Security :: Htpasswd Allows Incomplete Password?
Mar 9, 2011
I've setup .htpasswd and a .htaccess file.
The password is a0bc0def0g3
If i enter that password, it let's me in.
if i enter a0bc0def0g it also works. I've never seen this before and is totally weird.
View 3 Replies
ADVERTISEMENT
Jul 6, 2010
I have built a subversion server (1.6.12 version) on Centos 5.4. I created a database for the server for authentication user via database MySQL with mod_auth_mysql, but this make my subversion server is so slow when make a commit.
I think authentication through a file is fast , but I wish to connect the password in database (the password is created by PHP) to file. I used a file like this user:xxx xxx is the password which is got from database. But it's not ok.
View 1 Replies
View Related
Feb 4, 2010
I started to work on building a ftp by vsftpd in our lab (that's only for our lab members). I am going to setup some the virtual users for each of the member. We have a CentOS5 (without upgrade after the fresh installation). I try several ways to setup the vsftpd for virtual users. 1) with db4 2) with mysql 3) without database and use htpasswd. But all fails. Actually, I don't want to use database, so I am going to find out the reason of failure on 'htpasswd' method
My vsftpd is installed in /etc/vsftpd (for only using ftp account, it is no problem to login).
1) I setup an account called vftpuser and build the corresponding home (/home/vftpuser), and then I setup another account call usera and also create a directory within /home/vftpuser.
2) I use htpasswd to add passwd to usera and store the passwd in /etc/vsftpd/passwd.
3) I added the name of usera to /etc/vsftpd/user_list
4) I create a directory /etc/vsftpd/user to store a unique conf for each user (for usera, the conf named usera) which contains the local root for users, which is
[Code]....
View 1 Replies
View Related
Jun 14, 2011
everytime i try to vnc to my box, it pops up the keyring authentication, which is obviously a huge problem when logging in remotely.how do i change my keyring password to match my login password?
View 4 Replies
View Related
Oct 22, 2010
I know this has probably been asked too many times here but I need to secure my emails. Personal matters of course. But yeah. I use the program "Password and Encryption Keys" to generate a key to sign my emails with but I do not know what to do. To be blunt, I'm stupid when it comes to this. IF not, steps in creating a key? and giving it (my public key) to the significant other? Finding where both keys are? Implementing it into Thunderbird? If it helps any here's some extra information: Ubuntu distro: Ubuntu 10.04 Email client: Thunderbird
View 7 Replies
View Related
Jan 13, 2010
How can I force passwd to use a simple password?I want to change my passwd & delete passwd history (if stored).I plan on creating a Virtual Appliance that uses another password besides my testing password.
View 5 Replies
View Related
Oct 1, 2010
I have a database created by an older program (not Access) that I need to open and retrieve information for my business. The manufacturer put a password on there so that only it's program could open it. I do not use that program, but it has information I need. Is there a way to find that password or circumvent the password altogether?
View 1 Replies
View Related
Feb 27, 2011
I have created a sub directory on my box on a website for my company. It is a page that has links to my tools I want to use when I do service calls. Links that connect to my servers webmin etc. Of course I don't want them found by webcrawling bots. I have created a .htpasswd file using htpasswd -c /location/to/file/.htpasswd.
This file is located outside the web. Just under the public_html folder. Then I went to the sub directory I want to protect and added a text file named .htaccess. It contains:
/home/sites/www.domain.net/tech/
AuthType Basic
AuthName "Some long name"
AuthUserFile /home/sites/www.domain.net/.htpasswd
Require valid-user
ErrorDocument errornumber /home/sites/errorpages/403.html
I also opened the httpd.conf and changed AllowedOverride to All
The error document doesn't work either.
I then restarted the httpd service. I try to access the site and it lets me right in without asking for a password. It is apache 2xxx on Centos 4.5. Webmin under Apache confifirms all this.
View 12 Replies
View Related
Aug 3, 2010
I already posted a topic similar to this concerning the Desktop OS version, but this deals with the Netbook because unlike the Desktop, the Netbook is less cooperative. Allow me to elaborate: Today (or rather yesterday since it's not after midnight where I am), I changed my password because I was hopelessly confounded about how to get my Wireless Network card up and running after it had been installed and I was allowing my dad to use it. This issue has since been resolved, however...
When I chose my password during the original installation, there was no mention of it being "too simple." This is where the Desktop OS and the Netbook OS differ. The desktop will let me change it in the terminal without any errors. The Netbook will not. When I've attempted to revert it back to the original, it will not let me do so in the User Profile or in the Terminal. The Passwords and Encryption Keys application also does not appear to help.
