Ubuntu Security :: Shutdown On 3rd Wrong Password?
Feb 7, 2011
Is there a way to have the system shut down automatically after a set number of wrong user password entries? Am using ubuntu and kubuntu on two different machines. Am thinking it would make sense to have this feature on an encrypted laptop system in case someone were to take it whilst it's on suspend, screenlock, hibernate or login screen and hence the disk is vulnerable.
I work on a product that have to start automatically an application. Running Opensuse 11.2 So in the inittab I have : 1:2345:once:/root/Velox/VeloxBoot.sh 2:2345:respawn:/sbin/mingetty tty2
In the VeloxBoot.sh, if I don't press any key, my application starts after a timeout. If the user presses a key I want to have a login prompt. Unfortunately, if I start /bin/login, I have a prompt with login, but once I enter my login, it does not ask for a password and it says wrong password
System time was drifting ahead increasingly for several days time in the end. This is what I did with the clock about 6 hours "in the future":
Quote:
sntp -P no -r pool.ntp.org hwclock --systohc
i.e. I got the (more or less) exact time from the time server and set the hardware / BIOS timer with this value.I renamed "/etc/adjtime" to beginn with a clean slate. During reboot (shut down phase) I noticed a message saying something like: "hwclock set to system time". I checked in the BIOS and there was a new time about one hour early(!). The boot phase then reset the time again, this time several hours forward (usually two to six hours). This is an iterating process, with a net gain of several hours per boot. It is not always whole hours -- like in a time zone error but it involves also minutes. System is set to UTC as affirmed by the "date" command. What could be the cause of this behaviour of the clock / timer?
I downloaded and installed Ubuntu-Server 11.04, then installed XFCE as a light weight, fast desktop. Then I installed Synaptic from apt-get. Now, Synaptic complains that I am entering the wrong password. I cannot log in to Synaptic at all.
everytime i try to vnc to my box, it pops up the keyring authentication, which is obviously a huge problem when logging in remotely.how do i change my keyring password to match my login password?
I'm trying to connect to my windows 7 computer via network from ubuntu 10.04. I get as far as this screen:
My problem is it always says I've entered the wrong password. I've tried the administrator account password and also the long windows 7 homegroup password.
I did a fresh install on this computer, ubuntu 10.10 server then put desktop on top of it.
I can run sudo -i, enter password, gain root access, but when i click system -> administration and it asks for my password, it always says my password is wrong.
I ran update manager, and my password worked fine there.
When i click system administration and run a task, the password screen looks different
Little more digging shows, it only occures on screens that use the login type of,
Enter the administrative password:
It doesn't even give me options for what user to use. And I am using the account created on install.
I know this has probably been asked too many times here but I need to secure my emails. Personal matters of course. But yeah. I use the program "Password and Encryption Keys" to generate a key to sign my emails with but I do not know what to do. To be blunt, I'm stupid when it comes to this. IF not, steps in creating a key? and giving it (my public key) to the significant other? Finding where both keys are? Implementing it into Thunderbird? If it helps any here's some extra information: Ubuntu distro: Ubuntu 10.04 Email client: Thunderbird
How can I force passwd to use a simple password?I want to change my passwd & delete passwd history (if stored).I plan on creating a Virtual Appliance that uses another password besides my testing password.
I've installed kubuntu in ubuntu 11.04 using the synaptic manager updates. After the completion of installation & after the reboot it is asking username & password, when I enter my ubuntu username & password it says it was wrong...
Seems like a nasty bug in F13.after typing in wrong password, a 2nd correct attempt on gdm (or kdm) leads to a dark screen with a dash cursor blinking on the upper left - have to turn machine off. Then on next login, memory seems to race until properly shut down.
When running Jaunty, I could press the power button and my laptop turned off. Now in Karmic, I am all the time asked to provide my password when shutting down. I am the only user. Can this be changed?
I already posted a topic similar to this concerning the Desktop OS version, but this deals with the Netbook because unlike the Desktop, the Netbook is less cooperative. Allow me to elaborate: Today (or rather yesterday since it's not after midnight where I am), I changed my password because I was hopelessly confounded about how to get my Wireless Network card up and running after it had been installed and I was allowing my dad to use it. This issue has since been resolved, however...
When I chose my password during the original installation, there was no mention of it being "too simple." This is where the Desktop OS and the Netbook OS differ. The desktop will let me change it in the terminal without any errors. The Netbook will not. When I've attempted to revert it back to the original, it will not let me do so in the User Profile or in the Terminal. The Passwords and Encryption Keys application also does not appear to help.
So now even after I've changed it to a different "complicated" password I am still prompted to insert two different passwords since I changed my user password but I am unable to change the password I input during the installation. A bit screwy methinks. This is extremely important. I'd like to know how to change the original installation password.
