2022 Developer Survey is open! Take survey.

Questions tagged [password]

A password is a collection of characters that is used, usually in conjunction with a username, as a means of authentication.

Filter by
Sorted by
Tagged with
0 votes
0 answers
15 views

Any studies on the hardware costs of server-side password hashing? [closed]

I am researching the state of the art in password security on the web and the general consensus seems to be that server-side hashing with a slow hashing algorithm (Argon2id, bcrypt, scrypt etc) is the ...
user avatar
0 votes
1 answer
34 views

Is there any way to automate ssh login, without sshpass or expect?

The context here is that I have a series of embedded Linux systems at work. They do not have internet access. They are frequently re-imaged. I do not control the OS image and the owning team is not ...
user avatar
  • 101
0 votes
0 answers
10 views

Authenticate on other apps with OpenLDAP user still working after user password expired

I'm trying to figure out why is this still possible. For example, we have icinga(web)2 and users are still able to login without promting to change the password. Also, other apps that are not using ...
user avatar
  • 1
0 votes
0 answers
64 views

Encrypt SVN issue

could anyone advise how to encrypt SVN , Plan to encrypt or disable the SVN from asking if unencrypted passwords should be stored? We never want a user to be able to do that. Would encrypting the ...
user avatar
0 votes
1 answer
40 views

Fine Grained Password Policy Not Taking Effect - have to wait for next password change?

I have set a Fine Grained Password Policy with maximum password age of 180 days along with other settings that are similar to existing password policies. I set the precedence number to a lower number ...
user avatar
  • 317
1 vote
1 answer
36 views

Can I provide any kind of "hint" for change AD domain password procedure?

We are changing password policy in company. I would like to provide some kind of "company password policy rules" hint to user when user is changing his password using CTRL+ALT+DEL on Windows ...
user avatar
  • 323
0 votes
1 answer
38 views

kinit Password Expire Warning

I've a Ubuntu desktop client joined to an Active Directory 2008 R2 domain. I need to use "kinit" command on Linux to determine when a user password will expire. That's my way to go due to ...
user avatar
  • 101
0 votes
1 answer
201 views

Roundcube does not take password for user at login [closed]

I have roundcube and docker-mailserver in docker containers. I've managed to make change of password possible by roundcube password plugin. I created 'mailbox' table and added two columns: 'username' ...
user avatar
  • 159
0 votes
1 answer
60 views

Why does WHM / cPanel keep saying my password is weak and must be 65 strength at least?

I've been trying to create my very first account on https://trycpanel.net/wwwacctform.html, but I've faced a weird error.Basically, I want to set a password for my account. But, it keeps saying it's ...
user avatar
-2 votes
1 answer
27 views

Management of password disable server

This question is just for curiosity. I am studying a bit of server administration and have seen many people saying that having passwords is a bad idea and they should be disabled. But my question is: ...
user avatar
0 votes
0 answers
52 views

Why I can't change qcow2 password via chroot

I have a Linux qcow2 image, and I want to change the root password. I combined qemu-nbd and chroot commands to access the filesystem in this qcow2 file. qemu-nbd --connect=/dev/nbd0 ./linux.qcow2 sudo ...
user avatar
0 votes
1 answer
103 views

Error trying to reset service account password

Some background: I installed Windows Server Essentials and ran the Essentials Configuration Wizard, which created a new AD forest with a single domain. However, I needed the AD from a previously-...
user avatar
  • 703
0 votes
0 answers
42 views

Hosting provider requires giving out server's admin password because of Microsoft audit

I am using a Windows OS VPS from a smaller, local provider for 1 year, everything was good until I started to license a MSSQL Web from the provider itself. They ask me to share my OS's admin password ...
user avatar
  • 1
0 votes
1 answer
215 views

Let an unattended script connect from windows to an applaince with ssh password

I'm creating a script that will run unnatended on Windows. The script needs to execute commands via SSH on an appliance. The appliance does not support public/private key authentication only password ...
user avatar
1 vote
1 answer
84 views

Accept both MD5 and SHA512 hashes is /etc/shadow

I recently upgraded debian server with many users to a recent version. The old server used MD5 password hashes (the shadow passwords begin with $1$) and new one is configured to use SHA-512. I want to ...
user avatar
  • 21
0 votes
1 answer
205 views

SSH connection works for root but not user; fails after "Trying private key"

I'm setting up password-free ssh connection to a debian remote server. I've generated a key on my local machine and placed the key in both /root/.ssh/authorized_keys and /home/user/.ssh/...
user avatar
1 vote
1 answer
179 views

How can the SPICE password of a libvirt+kvm+qemu virtual machine be changed while the machine is running?

