on Windows ...
- 323
0
votes
1
answer
38
views
kinit Password Expire Warning
I've a Ubuntu desktop client joined to an Active Directory 2008 R2 domain.
I need to use "kinit" command on Linux to determine when a user password will expire. That's my way to go due to ...
- 101
0
votes
1
answer
201
views
Roundcube does not take password for user at login [closed]
I have roundcube and docker-mailserver in docker containers. I've managed to make change of password possible by roundcube password plugin. I created 'mailbox' table and added two columns: 'username' ...
- 159
0
votes
1
answer
60
views
Why does WHM / cPanel keep saying my password is weak and must be 65 strength at least?
I've been trying to create my very first account on https://trycpanel.net/wwwacctform.html, but I've faced a weird error.Basically, I want to set a password for my account. But, it keeps saying it's ...
-2
votes
1
answer
27
views
Management of password disable server
This question is just for curiosity. I am studying a bit of server administration and have seen many people saying that having passwords is a bad idea and they should be disabled. But my question is: ...
0
votes
0
answers
52
views
Why I can't change qcow2 password via chroot
I have a Linux qcow2 image, and I want to change the root password.
I combined qemu-nbd and chroot commands to access the filesystem in this qcow2 file.
qemu-nbd --connect=/dev/nbd0 ./linux.qcow2
sudo ...
- 243
0
votes
1
answer
103
views
Error trying to reset service account password
Some background:
I installed Windows Server Essentials and ran the Essentials Configuration Wizard, which created a new AD forest with a single domain.
However, I needed the AD from a previously-...
- 703
0
votes
0
answers
42
views
Hosting provider requires giving out server's admin password because of Microsoft audit
I am using a Windows OS VPS from a smaller, local provider for 1 year, everything was good until I started to license a MSSQL Web from the provider itself. They ask me to share my OS's admin password ...
- 1
0
votes
1
answer
215
views
Let an unattended script connect from windows to an applaince with ssh password
I'm creating a script that will run unnatended on Windows. The script needs to execute commands via SSH on an appliance. The appliance does not support public/private key authentication only password ...
- 506
1
vote
1
answer
84
views
Accept both MD5 and SHA512 hashes is /etc/shadow
I recently upgraded debian server with many users to a recent version. The old server used MD5 password hashes (the shadow passwords begin with $1$) and new one is configured to use SHA-512.
I want to ...
- 21
0
votes
1
answer
205
views
SSH connection works for root but not user; fails after "Trying private key"
I'm setting up password-free ssh connection to a debian remote server. I've generated a key on my local machine and placed the key in both /root/.ssh/authorized_keys and /home/user/.ssh/...
- 99
1
vote
1
answer
179
views
How can the SPICE password of a libvirt+kvm+qemu virtual machine be changed while the machine is running?
I have a virtual machine that is running on a KVM+QEMU stack with libvirt. The VM is using a qxl or virtio display and has a spice graphics listening on a port.
I'd like to change the password (in ...
- 131
0
votes
1
answer
116
views
My Mac's password refuses to change
I work for a large corporation, and I work on a Macbook Pro. The company has a fancy arrangement where the password I use to connect to the VPN is "synched" to the password I use to log on ...
- 101
2
votes
0
answers
23
views
Removing additional password field from ssh login on Ubuntu 20
I just bought a Yubikey a few days back. I have tried to use the key to login to SSL without a password. I have it working, but it displays an error and shows interactive auth prompts.
The only real ...
- 121
0
votes
0
answers
38
views
Windows Server 2016 Administrator Password Expired
We have a windows 2016 server(OS W2016_SP0_STD_X64) that is not connected to any domain.
The server was administered via a local Admin user.
That users password has expired and now the server cannot ...
- 101
0
votes
1
answer
101
views
Can't change virtualmin / webmin password [closed]
I want to change the Webmin login password. The one that you use to log in with when you connect to 10000 port. I have tried several ways. The password will change but at the login, I can only log in ...
- 115
0
votes
1
answer
45
views
Change postgres password
I've forgotten my postgres password for my local install (Ubuntu 20.04).
