Mysql user - ? password

Hi all,
New to OS X but not Linux. I see that a user 'mysql' exists on my machine. I do not see any way to assign it a password so I can use it as the root account for mysql. (I had to install as machine root to be able to log in with 'mysql -u root -p' and then respond with the password.
It seems that the /usr/local/mysql directory should belong to mysql user instead of root.
Anyway, I do not see any way to use netinfo to set mysql's password.
Also, one big gap in the documentation on the Apple and MySQL web sites is that there is NO DISTINCTION between the machine's root user and MySQL's root user. Maybe there is none but that doesn't seem right to this neophyte.
Open to all constructive criticism. It you can point be to the right refs I am more than willing to read up on this topic.
Thanks,
Bob

Bob--
New to OS X but not Linux. I see that a user
'mysql' exists on my machine. I do not see any way
to assign it a password so I can use it as the root
account for mysql. (I had to install as machine root
to be able to log in with 'mysql -u root -p' and
then respond with the password.
The mysql user on OS X doesn't have a password: it's not a login user or has no shell. I'm not sure of the technical details, but basically, you don't deal with OS X's mysql user like a regular user.
It seems that the /usr/local/mysql directory should
belong to mysql user instead of root.
I think the only directory that has to belong to mysql is the data directory one level down from there:
<pre class="command">-rw-r--r-- 1 root wheel 19071 Jul 19 09:10 COPYING
-rw-r--r-- 1 root wheel 5712 Jul 19 09:25 EXCEPTIONS-CLIENT
-rw-r--r-- 1 root wheel 8117 Jul 19 09:25 INSTALL-BINARY
-rw-r--r-- 1 root wheel 1380 Jul 19 09:10 README
drwxr-xr-x 69 root wheel 2346 Nov 7 19:59 bin
-rwxr-xr-x 1 root wheel 801 Jul 19 09:33 configure
drwxr-x--- 21 mysql wheel 714 Nov 14 12:37 data
drwxr-xr-x 4 root wheel 136 Jul 19 09:33 docs
drwxr-xr-x 62 root wheel 2108 Jul 19 09:33 include
drwxr-xr-x 13 root wheel 442 Jul 19 09:33 lib
drwxr-xr-x 3 root wheel 102 Jul 19 09:33 man
drwxr-xr-x 13 root wheel 442 Jul 19 09:33 mysql-test
drwxr-xr-x 3 root wheel 102 Jul 19 09:33 scripts
drwxr-xr-x 5 root wheel 170 Jul 19 09:33 share
drwxr-xr-x 31 root wheel 1054 Jul 19 09:33 sql-bench
drwxr-xr-x 14 root wheel 476 Jul 19 09:33 support-files
drwxr-xr-x 21 root wheel 714 Jul 19 09:33 tests</pre>
Anyway, I do not see any way to use netinfo to set
mysql's password.
You use either mysqladmin or the mysql command line program (or some other program).
Also, one big gap in the documentation on the Apple
and MySQL web sites is that there is NO DISTINCTION
between the machine's root user and MySQL's root
user. Maybe there is none but that doesn't seem
right to this neophyte.
You're sort of right: that's not right. OS X has its users and MySQL has a completely different set of users. The MySQL root user has nothing to do with the OS X root user. And you can have dozens of users in MySQL without corresponding users in the OS. And none of them have to share passwords. Look at this page for more on granting users permissions in MySQL databases.
I'm sure you'll have questions, so post back if some of that doesn't make sense...
charlie

Similar Messages

  • Problem resetting mysql root password

    I have install 5.5.20 from mysql from the TAR file. that install was done from an admin user by the name of mysql. Using the mysql user, I have reached a point where I am unable to reset the root password. I have tried both method of resetting the password with no success. Here is what I did. (path omitted for brevity, but used in the commands)
    shell>mysqld_safe --skip-grant-tables
    shell>mysql
    mysql>UPDATE mysql.user SET Password=PASSWORD('newPass')
        -> WHERE User='root';
    mysqlQuery OK, 0 rows affected (0.05 sec)
    Rows matched: 0  Changed: 0  Warnings: 0
    shell> mysqld_safe
    shell> mysql -u root -p
    Enter password:
    ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)
    created an init file that had ths
    --------contents of minit-------
    UPDATE mysql.user SET Password=PASSWORD("newPass") WHERE User='root';
    FLUSH PRIVILEGES;
    ------------eof--------------
    mysqld_safe --init-file=minit
    killed mysqld
    mysqld_safe
    mysql -u root -p
    ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)
    By the way, I closely monitored the .err file and nothing unusual or pacular showed up there.
    Anyone see what I did wrong? Anyone have other suggestions?

