Questions tagged [password]
A password is a collection of characters that is used, usually in conjunction with a username, as a means of authentication.
929
questions
0
votes
1
answer
201
views
How to add pre-hashed password to ejabberd with ansible
I know that I can add users using the ansible ejabberd_user module, but there doesn't seem to be a way to add a user with a pre-hashed password.
I want this:
- name: create a user if it does not ...
2
votes
0
answers
596
views
Jenkins on Windows: How to encrypt the httpsKeyStorePassword in jenkins.xml?
I'm running Jenkins, currently 2.89.3 on Windows, and have managed to configure SSL (...hooray!...).
Problem now is that I want to encrypt the -httpsKeyStorePassword defined in jenkins.xml, but ...
2
votes
1
answer
5k
views
Encrypted or Password Protected Docker Container
I have some Docker containers. I want to login the containers with a password.
Is it possible?
If it is not possible then is there way to encrypt some folders in Docker?
I have tried rkt as well. I ...
1
vote
1
answer
3k
views
How to hide a password from ps, if it's given to a process via script or command line
So I have a certain program, which is running almost 24/7.
I have a start script I've written in bash which simply does:
./app --user XXX --pass YYY
There are a few more options, but they are ...
1
vote
0
answers
2k
views
`runas` without password for hundreds of users
I'm working with a tool that runs programs on behalf of hundreds users on multiple machines. This works fine on Linux because I can just run as "root" and use su or sudo to impersonate them without a ...
3
votes
1
answer
4k
views
ansible ssh connections with two factor auth
I'm setting ansible to manage a whole farm of servers. My approach is the following:
Allow a user to connect to all servers protecting his connections with a heavy RSA key, passphrase protected, and ...
1
vote
4
answers
2k
views
Do password expiry rules reducing the security of the system?
The problem
I regularly have a debate with my CTO which usually begins something like this ...
CTO: My password expired, that should never happen.
Me : It's a security risk to never expire ...
0
votes
1
answer
5k
views
Enable Password Policy in OpenLDAP 2.4.44
I am trying to enable user password policies in my OpenLDAP 2.4.44 instance based on the osixia/docker-openldap Docker image.
Basically, following this description, I have set up following structure ...
0
votes
0
answers
101
views
How can I reset password and email it using a CSV?
In a nutshell, I have a CSV file with First name, Last name, and personal Email. I would like to use this file to rest the users passwords and then send them an email with their login information.
I ...
4
votes
3
answers
4k
views
How does "your new password must differ at least n characters from the previous" work when only hash codes are stored?
I am wondering how the password policy "your new password must differ at least n characters from your old password" works.
My understanding is that the OS never actually stores the old passwords ...
7
votes
1
answer
5k
views
haproxy ssl password protected private key
Usage: Haproxy as SSL termination
Requirement: Our private keys are password protected and we are not allowed to remove the password for the private key
Problem:
If i run the following command ...
1
vote
1
answer
3k
views
What characters are allowed for the username and password in FreeRADIUS?
I am testing the WLAN functionalities of a device connecting to a RADIUS server. This RADIUS server is located on a Raspberry Pi with Raspbian Stretch and is using FreeRADIUS 3.0 and Hostapd. For EAP-...
0
votes
1
answer
465
views
Sending password to rdesktop securely
I want to send password to rdesktop so that it doesn't show up in ps. Is there any safe alternative for passing with command-line parameter? I even can develop an application for this if it helps. Any ...
0
votes
1
answer
74
views
Unable to login to dedicated server over remote desktop
I have a dedicated server which I rented on online.net. It's a Windows Server 2012. I changed the administrator password from within the server, but now I can't login to my server over remote desktop. ...
0
votes
1
answer
2k
views
Apache password Authentication does not work
I use Apache 2.4.27 on a win10 machine. I followed all the steps found here.
I added just a single user ("dennis") that can access a folder with username/password. It worked fine, and the first time ...
1
vote
0
answers
260
views
Debian 8; Run sudo in a screen session at boot without password prompt?
I want to create a startup/boot script that allows me to run a couple of Screen sessions.
This I have been able to achieve through creating a script on /etc/init.d/bashfilehere
But when I need to run ...