So now even after I've changed it to a different "complicated" password I am still prompted to insert two different passwords since I changed my user password but I am unable to change the password I input during the installation. A bit screwy methinks. This is extremely important. I'd like to know how to change the original installation password.
If I can't change the main password on my laptop then this is a serious potential security breach just waiting to happen (especially since it's on a laptop and I will be hauling it around with me) and I will most likely install a different OS if this isn't resolved --- It would be very unfortunate since I spent the whole day fixing it and I really enjoy the interface. Luckily I can live with this on my Desktop since I'm not going to be hauling it around with me everywhere when the school year starts.
View 9 Replies
View Related
Dec 16, 2010
I have scripts in folders /opt/apache2/tools/ and also i have another folder called IDM under /opt/apache2/tools. i tried to configure htpasswd for just IDM folder only as below.
bash-3.00# pwd
/opt/apache2/tools
bash-3.00# ls -al
[code]...
View 12 Replies
View Related
Mar 4, 2010
Has anyone ever had any luck with htpasswd and htaccess on asterisk, I set it up on a test apache server in VMWare just to make sure I knew what I was doing, so It was a very basic html page that I used, however, when I go to implement it on one of my Asterisk Servers, It comes up with the following page after I type a user name and password credentials in:
***************************************************************************
Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.
Please contact the server administrator, webmaster@localhost and inform them of the time the error occurred, and anything you might have done that may have caused the error.
More information about this error may be available in the server error log.
Apache/2.2.9 (Debian) PHP/5.2.6-1+lenny4 with Suhosin-Patch Server at fred Port 80
***************************************************************************
Anyone know if its compatible? and if so, is there any tricks around this?
View 2 Replies
View Related
Feb 1, 2011
I followed the directions here: [URL] but now I get
Code: 500 OOPS: cannot locate user entry:music Login failed. I see no errors in my auth.log, and in my vsftpd.log I see Tue Feb 1 13:01:13 2011 [pid 2] CONNECT: Client "<omitted_ip>" Tue Feb 1 13:01:20 2011 [pid 1] [<username>] OK LOGIN: Client "<omitted_ip>" so it looks like the user is able to log in, but I can't tell what the issue is beyond that.
View 2 Replies
View Related
Apr 27, 2011
I'm using Debian Testing and I have a little problem with the fonts, fonts behave somewhat strange. Usually happens with Iceweasel, but I've noticed sometimes in the window list panel or terminal. To give you an idea of what I speak, I leave the image:
Look at the letter b, and not always the case with that letter, sometimes the S or L. I've tried several fonts. Even deleted the folder. fontconfig, but still happening. Has anyone had a similar problem? It can be a server problem with graphics? Using xserver-xorg-video-intel
View 4 Replies
View Related
Sep 28, 2010
A good deal of text on web pages are missing; also, the links are usually coming up not as text but, rather, as lines. I've 11.3 installed.EDIT: Ignore the below -- it seems that the server was just slow, is all.(I would have queried this via the listserve, but <opensuse+subscribe@opensuse.org> is not recognized by the mail server.)
View 1 Replies
View Related
Jul 3, 2010
I downloaded the oxygen cursors and oxygen cursors extras form the official ubuntu repos using synaptic. I am running gnome in ubuntu lucid with compiz and emerald. I installed them system wide by running
Code: sudo update-alternatives --config x-cursor-theme This means that they are displayed eveywhere. However, there appear to some bits missing from the cursor set. Specifically, the window resize icons and the drag and drop (move) icon. All other icons are displayed correctly. For the missing icons, it seems to fall back to the default ugly black x cursors. Has anybody else seen this, or have I installed these cursors incorrectly? Note I want to do this system wide so I have the same cursor even in my sudoed apps.
View 1 Replies
View Related
May 13, 2011
I'm building a symbol table and syntax tree using lex and yacc for a compiler.
I am stuck with an error for too long. I have defined two structures (one for Symbol Table and another for Syntax Tree).
Code:
typedef struct symbolTable{
char name[30];
.....
struct symbolTable *next;
[Code]......
here's the error:
bottomup.y:76: error: field 'info' has incomplete type.
I tried to define the structure definitions in a separate header file and included in .y file but it didn't work out.
I'm trying to get this done ASAP.