    I have install 5.5.20 from mysql from the TAR file. that install was done from an admin user by the name of mysql. Using the mysql user, I have reached a point where I am unable to reset the root password. I have tried both method of resetting the password with no success. Here is what I did. (path omitted for brevity, but used in the commands)
    shell>mysqld_safe --skip-grant-tables
    shell>mysql
    mysql>UPDATE mysql.user SET Password=PASSWORD('newPass')
        -> WHERE User='root';
    mysqlQuery OK, 0 rows affected (0.05 sec)
    Rows matched: 0  Changed: 0  Warnings: 0
    shell> mysqld_safe
    shell> mysql -u root -p
    Enter password:
    ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)
    created an init file that had ths
    --------contents of minit-------
    UPDATE mysql.user SET Password=PASSWORD("newPass") WHERE User='root';
    FLUSH PRIVILEGES;
    ------------eof--------------
    mysqld_safe --init-file=minit
    killed mysqld
    mysqld_safe
    mysql -u root -p
    ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)
    By the way, I closely monitored the .err file and nothing unusual or pacular showed up there.
    Anyone see what I did wrong? Anyone have other suggestions?

  • MYSQL Root password

    Hi Guys,
    I'm rather new to all this PHP and MYSQL stuff, so please bear with me. I have downloaded and installed a copy of MYSQL and PHP, and am now trying to change tohe root password, but I keep getting an error message.
    I log in to MYSQL with:
    /usr/local/mysql/bin/mysql
    from there I type:
    UPDATE mysql.user SET Password = PASSWORD('****') WHERE User = 'root';
    but I keep getting an error message of:
    ERROR 1142 (42000): UPDATE command denied to user ''@'localhost' for table 'user'
    what have I got wrong?

    I've tried to follow the above advice.
    I've completely deleted my MySQl on OS X Server 10.4.7 and reinstalled using the lastest package "mysql-standard-5.0.24a-osx10.4-powerpc.dmg".
    I just cannot get mysql to work properly, to set my root password.
    See my first attempts with Terminal below (No.1)...
    MySQL Adminsitaror and CoCoa SQL connecs with no username or password.
    I've also tried to follow marcs advice at http://www.entropy.ch/software/macosx/mysql/ but to no avail.
    See my second attemps with Terminal below (No.2)...
    If I can crack how to reinstall and setup MySQL on OS X Server 10.4.7 then I'll have a good Disaster Recovery Plan, I hope you can help, thanks.
    No.1
    Last login: Fri Sep 22 17:26:02 on ttyp1
    Welcome to Darwin!
    Server:~ admin$
    Server:~ admin$ sudo /usr/local/mysql/bin/mysqld_safe --skip-grant-tables -u root &
    [1] 1014
    Server:~ admin$ A mysqld process already exists
    [1]+ Exit 1 sudo /usr/local/mysql/bin/mysqld_safe --skip-grant-tables -u root
    Server:~ admin$ sudo /Library/StartupItems/MySQLCOM/MySQLCOM stop
    Stopping MySQL database server
    Server:~ admin$ sudo /usr/local/mysql/bin/mysqld_safe --skip-grant-tables -u root &
    [1] 1066
    Server:~ admin$ Starting mysqld daemon with databases from /usr/local/mysql/data
    Server:~ admin$ sudo /Library/StartupItems/MySQLCOM/MySQLCOM start
    Starting MySQL database server
    Server:~ admin$ /usr/local/mysql/bin/mysql -u root
    ERROR 2002 (HY000): Can't connect to local MySQL server through socket '/var/mysql/mysql.sock' (13)
    Server:~ admin$ /usr/local/mysql-standard-5.0.24a-osx10.4-powerpc/bin/mysql -u root
    ERROR 2002 (HY000): Can't connect to local MySQL server through socket '/var/mysql/mysql.sock' (13)
    Server:~ admin$
    No.2
    Last login: Fri Sep 22 17:26:12 on ttyp1
    Welcome to Darwin!
    Server:~ admin$ sudo find /usr/local/mysql/data -type f -exec rm {} ';'
    Password:
    Server:~ admin$
    Server:~ admin$ sudo hostname 127.0.0.1
    Server:~ admin$ cd /usr/local/mysql
    Server:/usr/local/mysql admin$ sudo ./scripts/mysqlinstalldb
    Installing all prepared tables
    060922 17:35:30 [Warning] Setting lowercase_tablenames=2 because file system for /usr/local/mysql-standard-5.0.24a-osx10.4-powerpc/data/ is case insensitive
    060922 17:35:30 [Warning] No argument was provided to --log-bin, and --log-bin-index was not used; so replication may break when this MySQL server acts as a master and has his hostname changed!! Please use '--log-bin=127-bin' to avoid this problem.
    Fill help tables
    060922 17:35:31 [Warning] Setting lowercase_tablenames=2 because file system for /usr/local/mysql-standard-5.0.24a-osx10.4-powerpc/data/ is case insensitive
    060922 17:35:31 [Warning] No argument was provided to --log-bin, and --log-bin-index was not used; so replication may break when this MySQL server acts as a master and has his hostname changed!! Please use '--log-bin=127-bin' to avoid this problem.
    To start mysqld at boot time you have to copy support-files/mysql.server
    to the right place for your system
    PLEASE REMEMBER TO SET A PASSWORD FOR THE MySQL root USER !
    To do so, start the server, then issue the following commands:
    ./bin/mysqladmin -u root password 'new-password'
    ./bin/mysqladmin -u root -h 127.0.0.1 password 'new-password'
    See the manual for more instructions.
    You can start the MySQL daemon with:
    cd . ; ./bin/mysqld_safe &
    You can test the MySQL daemon with the benchmarks in the 'sql-bench' directory:
    cd sql-bench ; perl run-all-tests
    Please report any problems with the ./bin/mysqlbug script!
    The latest information about MySQL is available on the web at
    http://www.mysql.com
    Support MySQL by buying support/licenses at http://shop.mysql.com
    Server:/usr/local/mysql admin$ sudo chown -R mysql data/
    Server:/usr/local/mysql admin$ /usr/local/mysql/bin/mysqladmin -u root password operate
    /usr/local/mysql/bin/mysqladmin: connect to server at 'localhost' failed
    error: 'Can't connect to local MySQL server through socket '/var/mysql/mysql.sock' (13)'
    Check that mysqld is running and that the socket: '/var/mysql/mysql.sock' exists!
    Server:/usr/local/mysql admin$