-2
votes
1
answer
2k
views
automated change password on linux servers [closed]
Dear friends and colleges
Each half year we need to change the password on our redhat Linux servers ,
we have 8723 servers!!! In our company
Is it possible to automate password changing each half ...
-1
votes
3
answers
6k
views
Sql Server user password changes by itself
This the same question as this:
Sql server automatically change password
However, the user never specified how he fixed it, he only said that he fixed it. I am having the exact same issue. ...
2
votes
1
answer
453
views
Change root password with old Linux 2.4.20
I have an old (Linux 2.4.20) Debian server where I forgot the root password. When I try to enter single user mode then some init script never exits. It used the LILO boot loader. I want to change the ...
0
votes
1
answer
296
views
Put server passwords in environment variable
Iam wondering, if it would be safe to put server variables as an environment variable in a ~/.bash_profile. Iam on a CentOS 6 shared host webserver. The passwords for the databases are currently ...
2
votes
1
answer
12k
views
Find location of ESXi 6.5 incorrect login attempts
I have a SuperMicro server with ESXi 6.5 installed on it. It worked fine until recently when I found I was unable to login. Checking the logfiles shows that something is attempting to log in as "root" ...
0
votes
1
answer
108
views
Can Asterisk passwords be obtained by a malicious server?
To make a long story short, a client phone was compromised and used to make illicit calls. An investigation revealed a port forwarding entry to the phone's web UI, which is "protected" by a 6 digit ...
-2
votes
1
answer
467
views
set up root password aws instance
I need to set the password for root user when sudo su -, ubuntu user should login via ssh key only.
#ssh -i server.pem [email protected]
[email protected]:~$ sudo su - --> should prompt the ...
1
vote
2
answers
70
views
Is omitting a PC password within my Win 8.1 LAN constituting a security risk from the outside world?
In my Windows 8.1 LAN consisting of 14 computers, there are several servers which are dedicated to very specific tasks. (For example is the "Save Server" responsible to run a daily batch script, which ...
1
vote
2
answers
8k
views
Status of reversible encryption password [closed]
Is there an easy way to check Windows 2008R2 DC user accounts for a flag or keying material that shows that an account currently has a reversible password stored?
I'm aware of DSInternals but I'm not ...
2
votes
1
answer
420
views
require sudo password for specific commands
I'm trying to force a password on specific commands with sudo everytime of execution regardless if the password has been entered a second ago.
Is there a way of doing that?
Every search result on ...
0
votes
0
answers
36
views
Is there a way to have a user set a password that is against a list of bad pws on AD?
I only see server 2008 have a password requirement users must have. But is there a way to also have the password searched against a list of bad passwords to force a user have a list that meets the pw ...
2
votes
2
answers
5k
views
How to add already encrypted password to openldap
I need to migrate legacy directory-like Mysql data to a new ldap database. Not much hassle except for the passwords. They are stored as sha1 in the Mysql database (I checked I can generate them by ...
3
votes
2
answers
2k
views
Enable Password Prompt for Windows Recovery Environment
On one of my domain workstations I'm able to access the Windows 7 Recovery Environment (WinRE) without being prompted for a username and password. My research (example) unanimously declares I'm ...
0
votes
1
answer
4k
views
nginx password protect not working
I'm having problems setting a password on the landing page of my website.
I've seen this question asked a few times and tried the upvoted fixes in each post. So far I've tried changing permissions of ....
9
votes
3
answers
4k
views
How can I change a MySQL user password without typing it visibly on the console?
I've seen various methods to set passwords in MySQL, e.g, things like:
GRANT USAGE ON db.* to 'dave'@'localhost' IDENTIFIED BY 'supersecretpassword');
SET PASSWORD [FOR 'dave'@'localhost'] = PASSWORD(...
0
votes
1
answer
2k
views
Store SSH password for combined private key and password authentication
I'm trying to get an user account to be able to be used both with private key only and private key + password. The password only really needs to be long enough for opportunity -based attacks, as I'd ...
3
votes
5
answers
20k
views
SSH ask password once, reuse password until timeout finishes
How can I solve this problem?
