Questions tagged [password]
A password is a collection of characters that is used, usually in conjunction with a username, as a means of authentication.
-3
votes
0answers
15 views
Can a flashdrive bypass a possible admin passcode? [on hold]
I'm trying to download a certain software on a school computer, but it requires an admin passcode, which I don't have. I have the software on a flashdrive however. So if I transport the software from ...
0
votes
0answers
35 views
Multiple different LM hashes per NT hash
i was charged with testing the security of our domain, and i opened the NTDS in order to check if LM hashes are in use, i used two methods
1. dcsync
2. WPR (a windows software)
in both cases i see ...
0
votes
2answers
26 views
How can I disable the password reset prompt at ssh login for expired password? (RHEL 6.9)
Environment:
Red Hat Enterprise Linux Server release 6.9 (Santiago)
LDAP provided by Oracle Directory Server running on Solaris
How do I turn off the automatic change password prompt when a user ...
0
votes
0answers
54 views
Does not work nginx htaccess for special page in redmine
i have system of management of projects redmine. Also, i have nginx, like reverse proxy for redmine. So, i need to block some page in redmine, for users. In redmine.conf, i did:
location /projects/...
1
vote
0answers
28 views
Cannot login with account on RHEL 7.5 server with DISA STIG Profile enabled
This has happened several times now, and I am getting frustrated.
I don't know how it happens, but sometimes a user account gets locked out. I change their passwd, either through passwd or chpasswd. ...
0
votes
0answers
10 views
Windows 2012 R2 DCOM issue
I have software installed on my machine (IBM Rational System Architect XT). It has placed a file in the DCOM section of my server. I have set the file to use a system account to run the application. ...
0
votes
0answers
16 views
How to create an admin account that has the capability to reset user password with ppolicy implemented in openLDAP centos7?
I need a lower level account because rootDN account bypasses passwordpolicy overlays in ldap.
Here is my base ldif file:
dn: dc=compaid,dc=com
dc: compaid
objectClass: top
objectClass: domain
dn: ...
0
votes
2answers
76 views
Active Directory password change: Re-Allow current password?
My question is that simple:
Can I configure an active directory in a way that when a user wants/needs to change his password, his current one isn't forbidden (if it's in compliance with the current ...
-1
votes
2answers
106 views
Use PowerShell to send a secure email that contains a password [closed]
I'm implementing to write a PowerShell script to send a secured email which contains password in it. I've been investigating the good ways to implement, but I cannot find out a proper method.
The ...
0
votes
0answers
13 views
Dovecot: How can I set the default computational complexity for dovecot key derivation function (Argon2)?
I'm using Debian 9 in my system, and I'd like to use the Argon2 key derivation function for Dovecot. According to docs, there's a parameter -r that can determine the computational complexity. I can do ...
0
votes
3answers
126 views
Can you set the number of rounds that ansible's password_hash jinja2 filter uses?
In ansible, it's pretty convenient to use something like this:
- name: Make sure user password is set
user:
name: my_user
password: "{{ user_password|password_hash('sha512', 'SomeSalt') }}"...
-1
votes
3answers
36 views
Active Directory user ID Password [closed]
I need to know the password of an User ID in Active directory without resetting it. Is this possible? If so how?
Resetting password is not an option because almost 900 servers have the current ...
0
votes
0answers
33 views
Is it bad practice to have empty root password even if SSH key authentication is enforced?
I have a personal, private VPS with two users, an unprivileged user and root. The only way to access the server is by SSH, and key authentication is enforced. Would it be a bad thing if I removed the ...
0
votes
1answer
27 views
GCP Login policy for instances
Inside gcp instance, there is missing pam.d module. Also it has it's own wrapper over ssh, so you have to use glcoud tool's ssh to get into the instance. While it is easy to setup login lockout policy ...
google-cloud-platform
0
votes
1answer
66 views
New Centos7 install - AD logins are not asking for password
Very strange one this.
I've built a new Centos7 server today, exactly the same way (I believe) as a tonne of others that I've done.
I use the 'realm join domain.name' command to join the server to our ...
0
votes
1answer
78 views
Linux FTP server which can work with unsalted SHA256 hashes?
Problem
Some old WS_FTP server stopped booting at work after a Windows update. The corresponding admin is long gone. The only information I have is :
file structure
user names
unsalted SHA256 hash ...