I have postgres installed and running
henry@henry-Apollo:/$ service postgresql status
● postgresql.service - PostgreSQL RDBMS
...
- 133
0
votes
0
answers
24
views
Allow restricted user to change their own password
Recently I have followed the articles below, however, the passwd file that I copied to a dir in the users `‘home`` dir.
However, when the new credentials are parsed into passwd, it ends up with the ...
- 1
-1
votes
1
answer
111
views
How can I reset share passwords for WD Sharespace using root in SSH?
I have a Western Digital ShareSpace Disk Array NAS (Same one in this manual : https://docs.rs-online.com/49a1/0900766b80ce7e97.pdf )
The system has an existing number of shares, with a lot of files ...
- 127
0
votes
0
answers
54
views
Removing plain passwords from auth.log
I'm using some docker images to deploy a mail server (https://github.com/docker-mailserver/docker-mailserver). The MTA is postfix, with TLS configuration and using LDAP for login. I can login to the ...
- 1
0
votes
1
answer
369
views
How can you update the password for an AWS ECR repo in Kubernetes?
I created a private docker registry using AWS ECR. I want to use it with a Kubernetes cluster managed by Rancher, but the password to the registry is changed by AWS every 12 hours. How do I keep it ...
- 587
0
votes
2
answers
102
views
How to manage the keys in my ~/.ssh/authorized_keys on the server? (login without requiring password each time on a particular machine)
I am trying to follow this answer to login to my server via ssh without typing my extremely long password each time:
https://serverfault.com/a/241593/295203
Right now I have 6 keys in my ...
- 161
0
votes
2
answers
834
views
Use bcrypt password hashing with OpenLDAP (slapd)
I have an OpenLDAP LDAP server on Debian 9 (through the slapd package, v2.4.44). We use crypt for password authentication. Currently the scheme is SHA512: $5$....
The setup is pretty much as described ...
- 181
2
votes
2
answers
189
views
Password security of encrypted SSH private key: How to read round number or costfactor of bcrypt
Here https://security.stackexchange.com/a/52564 you can read that newer OpenSSH versions use bcrypt for protecting the keyfile. Security of bcrypt depends on the costfactor see https://security....
- 157
0
votes
0
answers
63
views
Minimum Password length: Getting error when length conforms to minimum
trying to determine why my machine is enforcing a minimum 15-char password when it appears it's set to 14. We have a GPO that sets the length to 14, so here's what I see on the machine (should ...
- 101
0
votes
1
answer
82
views
When using rsh i'm getting prompt for the password, but other SLES12 servers are working without prompting password
[ 2 root ] $ cat /etc/securetty
#
# This file contains the device names of tty lines (one per line,
# without leading /dev/) on which root is allowed to login.
#
tty1
tty2
tty3
tty4
tty5
tty6
rsh
...
0
votes
1
answer
31
views
AD password maxed out at 16 char
One of my client have this issue where we can't create password longer than 16 chars. I just found this out because we switched to using long passwords for all our client domain admins. I have been ...
- 11
0
votes
1
answer
47
views
ssh to same host from 2 different clients, not same list of authentication methods?
I have a usb gadget exposing itself as network card,
and allowing to ssh to it.
From my laptop I can authenticate using password method:
$ ssh -v -v -v -o PreferredAuthentications=password -o ...
- 101
-1
votes
1
answer
58
views
Best way to lock out a group once per week [duplicate]
A SSH server I admin is to be allowed login from a group of users all days of week except sunday.
How would be your elegant solution to this? Thanks any input on comments or creative +and+ secure ...
- 109
0
votes
1
answer
100
views
Linux user and password copy between servers with cron script [duplicate]
I have two Red Hat 7 Linux servers that I want to keep user accounts synced. I have a bash script that copies these files between servers:
/etc/passwd
/etc/shadow
/etc/group
/etc/gshadow
/etc/subuid
/...
- 1
0
votes
1
answer
63
views
How can each OpenStack Swift object-storage container be set up with a different password/key in a standard way?