  • How to change Analyzer user password with Administration API?

    Hi,<BR>I would like to change Analyzer user password with Administration API. Can someone post some sample commands to do the task?<BR><BR>I would just like to write an application to change end user's Analyzer password.<BR>As I see I would need to do the following:<BR>1. login with admin userid/password<BR>2. execute some method to change password for required userid. I think the input parameter should be userid (of the user I would like to change password) and new password (the new password for the user).<BR>3. logout<BR><BR>Can someone post some sample code (commands to execute)?<BR><BR>Thanks,<BR>grofaty<BR><BR>My system:<BR>Analyzer Server 7.0.1.<BR>Essbase server 7.1<BR>Windows XP SP2<BR>

    <blockquote>quote:<br><hr><i>Originally posted by: <b>knightrich</b></i><BR>Hello Mr. Jordan.<BR><BR>I would like to exchange some thoughts about "housekeeping" Analyzer reports in preparation for migration from Analyzer 7.0.0.0.01472 to 9.x:<BR><BR>...<BR><BR>Did you solved such a problem or do you have an idea if it could be solved with the Admin API methods?<BR> ...<BR>Migration from 7.00 to 9.x: As we heard last week the "Migration Wizard for Reports" in 9.3 should be able to migrate reports. Do you have experience or more detailed information about that Wizard?<BR><BR>Many thanks in advance<BR><BR>knigthrich<hr></blockquote><BR><BR>knighrich, <BR>I'd like to be more help, but I have no experience with System 9. I did substantial cleanup when we migrated from Analyzer 6 to Analyzer 7.1, and even more cleanup when moving up to 7.2, but our installation is smaller in scale than yours and we didn't need to automate report cleanup.<BR><BR>You might be able to get the ownership information you need through the back door, doing a direct query on the database, but simpler might be an export users, at least from 7.0. (This facility probably doesn't exist in system 9; it was dropped in 7.2 in favor of an undocumented API) The export file is an xml file that could easily be parsed to identify reports that have the administrator as user and then a second pass to delete those with otuer ownership as well. As previously suggested, you might be able to get this by a well crafted SQL query against the repository.<BR><BR>Procedurally, we have both public reports that have the blessing of management and are widely available, owned by a "public owner", and private reports developed by indivdual users and shared or not. Our team maintains the public reports, but not the private reports. We may be asked to make a previously private report public and take over maintenance of it. <BR><BR>I hope that you can find a solution that meets your needs. Certainly a call to customer support to identify a poorly documented feature would be in order.<BR>

  • HT204053 How do I create an Apple ID for my kids which are linked to my Apple ID so that they can make purchases without me having to tell them my user/password?