0
votes
0answers
253 views
How do I export my pem file to pfx with a password on the command line
I need to pass the password via the command line during the exporting in a bash script.
IBM has this on their website
openssl pkcs12 -export -in "$pem" -inkey "$key" -out "$pfx" -passout pass:pkcs12 ...
0
votes
1answer
204 views
SSH Connection ask password for postgres user
I would like to get $PGDATA from server with SSH connection under postgres user but I have some issues:
ssh postgres@myServer
postgres@myServer's password:
But I don't know the password and I don't ...
4
votes
1answer
244 views
can I reset the clock on an expired password in AD?
I have a customer who's users all access the solution via RDP and whom are all set to 'password never expires' in AD.
We're enforcing a password expiration policy and introducing a self-serve ...
0
votes
1answer
82 views
How to add pre-hashed password to ejabberd with ansible
I know that I can add users using the ansible ejabberd_user module, but there doesn't seem to be a way to add a user with a pre-hashed password.
I want this:
- name: create a user if it does not ...
2
votes
0answers
46 views
Jenkins on Windows: How to encrypt the httpsKeyStorePassword in jenkins.xml?
I'm running Jenkins, currently 2.89.3 on Windows, and have managed to configure SSL (...hooray!...).
Problem now is that I want to encrypt the -httpsKeyStorePassword defined in jenkins.xml, but ...
0
votes
0answers
46 views
Recover (not reset) user password on Seagate NAS running Windows Storage Server 2012
I think I am asking this in the right place. If not, let me know and I'll find somewhere more suitable.
I am trying to find out if there is any way to recover a user password on Windows Storage ...
0
votes
1answer
600 views
Encrypted or Password Protected Docker Container
I have some Docker containers. I want to login the containers with a password.
Is it possible?
If it is not possible then is there way to encrypt some folders in Docker?
I have tried rkt as well. I ...
0
votes
0answers
60 views
Mail for iOS error connecting to Courier IMAP, no password authentication
I’ve successfully installed postfix and Courier IMAP in an Ubuntu server 16.04 installation. I have set up a new user, set postfix to use the Maildir format, and created the Maildir directories in the ...
0
votes
1answer
286 views
How to hide a password from ps, if it's given to a process via script or command line
So I have a certain program, which is running almost 24/7.
I have a start script I've written in bash which simply does:
./app --user XXX --pass YYY
There are a few more options, but they are ...
1
vote
0answers
263 views
`runas` without password for hundreds of users
I'm working with a tool that runs programs on behalf of hundreds users on multiple machines. This works fine on Linux because I can just run as "root" and use su or sudo to impersonate them without a ...
1
vote
1answer
496 views
ansible ssh connections with two factor auth
I'm setting ansible to manage a whole farm of servers. My approach is the following:
Allow a user to connect to all servers protecting his connections with a heavy RSA key, passphrase protected, and ...
1
vote
2answers
235 views
Do password expiry rules reducing the security of the system?
The problem
I regularly have a debate with my CTO which usually begins something like this ...
CTO: My password expired, that should never happen.
Me : It's a security risk to never expire ...
0
votes
0answers
318 views
Sierra Mac user cannot change AD password after letting it expire
I have a Sierra (10.12) Mac whose user let his AD password expire. He now cannot change his AD password from this Mac. We have had 2 others on El Capitan or Yosemite over the years that did the same ...
0
votes
1answer
1k views
Enable Password Policy in OpenLDAP 2.4.44
I am trying to enable user password policies in my OpenLDAP 2.4.44 instance based on the osixia/docker-openldap Docker image.
Basically, following this description, I have set up following structure ...
0
votes
0answers
52 views
How can I reset password and email it using a CSV?
In a nutshell, I have a CSV file with First name, Last name, and personal Email. I would like to use this file to rest the users passwords and then send them an email with their login information.
I ...
0
votes
0answers
81 views
samba4 ad-dc windows xp cannot change password
I have some windows xp from which can’t change passowrd, in log.samba I find:
[2017/10/26 11:49:22.681147, 0, pid=8667] …/auth/gensec/gensec.c:241(gensec_verify_features)
Did not manage to negotiate ...
3
votes
3answers
153 views
How does “your new password must differ at least n characters from the previous” work when only hash codes are stored?