If I can't change the main password on my laptop then this is a serious potential security breach just waiting to happen (especially since it's on a laptop and I will be hauling it around with me) and I will most likely install a different OS if this isn't resolved --- It would be very unfortunate since I spent the whole day fixing it and I really enjoy the interface. Luckily I can live with this on my Desktop since I'm not going to be hauling it around with me everywhere when the school year starts.
I have a database created by an older program (not Access) that I need to open and retrieve information for my business. The manufacturer put a password on there so that only it's program could open it. I do not use that program, but it has information I need. Is there a way to find that password or circumvent the password altogether?
At the moment I am having a problem with the MySQL server on my VPS. It's a completely fresh install of both Debian 5 and MySQL but the problem is upon logging in I get:
[root@boris ~]#mysql -u root -p Enter password: ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)
Trying to set up my Yahoo account on KMail. After entering all the correct (as far as I know) server settings, ports, etc. and trying to check my mail from KMail, I get the following message.
Could not login to pop.mail.yahoo.com. The password may be wrong. The server said: "[SYS/PERM] pop not allowed for user."
The password is definitely right. What is going on?
I have a kickstart script that attempts to create user "joeblow" with an encrypted password. The user is created okay, but the password does not seem to "take". After installation is complete, and the system is rebooted, this is the relevant portion of /etc/passwd:
Code:
This is the relevant portion of /etc/shadow:
Code:
Where there are two exclamation points, I would expect the encrypted password (as is the case for the root user, which is also created in the kickstart file).
The relevant line in my kickstart file looks like this:
Code:
That password string, which is 34 characters, is the word "password", encrypted with this command:
Code:
Also in my kickstart file is this line:
Code:
After the install is complete, I reboot and attempt to log in as "joeblow", but no dice. If I log in as root, and manually put the above encrypted password into /etc/shadow for jowblow, I can then log in as joeblow.
I have been having a small problem since I upgraded from Jaunty to Karmic, whenever I shutdown or restart, root password is required due to multiple users being logged-in.
I have run ck-list-sessions, however I can not trace where (or what) session 5 is.
Code:
Since I have MythTV installed and there was a similar bug, I tried the following solution without any success: [url].
my laptop is shutting down after i type in the password to start the upgrade.
logs:
syslog
WARNING: Could not launch application 'gnome-user-share.desktop': Unable to start application: Failed to execute child process "/usr/lib/gnome-user-share/gnome-user-share" (No such file or directory)
auth.log
administrator : no tty present and no askpass program specified ; TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/shutdown -h now
We've just installed debian xfce lxde....after all this time to get it....when we boot up to the login screen it keeps saying wrong uder name or password
I'm suspicious that the context of /etc/sudoers is wrong. During the last upgrade to Fedora 14, RPM dropped /etc/sudoers.rpmnew, which had a different context than the real sudoers file. But, when I try to get SELinux to relabel the file (using restorecon or fixfiles), it refuses to make a change.
My laptop randomly shuts off, at first I thought it was an issue with the laptop overheating but during the install of 11.04 I made sure the laptop had a fan blowing on it constantly and checked it and determined it couldn't have overheated. My problem now is that I was able to use a live cd to access my old files but was presented with only two files stating that my files were encrypted, I'm don't ever recall encrypting my files and so I'm without a passphrase.
What I'm wondering, is there a way to gain access without the passphrase? Or is there a way to fix the corrupt install?
In our group we use NIS and have a group set up called netadmin which is given root privileges on each machine. Each machine also has a localuser called localuser created and used during installation. When logged in as a member of netadmin, attempting any action that requires root privileges (e.g. installing software in Ubuntu Software Center) results in a prompt asking for localuser's password, not the current user's password.
Does anyone know the cause? Configuration issue or Ubuntu issue? We can get around it.
In my logs for Apache I have lots and lots of failed attempts for incorrect incarnations of [URL]. None of them are anywhere near my alias for the index.php but yet phpmyadmin is broken. Is there away I can mess up robots like this. Send IP's that create multiple wrong page requests on my server back to their own IP address maybe? I would then just set thresholds to decide how strict to be. I did try fail-to-ban before but it is cryptic. I don't have it on this particular server.
I am using Fedora 10 .Generally to update I open a virtual console by pressing Ctrl-Alt-F2,login as root and give the "yum update" command.Then I continue using my graphical terminal for other tasks from the 'non-root' account..Now my room-mate comes uses my 'non-root' account to browse web for few minutes and then opens a terminal types "halt", ENTER and viola...! My root account seems to be insulted by a 'non-root' user!.When I am doing updates or other important work as root any silly user can just 'halt' my computer. Can somebody tell me how to set up my computer so that when root is logged in no other user can simply halt the computer.