I have a virtual machine that is running on a KVM+QEMU stack with libvirt. The VM is using a qxl or virtio display and has a spice graphics listening on a port. I'd like to change the password (in ...
user avatar
  • 131
0 votes
1 answer
116 views

My Mac's password refuses to change

I work for a large corporation, and I work on a Macbook Pro. The company has a fancy arrangement where the password I use to connect to the VPN is "synched" to the password I use to log on ...
user avatar
2 votes
0 answers
23 views

Removing additional password field from ssh login on Ubuntu 20

I just bought a Yubikey a few days back. I have tried to use the key to login to SSL without a password. I have it working, but it displays an error and shows interactive auth prompts. The only real ...
user avatar
0 votes
0 answers
38 views

Windows Server 2016 Administrator Password Expired

We have a windows 2016 server(OS W2016_SP0_STD_X64) that is not connected to any domain. The server was administered via a local Admin user. That users password has expired and now the server cannot ...
user avatar
  • 101
0 votes
1 answer
101 views

Can't change virtualmin / webmin password [closed]

I want to change the Webmin login password. The one that you use to log in with when you connect to 10000 port. I have tried several ways. The password will change but at the login, I can only log in ...
user avatar
0 votes
1 answer
45 views

Change postgres password

I've forgotten my postgres password for my local install (Ubuntu 20.04). I have postgres installed and running henry@henry-Apollo:/$ service postgresql status ● postgresql.service - PostgreSQL RDBMS ...
user avatar
  • 133
0 votes
0 answers
24 views

Allow restricted user to change their own password

Recently I have followed the articles below, however, the passwd file that I copied to a dir in the users `‘home`` dir. However, when the new credentials are parsed into passwd, it ends up with the ...
user avatar
  • 1
-1 votes
1 answer
111 views

How can I reset share passwords for WD Sharespace using root in SSH?

I have a Western Digital ShareSpace Disk Array NAS (Same one in this manual : https://docs.rs-online.com/49a1/0900766b80ce7e97.pdf ) The system has an existing number of shares, with a lot of files ...
user avatar
0 votes
0 answers
54 views

Removing plain passwords from auth.log

I'm using some docker images to deploy a mail server (https://github.com/docker-mailserver/docker-mailserver). The MTA is postfix, with TLS configuration and using LDAP for login. I can login to the ...
user avatar
0 votes
1 answer
369 views

How can you update the password for an AWS ECR repo in Kubernetes?

I created a private docker registry using AWS ECR. I want to use it with a Kubernetes cluster managed by Rancher, but the password to the registry is changed by AWS every 12 hours. How do I keep it ...
user avatar
0 votes
2 answers
102 views

How to manage the keys in my ~/.ssh/authorized_keys on the server? (login without requiring password each time on a particular machine)

I am trying to follow this answer to login to my server via ssh without typing my extremely long password each time: https://serverfault.com/a/241593/295203 Right now I have 6 keys in my ...
user avatar
  • 161
0 votes
2 answers
834 views

Use bcrypt password hashing with OpenLDAP (slapd)

I have an OpenLDAP LDAP server on Debian 9 (through the slapd package, v2.4.44). We use crypt for password authentication. Currently the scheme is SHA512: $5$.... The setup is pretty much as described ...
user avatar
  • 181
2 votes
2 answers
189 views

Password security of encrypted SSH private key: How to read round number or costfactor of bcrypt

Here https://security.stackexchange.com/a/52564 you can read that newer OpenSSH versions use bcrypt for protecting the keyfile. Security of bcrypt depends on the costfactor see https://security....
user avatar
  • 157
0 votes
0 answers
63 views

Minimum Password length: Getting error when length conforms to minimum

trying to determine why my machine is enforcing a minimum 15-char password when it appears it's set to 14. We have a GPO that sets the length to 14, so here's what I see on the machine (should ...
user avatar
  • 101
0 votes
1 answer
82 views

When using rsh i'm getting prompt for the password, but other SLES12 servers are working without prompting password

[ 2 root ] $ cat /etc/securetty # # This file contains the device names of tty lines (one per line, # without leading /dev/) on which root is allowed to login. # tty1 tty2 tty3 tty4 tty5 tty6 rsh ...
user avatar
0 votes
1 answer
31 views

AD password maxed out at 16 char

One of my client have this issue where we can't create password longer than 16 chars. I just found this out because we switched to using long passwords for all our client domain admins. I have been ...
user avatar
  • 11
0 votes
1 answer
47 views

ssh to same host from 2 different clients, not same list of authentication methods?