I am wondering how the password policy "your new password must differ at least n characters from your old password" works.
My understanding is that the OS never actually stores the old passwords ...
1
vote
0answers
851 views
haproxy ssl password protected private key
Usage: Haproxy as SSL termination
Requirement: Our private keys are password protected and we are not allowed to remove the password for the private key
Problem:
If i run the following command ...
0
votes
1answer
396 views
What characters are allowed for the username and password in FreeRADIUS?
I am testing the WLAN functionalities of a device connecting to a RADIUS server. This RADIUS server is located on a Raspberry Pi with Raspbian Stretch and is using FreeRADIUS 3.0 and Hostapd. For EAP-...
0
votes
1answer
115 views
Sending password to rdesktop securely
I want to send password to rdesktop so that it doesn't show up in ps. Is there any safe alternative for passing with command-line parameter? I even can develop an application for this if it helps. Any ...
0
votes
1answer
54 views
Unable to login to dedicated server over remote desktop
I have a dedicated server which I rented on online.net. It's a Windows Server 2012. I changed the administrator password from within the server, but now I can't login to my server over remote desktop. ...
0
votes
1answer
234 views
Apache password Authentication does not work
I use Apache 2.4.27 on a win10 machine. I followed all the steps found here.
I added just a single user ("dennis") that can access a folder with username/password. It worked fine, and the first time ...
1
vote
0answers
87 views
Debian 8; Run sudo in a screen session at boot without password prompt?
I want to create a startup/boot script that allows me to run a couple of Screen sessions.
This I have been able to achieve through creating a script on /etc/init.d/bashfilehere
But when I need to run ...
-2
votes
1answer
303 views
automated change password on linux servers [closed]
Dear friends and colleges
Each half year we need to change the password on our redhat Linux servers ,
we have 8723 servers!!! In our company
Is it possible to automate password changing each half ...
-1
votes
1answer
478 views
Sql Server user password changes by itself
This the same question as this:
Sql server automatically change password
However, the user never specified how he fixed it, he only said that he fixed it. I am having the exact same issue. ...
1
vote
1answer
167 views
Change root password with old Linux 2.4.20
I have an old (Linux 2.4.20) Debian server where I forgot the root password. When I try to enter single user mode then some init script never exits. It used the LILO boot loader. I want to change the ...
0
votes
1answer
95 views
Put server passwords in environment variable
Iam wondering, if it would be safe to put server variables as an environment variable in a ~/.bash_profile. Iam on a CentOS 6 shared host webserver. The passwords for the databases are currently ...
0
votes
1answer
1k views
Find location of ESXi 6.5 incorrect login attempts
I have a SuperMicro server with ESXi 6.5 installed on it. It worked fine until recently when I found I was unable to login. Checking the logfiles shows that something is attempting to log in as "root" ...
0
votes
1answer
36 views
Can Asterisk passwords be obtained by a malicious server?
To make a long story short, a client phone was compromised and used to make illicit calls. An investigation revealed a port forwarding entry to the phone's web UI, which is "protected" by a 6 digit ...
0
votes
0answers
25 views
How can I give limited administrative permissions to a user?
I am interim "administrator" of a CentOS VPS and pretty new to Linux. I'm working with a developer who needs administrative access, but I don't want him to be able to change the root password (again). ...
-2
votes
1answer
183 views
set up root password aws instance
I need to set the password for root user when sudo su -, ubuntu user should login via ssh key only.
#ssh -i server.pem ubuntu@example.com
ubuntu@example.com:~$ sudo su - --> should prompt the ...
1
vote
2answers
57 views
Is omitting a PC password within my Win 8.1 LAN constituting a security risk from the outside world?
In my Windows 8.1 LAN consisting of 14 computers, there are several servers which are dedicated to very specific tasks. (For example is the "Save Server" responsible to run a daily batch script, which ...
0
votes
2answers
1k views
Status of reversible encryption password [closed]
Is there an easy way to check Windows 2008R2 DC user accounts for a flag or keying material that shows that an account currently has a reversible password stored?
I'm aware of DSInternals but I'm not ...
3
votes
1answer
97 views
require sudo password for specific commands
I'm trying to force a password on specific commands with sudo everytime of execution regardless if the password has been entered a second ago.
Is there a way of doing that?
Every search result on ...