View 1 Replies
View Related
Feb 10, 2010
Going haywire on a new Centos 5.4 64bit install on vmware esx 4. I should know, but my mind is obviously fucked up today. I get the "distination unreachable", indicating something ICMP related, checked network setup, all looks like usual. Except my routing table lacks the 127.0.0.0 and 0.0.0.0 def. gw entries, as in this working box example:
192.168.9.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 192.168.9.1 0.0.0.0 UG 0 0 0 eth0
FWIW, during install, did the usual basic firewall steps, not'n extra added but SSH. Tried with/without iptables, no change; no wonder given the lacky routing table. Sure, I can add what's missing, but I'd like to know why it's missing; i.e. what I missed on basic setup, as I'm going to repeat this with a nof Centos/RHEL installations (replacing SLES).
View 1 Replies
View Related
May 17, 2010
Is it possible to change the log in password? Someone set this up for me and the password is too simple.
View 5 Replies
View Related
Mar 25, 2011
I tried to install Squeeze on a new laptop. The installation finished and I was able to log in, but a significant number of packages were missing, including network-manager and network-manager-gnome, OpenOffice, and gdebi. Everything under the System | Administration menu except Login Screen was missing. There's probably more missing, too, but I am not sure how to tell.
It happened a few times but with slightly different results (e.g. I think on one of the earlier install attempts, Iceweasel didn't get installed, but it was included in the most recent attempt). I tried installing using 6.0.1's CD 1, and 6.0.0's hybrid Live image on a USB stick (in both cases, the GNOME version). I had used the same USB stick to install Squeeze successfully on another laptop last week (i.e. I successfully got a complete, working install; I made no changes to the USB stick; then tried to install using it on this new laptop, and saw this behavior).
I tried using both the graphical and text installers. At the step asking what packages you want installed (which allows you to auto-install sshd or mail server, for example), each time I made no changes, so the 3 selected default settings (the first option, Desktop Environment, and the last 2 options, laptop and... whatever the other one is, I don't remember) should all have been installed.
I didn't use the net installer, and I ran the installer offline because both laptops require non-free firmware and I couldn't figure out last week how to get the installer to find that firmware (on another USB stick). So once I got to the GNOME desktop the most recent time, I copied the WiFi chip's firmware .deb onto the laptop and did a 'dpkg -i', then did the same thing to get network-manager-gnome and its dependencies installed; and once I connected to our network I started an 'apt-get install gnome' to try to get the entire desktop environment installed (that also installed the programs that show up under System | Administration).
Is there anything important I might still be missing? Is there a list of installed-by-default packages that I could compare against say a 'dpkg -l'? Does this sound like some sort of known issue?
View 3 Replies
View Related
Nov 18, 2009
So after deciding to upgrade the existing fedora install on my laptop from 11 to 12, I decided to use the preupgrade method. After grappling with the boot space issue by clearing out an old kernel that was deemed safe to remove by the python script on the preconfig wiki page and then using tune2fs, I left the computer to do it's thing, periodically checking back on it. I come back to my computer, and after an apparent restart I see this message spat out at me:
Code:
ramdisk: incomplete write (3537 ! 5123)
write error
kernel panic - not syncing : VFS : unable to mount root fs on unknown block (0,0)
I need this laptop up and running for tomorrow and I would appreciate any help given. I have a Fedora 11 live CD running on the laptop and there seems to be an extra 210 filesystem present with the folders efi, grub, lost+found in there, as well as some config files, elf-memtest86+-400, what seems to be .img file amongst other things. If necessary, I can provide a screenshot.
View 11 Replies
View Related
Dec 10, 2010
I make it a habit to review the logwatch reports regularly. I have been seeing this one from Anacron lately. I'm not sure exactly when it started, but it has been going on for a while now and started after the F13 to F14 upgrade. I have searched and tried to find out what it means, but have come up empty. This is the report:
[Code]....
Is this something that is just spurious and can be safely ignored? If this isn't, how do I go about fixing it?
View 6 Replies
View Related
Oct 16, 2010
I have setup FTP Server on my Windows machine with Filezilla server. Now, if I try to copy files from it using Ubuntu 10.04, Lucid, it downloads incomplete files if I don't switch to binary mode.
Is there some config issue from Ubuntu client or something needs to be changed from Windows Client.
View 4 Replies
View Related
May 26, 2011
Using Ubuntu Server 10.04 LTS. I'm new to Ubuntu and testing Rsync. I successfully copied 3TB of data from a Win7 machine to an MDADM Raid5 array. All appears to be fine. Used a Win app for the copy. I then deleted a 250GB folder on the Raid5 array and recopied the data using Rsync. Rsync was executed via a Putty session on a WinXP machine. The source was an eSata attached drive (same drive used for the big 3TB copy) and the destination was the same Raid5 array. That copied just fine. I bit verified it with a Win7 app. Perfect.