I have a bash script (under Ubuntu Server), doing several SSH connections, executes some remote transfers, like rsync multiple times.
My problem is, that I would like to ...
1
vote
1
answer
416
views
Solaris 8 - Root Password Reset Still Showing Expired
I have a Solaris 8 2/02 SPARC test server that has an issue with the root account. I am able to log in with this account but every time I do, I am met with this message...
WARNING: Your password has ...
0
votes
1
answer
2k
views
Server 2016 ADFS 3.0 and Azure AD update password url not working
I am trying to enable users to update their password.
I have a Server 2016 with Active Directory and ADFS configured for SSO.
SSO works fine and Active Directory is synced with Azure AD.
We use ...
1
vote
1
answer
153
views
Windows Server 2003 DC VM password recovery
Unfortunately, I've forgotten the password to both the local admin account and the domain admin account on my domain controller. This box is to be used in an exploitation demonstration but the ...
0
votes
1
answer
698
views
AD LDAP: Query at what time user has to change password
Is it possible to query AD via LDAP, when a user has to change the password the next time? Is there any other method to query this attribute from a non Windows system (Linux)?
Background: We are ...
1
vote
1
answer
2k
views
Remember SSH Password after once entered without SSH Keys
I've to work a lot with SSH on different Servers where I'm not allowed to store a public Key on the remote Server. So i cant use SSH-Keys and SSH-Agent.
The Authentication is over LDAP so its always ...
2
votes
1
answer
48
views
Networked machine 'bypasses' password protection on Win7 shares
I've just encountered an odd problem that is the exact opposite of what you'd expect: One of three machines on a local network somehow remembers passwords for the other machines, despite reboots and ...
2
votes
0
answers
29
views
Manage passwords stored in web configs located on a server
We have a number of servers that perform different functions and every 60 days we do password refreshes. Normally this isn't an issue but we have these passwords stored in web configs all over the ...
0
votes
0
answers
141
views
HP Proliant MicroServer locked up?
This is my first time on Serverfault, so be gentle :)
My boss bought a Second-hand MicroServer, loaded with Windows Server 2003 R2, from a business that went bust very recently. Now, he wants to add ...
0
votes
1
answer
359
views
User root dissapear [duplicate]
I have a debian 8 box. It is a plesk server with 90+ websites.
It seems somebody access to my server and delete the user root. I go to /etc/passwd and the file is not owned by root:root is owned by ...
1
vote
1
answer
273
views
Change Windows non AD password from linux
How can I change a windows non-ad password from linux command line? I have access to the Admin account on the windows server 2016. The two server are not the same machine and I do not search for a ...
0
votes
2
answers
32k
views
How to Reset/Change Administrator ID/Password of Fuji Xerox DocuPrint CM305 df Printer
I forget the administrator ID and password of Fuji Xerox DocuPrint CM305 df printer. How to reset and then change them?
1
vote
1
answer
213
views
Windows Password reset over web
I have a maybe silly question. If you host a Website on an ISS web server and give your employees a link where they can authenticate with the windows passwords they use in the office.
Let's say john ...
3
votes
2
answers
11k
views
Enabling password expiry notification for RDP connections
We have an external user who connects to one of our servers only over Remote Desktop. The server has a local user account set up for him. The account security policy follows our normal conventions, ...
3
votes
1
answer
540
views
HTTPS over third-party SSH tunnel. Is it safe?
I just get a Linux server from a third-party. Then I create a SSH tunnel via SecureCRT: https://www.vandyke.com/support/tips/socksproxy.html , where the Linux server is used as the Gateway Server.
...
1
vote
1
answer
139
views
Identify the Master Server in an Active Directory listing
I have recently inherited a database server that the previous developers appear to have lost the Admin password for it. Speaking to the hosting providers they keep telling me that as it is a ...
6
votes
4
answers
42k
views
User can't change password due to complexity
At one of my customer's child domains, he has the problem that a number of (looks like) random users can not change their password due to "complexity blah blah". This is however not true, when:
a) An ...
0
votes
1
answer
455
views
Active Directory manually reset password validity
I have been asked to put the following one-time password scenario in place for our (small) Active Directory domain: whenever an administrator has to manually reset a user's password, the password ...