I have a usb gadget exposing itself as network card, and allowing to ssh to it. From my laptop I can authenticate using password method: $ ssh -v -v -v -o PreferredAuthentications=password -o ...
user avatar
  • 101
-1 votes
1 answer
58 views

Best way to lock out a group once per week [duplicate]

A SSH server I admin is to be allowed login from a group of users all days of week except sunday. How would be your elegant solution to this? Thanks any input on comments or creative +and+ secure ...
user avatar
  • 109
0 votes
1 answer
100 views

Linux user and password copy between servers with cron script [duplicate]

I have two Red Hat 7 Linux servers that I want to keep user accounts synced. I have a bash script that copies these files between servers: /etc/passwd /etc/shadow /etc/group /etc/gshadow /etc/subuid /...
user avatar
0 votes
1 answer
63 views

How can each OpenStack Swift object-storage container be set up with a different password/key in a standard way?

I'd like to have many storage buckets, each with its own password or key for read & write access for use by end users. Some options I've discovered: ACLs: These work on a per-OpenStack-user basis....
user avatar
  • 490
2 votes
2 answers
309 views

How to securely pass secrets to an application

I have an application exposing a REST API which needs some secrets to launch, like database password, p12 keystore password or HS512 secret for issuing tokens. Those values are extracted from ...
user avatar
-2 votes
1 answer
57 views

Why Windows domain controller reset password for domain computers? [closed]

I got message of 4724 event, where domain controller reset password for domain computer. TargetUserName": "COMP123$" ... SubjectUserName": "DC2$" Why it happened? Is it ...
user avatar
  • 99
0 votes
0 answers
29 views

Chromium Edge password management

image We have enabled the option "offer to save passwords" in Chromium Edge and due to this users are getting a pop-up with save or Never while logging into websites. However, we want to ...
user avatar
-1 votes
1 answer
68 views

AWS cloud root password suddenly not working any more, can I get detailed logs? Have I been compromised?

I don't have any indication that I have been hacked, but after a few days without logging in to AWS console I found my AWS console root password didn't work any more. I changed it with reset password, ...
user avatar
-3 votes
2 answers
81 views

How do I protect a PDF document with a password that varies from one opening device to another? [closed]

I'm a creative writer and I sell my works online. Normally, I would save a finished product into a PDF file, which I would protect by setting a password for it. However, I found that some bad actors ...
user avatar
  • 5
1 vote
2 answers
185 views

If user passwords are set to automatically expire within a Windows domain, does this have an impact on the force password change checkbox within ADUC?

Assume the following: A Windows domain has a policy set to ensure that users must reset their passwords every 90 days A user account (let's refer to it as "UserA") last changed their ...
user avatar
  • 155
0 votes
0 answers
219 views

Create Windows Password Hint for a Domain User

Windows 10, if you don't type the password correctly, it will prompt you with a "password hint" that you set up (https://www.top-password.com/blog/set-password-hint-for-windows-user-account/)...
user avatar
0 votes
1 answer
561 views

Update Task Scheduler job password on multiple machines

Here's the deal: the company's policy is to update Service Account passwords every 180 days. Problem is, I'm using those service accounts on about 20 servers, running various jobs - so every 180 days, ...
user avatar
1 vote
1 answer
143 views

How secure is a "root" password that's 26 alphanumeric characters long?

I was playing around with a DigitalOcean droplet. Linux Ubuntu 18.04. I had a root password about 8 alphanumeric characters long. Port 22. It would take about 3 days for hackers with Chinese IP ...
user avatar
0 votes
1 answer
464 views

Ansible server can't ssh to CentOS 8 machine through -m ping

Currently i'm working on an Ansible server that has 4 hosts (3Ubuntu and one CentOS). I can SSH to them without problems. But when i try to run: ansible servers -m ping this wel be the output: user4@...
user avatar
1 vote
1 answer
77 views

Is it acceptable to sell a server without its root or ipmi password?

Situation: I'm wanting to sell 2 servers which I haven't used in 2 years. They were housed in a proper datacenter but when I no longer needed them the datacenter shipped them to me and I have had them ...
user avatar
  • 202
0 votes
2 answers
1k views

Bash: Checking if can sudo on remote host using sshpass; how 'exposed' is the password?

I am using bash script below to test whether sudo is available on a remote host. I'm obtaining the password from user input. I understand (to a limited extent) that using passwords inside a script ...
user avatar
  • 165
0 votes
0 answers
449 views

Apache 2.4 Basic Auth and allowed IP on a file

I'm trying to secure a file in Apache 2.4. It may be accessible from a set of IP addresses, and if not, ask a password to the user. <Files index.php> AuthType Basic AuthName "...
user avatar
  • 1
-2 votes
1 answer
4k views

How can I Change Password of Cisco (C3560-IPBASEK9-M) Switch with Command Line?

I can make remote (ssh) connection to my Cisco (C3560-IPBASEK9-M) switch on putty and I can log in with username and password. How can I change password -that I use when I log in- on this command line?...
user avatar

1
2 3 4 5
19