I then used the following Rsync script to copy a single 26GB file from that same eSata drive back to (what I intended to be) the Raid5 array:
Code:
neil@ANTECUBSV:/mnt$ rsync -r -a -v -e ssh --delete /mnt/disk1/Test/ /mnt/Test
sending incremental file list
created directory /mnt/Test
./ C_VOL-S300-b001.spf
sent 3020267622 bytes received 34 bytes 50760800.94 bytes/sec
total size is 3019898880 speedup is 1.00
neil@ANTECUBSV:/mnt$ cd raid
Note that only about 3GB copied. No error messages were posted to the putty session. I made a mistake in the Rsync command, creating the Test folder directly in the mount folder rather than the Raid array, as I intended. That is a little strange, yes, but I would not think it would cause a partial copy? The /mnt folder is on my system drive, which had about 34GB available space before the copy, so comfortably would have had 6GB or so after.
The eSata disk is mounted as /mnt/disk1
The Raid5 array is mounted as /mnt/raid
I then recopied the file to the correct intended destination on the Raid5 array, which has about 400GB free space (plenty).
Code:
neil@ANTECUBSV:/mnt/raid$ rsync -r -a -v -e ssh --delete /mnt/disk1/Test/ /mnt/raid/Test
sending incremental file list
./
deleting 2010-07-05 Backyard Birds/Thumbs.db
deleting 2010-07-05 Backyard Birds/
C_VOL-S300-b001.spf
sent 11105775462 bytes received 34 bytes 50366328.78 bytes/sec
total size is 11104419840 speedup is 1.00
neil@ANTECUBSV:/mnt/raid$ df -h
Note that only about 11GB was copied, and this was confirmed with an ls -l command. Now I am correctly copying the file to the Raid array but it is still incomplete. I then copied the file back to the /mnt folder to see if the problem reproduces:
Code:
neil@ANTECUBSV:/mnt/raid$ rsync -r -a -v -e ssh --delete /mnt/disk1/Test/ /mnt/Test
sending incremental file list
created directory /mnt/Test
./
C_VOL-S300-b001.spf
sent 26327927554 bytes received 34 bytes 56558383.65 bytes/sec
total size is 26324713984 speedup is 1.00
neil@ANTECUBSV:/mnt/raid$ cd /mnt/test
This time I got my full 26GB file. Why I might be getting inconsistent results? This is quite troubling of course. I'd also be interested in basic a command line Linux diff app (that does file directory as well as bit level checking) if one is available.
View 9 Replies
View Related
May 21, 2010
I'm trying to complete the porting to RHEL 5 of a commercial application that we've had running on AIX and SCO for decades. It originally ran on dumb-terminals, and even now runs on dumb-terminal emulators that run on Windows. We have thousands of customers, many of whom we'd like to migrate to Linux. We're pretty much done with the port, with the exception of this little glitch we're having with pseudo-ttys...
Our app utilizes pseudo-ttys, such that sub-portions of the application run under a screen manager that provides for screen-switching of multiple instances of the sub-apps on non-GUI terminals, some of which are still running serial. In this regard, it is not unlike the GNU "screen" program. However, it also supports file transfers over serial links using zmodem, and requires the ability to switch in and out of a fully 8-bit transparent mode where the screen switching keyboard commands must be ignored.
On AIX, we're using the BSD TIOCUCNTL (UIOCCMD) capability to send commands from the sub-app to the screen manager. TIOCUCNTL provides custom user ioctls and is an ideal way to solve the problem. It is not implemented on Linux, and the "alternative" of TIOCPKT does not provide arbitrary ioctls so at best we'd have to commandeer some of the existing TIOCPKT ioctls for our own use if that's even possible. TIOCPKT seems like a hack, it apparently was implemented not as a general mechanism but to solve problems specific to rlogin/rlogind.
SCO didn't support TIOCUCNTL either, so years ago we used the SVR5 alternative of putmsg/getmsg. This is a streams-based mechanism of sending control information over streams separate from the data. While RHEL 5 seems to have man pages indicating these commands exist, and in fact you can link programs using them to libc without errors, they are apparently stubbed out and return "function not implemented." This seems to be, according to this Wiki, due to certain Linux factions deeming that streams are "technically inadequate":
Certainly, I would agree that a streams implementation that is incomplete is undoubtedly "technically inadequate."
