Questions tagged [authentication]
Use this tag for questions relating to authentication mechanism (i.e. proving to the system that you are you, using passwords, keycards etc.). In general don't use this and the security tag on the same question, unless it is about the security of the authentication process.
635 questions
0 votes
1 answer
37 views
Give run0 privileges to user1 (an admin) as root?
I am very paranoid about security, trying to push the limits. I am curious about nosuid because I think it is very cool that we can prevent files from executing with elevated permissions by setting it ...
0 votes
2 answers
80 views
What is /usr/sbin/authserver and the binary inside
When using the find command or any other recursive file searches, I always notice /usr/sbin/authserver in the context of a "permission denied" error. Just out of pure curiosity, what ...
0 votes
0 answers
58 views
Is it possible to configure OpenDoas to allow multiple password attempts before failure?
I'm using doas for privilege escalation together with a command-line program that calls into either sudo or doas (OpenDoas on Linux, this program does not support BSDs) for authentication when it ...
2 votes
0 answers
41 views
Linux login and unlock screen by two passwords + face recognition
How to configure PAM to asks for password, and try recognize of face or input additional password. I need to use sudo by face. Additional password is required to enhance security (nobody will run sudo ...
1 vote
1 answer
146 views
Samba authentication error: NT_STATUS_LOGON_FAILURE (linked with PAM: Account Validation Failed)
I would like to share a folder by a Samba server installed in my Linux (yocto) distribution. The configuration of my Samba server (file /etc/samba/smb.conf) The output of the command testparm -s is: # ...
3 votes
1 answer
206 views
ssh client automatically reject unknown host key
Is there a way to do this? My web search didn't find one. I'm familiar with StrictHostKeyChecking but there doesn't appear to be an "automatically reject" option. I'm wanting to move to ...
1 vote
1 answer
83 views
How to add Basic Auth credentials to Flatpak remote requests?
I need to host a private Flatpak remote with restricted access by using Basic Auth (login/password). All I need now is to make Flatpak client add Authorization HTTP header with credentials to all ...
0 votes
3 answers
702 views
What are the secure ways to use credentials in bash scripts?
I have a third-party service. Its API and credentials let me scrape service data on my local Linux machine. I want to use this API inside a bash script and launch it via cron, but I don't want to ...
0 votes
1 answer
414 views
fprintd times out
On login, sudo call, or any authentication attempt, the process hangs for a while, then prompts for password. Expected behavior: immediately display fingerprint prompt. Upon investigation, fprintd-...
1 vote
3 answers
164 views
Authenticate with a physical button
I have a Raspberry PI Pico laying around and I was thinking about creating a device that, when I need to authenticate myself on Linux, I could just click a button soldered to the Pico, which would ...
0 votes
0 answers
62 views
Trying to to install symas for openldap on an M3 Mac running Arm64 Rocky Linux 9 gives an error
First, we will install the packages onto VM1 with sudo wget https://repo.symas.com/configs/SOFL/rhel8/sofl.repo -O /etc/yum.repos.d/sofl.repo: [bill@target ~]$ sudo wget https://repo.symas.com/configs/...
0 votes
1 answer
60 views
Pam with krb5: very strange local user login, krb5 user login, root..no
This is my pam.conf for Slackware 15.0 #%PAM-1.0 # # Most of these PAM modules have man pages included, like # pam_unix(8) for example. # ################## # Authentication # ################## ...
0 votes
1 answer
44 views
Invalid Credential after defining users and OU
At first I define a new OU with the following LDIF with ldapadd -x -D "cn=admin,dc=nodomain" -W -f ./ou.ldif : root@debian:~# cat ou.ldif dn: OU=People,DC=nodomain objectClass: ...
0 votes
1 answer
107 views
changing password ldap_bind: Invalid credentials (49)
Information: I installed ldap-utils and slapd, during installation of slapd, with ncurses dialog, I imported password of administrator. Then I changed it via ldapmodify -Q -Y EXTERNAL -H ldapi:/// &...
1 vote
1 answer
1k views
Keycloak Authentication for Ubuntu 24.04 Login - New User Creation
I'm using Keycloak (version 26.1.0) as my identity provider for web applications and want to extend this to authenticate users logging into Ubuntu 24.04 workstations. I've successfully configured ...