Hot answers tagged

104 votes
Accepted

Tool to test a user account and password (test login)

runas /u:yourdomain\a_test_user notepad.exe The utility will prompt for the password, if the right password has been provided, notepad will launch, if not it will produce error 1326: the username or ...
user avatar
41 votes

In the output of `last`, what does suffix ".d" after an IP address mean?

59.224.XX.178.d is not an IP-address but a hostname, or rather part of it. Last tries to do a reverse lookup and stores both the resulting hostname and ip-address for the remote host. By default the ...
user avatar
  • 70.8k
35 votes

how to disable SSH login with password for some users?

Match in sshd_config works well. You should use Match all to end the match block if you're using openssh 6.5p1 or above. Example: PasswordAuthentication no Match User root PasswordAuthentication yes ...
user avatar
32 votes

Login without running bash_profile or bashrc

You need to a) start bash without source'ing either ~/.bashrc or ~/.bash_profile and b) since such a shell wouldn't be a full login shell / have no tty attached, force ssh to attach a tty: ssh -t ...
user avatar
22 votes
Accepted

will hosting provider have access to my dedicated server?

Yes, they will have access to your server. If virtual, they have access through the virtualization console or container root. If physical, IPMI and out-of-band management provide access. They may have ...
user avatar
  • 194k
22 votes
Accepted

PermitRootLogin is no, I cannot login but why password is asked from user?

Why password is asked when it is not permitted?! The one of the rules of security is not to tell attacker if something is enabled/disabled. This is just one example. The other is logging in as non-...
user avatar
  • 9,075
18 votes
Accepted

lastLogon vs. lastLogonTimestamp in Active Directory

Use the most recent attribute. Lastlogon is only updated on the domain controller that performs the authentication and is not replicated. LastLogontimestamp is replicated, but by default only if ...
user avatar
17 votes

Can't login to SQL Server in Single User mode

Here's a solution I just found to this old issue: Stop all SQL services Start with -m Run MSSQL Management Studio As administrator If not started as administrator (as I wasn't), then you'll receive ...
user avatar
15 votes

Windows Server 2008 R2 RDP login paste password

Contrary to what the other "answers" for this question say (including the accepted one), there is indeed an easy way to do this, also if you (like me) for different reasons (most likely security ...
user avatar
13 votes
Accepted

What is the default root password for Zabbix Appliance 3.0?

For Version 3: https://www.zabbix.com/documentation/3.0/manual/appliance States that the default username and password for the front-end is: Admin zabbix and for the console it is appliance ...
user avatar
10 votes

lastLogon vs. lastLogonTimestamp in Active Directory

TL;DR - If you want the most accurate logon time, you must query the lastLogon attribute from all domain controllers. If a tolerance ±19 days is acceptable, then you can just read lastLogonTimestamp ...
user avatar
9 votes

What is the default root password for Zabbix Appliance 3.0?

For Version 4 and 4.2 (2019) https://www.zabbix.com/documentation/4.0/manual/appliance https://www.zabbix.com/documentation/4.2/manual/appliance Frontend username is: Admin (with capital A) ...
user avatar
9 votes
Accepted

Why is my auth.log file empty?

In Ubuntu systems rsyslog handles system logging, redirecting output from several daemons (such as sshd) to their respective logs according to its config. There are several config files that could ...
user avatar
8 votes

How to configure the login message in Ubuntu?

In my case, I had to clear /etc/update-motd.d/51-cloudguest, which read: #!/bin/sh # # This file is written by the Ubuntu image build process, it is not # managed by a package. If you want to avoid ...
user avatar
  • 185
8 votes
Accepted

AWS: how to log into management console in browser via *username*/password, NOT via *email*/password?

In https://My_AWS_Account_ID.signin.aws.amazon.com/console, the value you are looking for to replace My_AWS_Account_ID is not the username... it's the account name (the account under which the ...
user avatar
7 votes

Failing to connect to server via SSH - "Server refused to allocate pty"

If you have console access mount devpts /dev/pts -t devpts
user avatar
  • 71
7 votes

will hosting provider have access to my dedicated server?

In 2000 Microsoft published something very smart and is still (mostly) relevant today. The 10 Immutable Laws of Security http://technet.microsoft.com/library/cc722487.aspx Rule number three is "If ...
user avatar
7 votes
Accepted

PuTTY slow connecting to Linux SSH server

I'd also look at your DNS... maybe. Can the server you're connecting to resolve DNS properly? Could you add a temporary host entry with your source IP in the server to test? See: SSH takes about 30 ...
user avatar
  • 194k
7 votes
Accepted

Up-to-date alternatives of rssh or scponly

I recommend to just use the common chrooted internal-sftp that is included with most OpenSSH servers. SFTP clients are available on all operating systems so I do not see any problems with adoption. ...
user avatar
6 votes

Login without running bash_profile or bashrc

None of the above answers can bypass the login shell of ssh. You can pass a full command line, and so it runs the remote shell to process the command and set the working environment for the command. ...
user avatar
6 votes

In SQL Server, how do I create a login for an existing user?

As of SQL Server 2012, there's a T-SQL command to assign existing users to new logins. Create the login, but don't try to do User Mappings (it would fail). Then execute: use <existing_database&...
user avatar
  • 189
6 votes

will hosting provider have access to my dedicated server?

Depends on the provider. Usually if you change the password they don't have access anymore. However: They have physical access. They can just take out a disk from your RAID1 and have all your data. ...
user avatar
  • 17.3k
6 votes
Accepted

Slow logon via Remote Desktop to Server 2012 and Smart Card service errors

If you don't have a need to use Smart Cards for authentication, change the Startup Type of the the Smart Card Device Enumeration Service from Manual (Trigger Start) to Disabled. After doing so the ...
user avatar
6 votes

In the output of `last`, what does suffix ".d" after an IP address mean?

The -i makes 'last' show the remote hostname in dots and numbers IP address format instead of trying to display the hostname. I am not sure what the '.d' suffix is, nor can I find out anything on ...
user avatar
6 votes

Is there any way to log entered password from ssh?

You can visualize the failed user names after you turn up the verbosity of the log in sshd_config¹, but there is no way to see the failed passwords as this could be a potential security issue and ...
user avatar
  • 9,075
6 votes
Accepted

Someone just trying to hack me? login.cgi+wget

Your unwelcome visitor is not trying to hide his attempt to download and run some script on your server. He may be expecting that, not only you have such login.cgi script in place, it is also not ...
user avatar
  • 6,553
6 votes

AD/Kerberos authentication

Presumably DC1 is the domain controller which holds the PDCemulator FSMO role. Accordingly, on every bad password attempt, the authenticating Domain Controller checks with the PDCe before failing the ...
user avatar
  • 1,531
6 votes

How to know if a Active Directory user can log in interactively

An LDAP search is not enough, because the ability to perform an interactive logon is controlled by the security policy in the destination computer. The policy itself ("Allow Interactive Logon") can ...
user avatar
  • 68.2k
5 votes

How can I edit the welcome message when ssh start?

Could be modifying the /etc/issue file, try this: Current date: \d Current time: \t System name: \s Architecture: \m OS build info: \v Hostname: \n Kernel: \r Number of logged-in ...
user avatar
5 votes

will hosting provider have access to my dedicated server?

If you really need the best privacy you can get, just encrypt the data. As the other answers and comments say, if you don't do that, then there are methods to get the data out of your server.
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible