Questions tagged [authentication]

Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.

Authentication methods are used to assure that a user has a claimed identity. These methods can be based on knowledge (e.g. a password or a key), on a token (e.g. a smart card), or on biometrics (e.g. a human fingerprint). Different methods can be combined to strengthen the assurance. If two methods are combined, this is called two-factor authentication, e.g. smart cards typically need to be unlocked by a PIN.

Use this tag if your question is primarily concerned about authentication mechanisms. If you tag your question with , then avoid the tag unless your question is about the security of a particular mechanism.

596 questions
111
votes
3 answers

Why is there a big delay after entering a wrong password?

I notice a weird (well, according to me) thing about passwords. For example, if I type an incorrect password during login, there will be a few seconds' delay before the system tells me so. When I try to sudo with a wrong password I would also have…
phunehehe
  • 20,030
  • 27
  • 99
  • 151
96
votes
13 answers

Meaning of “Connection closed by xxx [preauth]” in sshd logs

We have a Windows batch script, which connects automatically to a linux server via PLINK (putty). There is NO public private key authentication, the user and the password are in the script. On our linux server we have several sshd log entries…
Wolfgang Adamec
  • 1,353
  • 4
  • 12
  • 14
74
votes
5 answers

Allow user1 to "su - user2" without password

I need to allow user martin to switch to user martin-test without password su - martin-test I think this can be configured in /etc/pam.d/su. There are already some lines in that file which can be uncommented. However, I don't like the idea of…
Martin Vegter
  • 69
  • 66
  • 195
  • 326
73
votes
4 answers

Add a user without password but with SSH and public key

I want to add a user to Red Hat Linux that will not use a password for logging in, but instead use a public key for ssh. This would be on the command line.
user119776
  • 739
  • 1
  • 5
  • 3
72
votes
7 answers

Can I find out which ssh key was used to access an account?

Is it possible to find out which ssh key was used to access an account? I have an account on a server that I let several (trusted!) people have access to via ssh. I'd find it useful to be able to know who logged in and when. I have root access so…
Andrew Stacey
  • 2,355
  • 3
  • 19
  • 21
71
votes
3 answers

Permit root to login via ssh only with key-based authentication

I have some doubts about certain ssh server configurations on /etc/ssh/sshd_config. I want the next behavior: Public key authentication is the only way to authenticate as root (no password authentication or other) Normal users can use both…
mavillan
  • 3,067
  • 4
  • 22
  • 27
67
votes
5 answers

SSH keeps skipping my pubkey and asking for a password

Every time I ssh onto my remote server, I need to provide the password. I copied my public key (id_dsa.pub) to the remote server using: ssh-copy-id -i id_dsa.pub user@server I checked it was correctly added to authorized_keys. All the…
Damo
  • 771
  • 1
  • 5
  • 4
53
votes
6 answers

Gmail blocking mutt

When I try to log in to gmail with mutt, it flashes a quick Webalert with a url, something like accounts.gmail.com or something. It's too quick for me to see or copy it. Then it says Login failed. Then I get an email from Gmail saying: Google…
aharris88
  • 1,121
  • 1
  • 10
  • 13
37
votes
7 answers

Authentication is required to create a color profile

I am running a fresh install of CentOS 7 GNOME so I could RDP from Windows.  I followed the “Connect to GNOME desktop environment via XRDP” instructions, but when I connect I get an additional login that says authentication is required to create a…
Starblight
  • 544
  • 1
  • 5
  • 13
29
votes
3 answers

Authentication refused: bad ownership or modes for file /var/git/.ssh/authorized_keys

EDIT The issue as exposed here is solved (about files modes of the .ssh folder. But an other issue persists so I create a new question : > Unable to login with SSH-RSA key I can no longer connect with ssh-rsa key for a specific user, but it…
Rémi B.
  • 915
  • 3
  • 8
  • 15
24
votes
5 answers

Is the username in Unix case sensitive?

Is ssh abc@servername different from ssh Abc@servername? Does the case of the username matter in Unix? My user authenticates via LDAP.
saga saga
  • 249
  • 1
  • 2
  • 3
24
votes
5 answers

How to stop sudo PAM messages in auth.log for a specific user?

I am using Zabbix for monitoring my environment and zabbix_agentd executes as user zabbix one custom script every 60 seconds; it uses sudo to run this script as root. In /var/log/auth.log I see every 60 seconds: Aug 11 17:40:32 my-server sudo:…
user63431
22
votes
5 answers

How do I tell what program is asking for a password?

I'm getting an occasional "Authentication request" dialog from Gnome, and I don't know what program is asking or even which account it's talking about. [email redacted] is an email address of mine, but I've used that address for more than one…
cjm
  • 26,740
  • 12
  • 88
  • 84
22
votes
2 answers

PAM - required and sufficient control flag

I'm studying PAM, and I'm a bit clueless about the meaning of some combination of control flags. From the Red Hat documentation we have: required failure of such a PAM will ultimately lead to the PAM-API returning failure but only after the…
ludiegu
  • 1,607
  • 5
  • 21
  • 31
20
votes
2 answers

SSH authentication using gssapi-keyex or gssapi-with-mic (publickey not permitted)

My company has disabled SSH public key authentication, therefore I have to manually enter each time my password (I am not suppose to change /etc/ssh/sshd_config). However gssapi-keyex and gssapi-with-mic authentications are enabled (please see below…
oHo
  • 1,248
  • 1
  • 12
  • 22
1
2 3
39 40