At the same time, it would appear that the SVR5 method of pseudo-tty is now the recommended implementation, the BSD one being "deprecated" (not to mention, also incomplete on Linux, given TIOCUCNTL is missing):
So here I am trying to figure out how to solve the problem. I have found a library that apparently implements the getmsg/putmsg commands for Linux, called libLiS. However, according to IBM, it has a problem with SELinux:
We've had to disable SELinux for other reasons anyway, so this is not a show stopper for us, and I am actively exploring using it as our solution. However, I've never been exactly crazy about the idea of depending on disabling security features to make something work. But, there's something to be said for the compatibility it would offer for our apps.
However, it occured ot me that we are probably not the first to have this problem, and was wondering if perhaps there is another solution that we should consider.
It has occured to me to use named pipes, but this would be rather ugly--we'd have to maintain a directory full of hundreds of named pipes, probably named after the associated ptys that the sub-apps could use to issue control commands to their screen manager, and the manager would have to monitor these pipes for commands, etc.-- certainly possible, but it seems like it might be re-inventing the wheel a bit, or at the very least, is a somewhat kludgy work-around to the apparent lack of any user-customizable control mechanisms in the pseudo-ttys. And we'd have to support it in addition to the code for the other methods since those platforms aren't going away anytime soon (SCO death-throes notwithstanding).
View 1 Replies
View Related
May 13, 2011
I'm trying to backup an ext3-formatted disk to an external USB disk, also formatted in ext3.rsync repeatedly reports those kind of errors : rsync: recv_generator: failed to stat "<filename>" : Invalid or incomplete multibyte or wide character.Following Google, this is usually related to NTFS-formatted drives but it is not the case here.A lead to the solution could be that the folders and files being backuped are mapped through smbd. My smbd.conf file contains the following lines regarding charsets : #Dos charset = 850#Unix charset = ISO8859-1Since those lines are commented out, I believe this defaults to UTF-8.
View 6 Replies
View Related
Sep 16, 2010
when i compile the device driver of led ,i get the erro like this:
[root@localhost led]# arm-linux-gcc -D__KERNEL__ -DMODULE -I /home/liumeng/lmldd
/linux-2.6.34.1/ -c -O -Wall led.c -o led.o
led.c:34: error: variable `GPIO_LED_ctl_ops' has initializer but incomplete type
[code]....
View 1 Replies
View Related
Feb 11, 2010
New Centos 5.4 64bit install on vmware esx 4, NAT net setup. I can ping/trace other servers on IP, do nslookup's on name..Ping(traceroute on name gets me "distination unreachable", indicating an ICMP issue, so I checked the network setup, all looks like usual.Well, except that my routing table lacks the 127.0.0.0 and 0.0.0.0 def. gw entries, as in this working box example:
192.168.9.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 192.168.9.1 0.0.0.0 UG 0 0 0 eth0
FWIW, during install, I did the usual basic firewall steps,including SSH.Tried with/without iptables, no change; no wonder given the lacky routing table. Sure, I can add what's missing to the routing table, but I'd like to know why it's missing; i.e. what I missed on basic setup, as I'm going to repeat this with a nof new installations (replacing SLES).
View 5 Replies
View Related
Feb 9, 2010
Simply, the number of possible combinations of passwords increases as an exponent of the number of characters used and as a factor of the number of characters available for use.
26 potential characters for a 2 character password results in 26^2 possible password combinations. This means that each new character added would result in an "order of magnitude" increase in the difficulty of brute force attack.
Using a phrase, complete with punctuation and capitalization is the very best mnemonic device to remember a password. Consider this, how hard is it to remember; The quick brown fox jumped over the lazy dog.
Than it is to remember, l33tsp34kp@ssw0rd
If we pretend that both of these passphrases are generated from a character set consisting of 26 characters, the first would be one of a possible 15274273784216769021564085930704478424313742483024 510976. The second would be one of a possible 1133827315385150725554176.
In short, use a passphrase not a password, they are much MUCH more secure.
View 14 Replies
View Related
Jan 22, 2011
I tried the following instructions to set up "ssh without passwords". But this didn't work.Could someone please tell how to debug this.
View 11 Replies
View Related
Jan 4, 2010
I'm new to ubuntu. Now iam using Karmic Koala. I want to change my password. So i used,
system->Administration->users and groups to change my password . As i entered my new password and clicked on 'Change Password', It is saying, 'password changed'. But when I click the close button in the main users and groups window, it is asking for my password, and I am forced to enter my old password only.
After the window is closed, i logout to check whether my password is changed. But it is not. I have to enter my old password to login.
View 9 Replies
View Related