I'd like to have many storage buckets, each with its own password or key for read & write access for use by end users.
Some options I've discovered:
ACLs: These work on a per-OpenStack-user basis....
- 490
2
votes
2
answers
309
views
How to securely pass secrets to an application
I have an application exposing a REST API which needs some secrets to launch, like database password, p12 keystore password or HS512 secret for issuing tokens. Those values are extracted from ...
- 45
-2
votes
1
answer
57
views
Why Windows domain controller reset password for domain computers? [closed]
I got message of 4724 event, where domain controller reset password for domain computer.
TargetUserName": "COMP123$"
...
SubjectUserName": "DC2$"
Why it happened? Is it ...
- 99
0
votes
0
answers
29
views
Chromium Edge password management
image
We have enabled the option "offer to save passwords" in Chromium Edge and due to this users are getting a pop-up with save or Never while logging into websites. However, we want to ...
-1
votes
1
answer
68
views
AWS cloud root password suddenly not working any more, can I get detailed logs? Have I been compromised?
I don't have any indication that I have been hacked, but after a few days without logging in to AWS console I found my AWS console root password didn't work any more. I changed it with reset password, ...
- 119
-3
votes
2
answers
81
views
How do I protect a PDF document with a password that varies from one opening device to another? [closed]
I'm a creative writer and I sell my works online. Normally, I would save a finished product into a PDF file, which I would protect by setting a password for it. However, I found that some bad actors ...
- 5
1
vote
2
answers
185
views
If user passwords are set to automatically expire within a Windows domain, does this have an impact on the force password change checkbox within ADUC?
Assume the following:
A Windows domain has a policy set to ensure that users must reset their passwords every 90 days
A user account (let's refer to it as "UserA") last changed their ...
- 155
0
votes
0
answers
219
views
Create Windows Password Hint for a Domain User
Windows 10, if you don't type the password correctly, it will prompt you with a "password hint" that you set up (https://www.top-password.com/blog/set-password-hint-for-windows-user-account/)...
0
votes
1
answer
561
views
Update Task Scheduler job password on multiple machines
Here's the deal: the company's policy is to update Service Account passwords every 180 days. Problem is, I'm using those service accounts on about 20 servers, running various jobs - so every 180 days, ...
- 800
1
vote
1
answer
143
views
How secure is a "root" password that's 26 alphanumeric characters long?
I was playing around with a DigitalOcean droplet. Linux Ubuntu 18.04.
I had a root password about 8 alphanumeric characters long. Port 22. It would take about 3 days for hackers with Chinese IP ...
0
votes
1
answer
464
views
Ansible server can't ssh to CentOS 8 machine through -m ping
Currently i'm working on an Ansible server that has 4 hosts (3Ubuntu and one CentOS). I can SSH to them without problems. But when i try to run:
ansible servers -m ping
this wel be the output:
user4@...
1
vote
1
answer
77
views
Is it acceptable to sell a server without its root or ipmi password?
Situation:
I'm wanting to sell 2 servers which I haven't used in 2 years. They were housed in a proper datacenter but when I no longer needed them the datacenter shipped them to me and I have had them ...
- 202
0
votes
2
answers
1k
views
Bash: Checking if can sudo on remote host using sshpass; how 'exposed' is the password?
I am using bash script below to test whether sudo is available on a remote host.
I'm obtaining the password from user input. I understand (to a limited extent) that using passwords inside a script ...
- 165
0
votes
0
answers
449
views
Apache 2.4 Basic Auth and allowed IP on a file
I'm trying to secure a file in Apache 2.4. It may be accessible from a set of IP addresses, and if not, ask a password to the user.
<Files index.php>
AuthType Basic
AuthName "...
- 1
-2
votes
1
answer
4k
views
How can I Change Password of Cisco (C3560-IPBASEK9-M) Switch with Command Line?
I can make remote (ssh) connection to my Cisco (C3560-IPBASEK9-M) switch on putty and I can log in with username and password.
How can I change password -that I use when I log in- on this command line?...
- 99