    How do I create an Apple ID for my kids which are linked to my Apple ID so that they can make purchases without me having to tell them my user/password?

    Welcome to the community.
    Unfortunately, you cannot do that. The first hurdle that you are going to face, is that mobile devices, by virtue of being prone to loss, will always require that a password is entered before a purchase of any kind is made.
    If your concern about the password, is related to your privacy in regard to your mail, contacts and calendar information rather than their acces to make purchases, then the best solution would be for you to use another Apple ID for iCloud.
    Apple have called the whole cloud thing iCloud, there are a number of features under the iCloud umbrella, some of which require their own login. iTunes is one of these, another is what Apple have unfortunately also called iCloud too.
    You can use the same Apple ID (account) to login to both iCloud and iTunes, but you don't need to and often users will login to each service using a different ID.
    The part that you need to remember is that the services available when you log into iCloud are completely different and unrelated to those when you log in to iTunes. Your iCloud login enables mail, contacts, calendars, find my phone, Back to My Mac, Documents & Data sharing and photostream, it does not affect any of your iTunes services.

  • Why have a default user password feauture?

    Hi,
      I (understood) read in the manual that there could be a default user password -
    28 BF 4E 5E 4E 75 8A 41 64 00 4E 56 FF FA 01 08
    2E 2E 00 B6 D0 68 3E 80 2F 0C A9 FE 64 53 69 7A.
    If the file is encrypted based one this key, readers can open the file without having to prompt for password though the file is encrypted. I want to know whats the point of this? It provides no security. All it ensures is the reader be sophisticated enough to have a security handler. I don't see the point. Is there any advantage of having such a pdf with default user password?.What was the motivation behind this?
    Thanks

    The Standard Security method of PDF supports TWO passwords - the user/open password and the owner/permissions password.  In addition, an encrypted PDF can have a set of rights (DRM) associated with it (eg. Don't print, don't copy, etc.)
    If you wish to control WHO can open the PDF, then you assign a user/open password.  If you wish to allow ANYONE to open the PDF, then you leave it as the default.
    Once the PDF is open (regardless of the open password), then the reader is responsible for respecting the DRM settings on the document.  However, if you are the owner of the PDF (and there is a permissions password), then you can get back FULL permissions by simply providing the owner password.
    Make sense now?

  • User Passwords Rejected on AFP share mounts?

    User Passwords Rejected on AFP share mounts?
    (OK, my last post got buried, and perhaps too long), try again. Very brief
    Issue:
    After so many days, a User's AFP share password is rejected? What gives.
    If you reset it, several days later, same thing, rejected.
    Is Netinfo Database corrupted, what can / should be done?
    - Stand Alone server (with AFP and FTP services running, all other services off, not running.
    Summary Info for user having issue:
    Location: 192.168.0.50/NetInfo/DefualtLocalNode
    Home: No Home Directory
    Primary Group: Users (20)
    Password: Shadow Password
    I have deleted that troublesome user name and created a new name (for that user), just in case, in the re-creation of the same user name (after deletion) some corruption gets inherited.
    thanks,
    macguitarman
    Power Mac G5 Dual 2.0   Mac OS X (10.4.7)  

    Using Tiger Server, I have found that enabling ACLs, or Access Control Lists on the volume, and then specifying users and/or groups into the specific ACLs for the share point has been very helpful. Also note that 10.4.10 server seems to work better than 10.4.11, so if you haven't upgraded, don't go beyond 10.4.10. .11 seems to have some permissions issues and other problems.
    I assume you are connecting to the server via AFS (i.e. Go > Connect to Server > ip address) and not SMB? SMB sometimes is more problematic about ownership. But either way, Mac or PC clients, it seems ACLs are the way to go.
    Crazy as it seems, on my server, even if the owner is, say, admin, and the group with r/w permissions is, say, Prepress, it helps to specifically add the Prepress group to the ACL for that share. Then be sure to propagate the permissions down (unless you don't want to, for some reason). To do this, click the little gear icon and propagate all the permissions -- owner, group, acl, etc. down. This will take a bit of time depending on how much stuff you have. I also find that a server reboot can be helpful.
    [[ All this said, 10.5.1 seems to do some crazy things, and I hope 10.5.2 addresses them. I have one machine (not user ID) that always creates a folder on a share with no permissions for anyone. Only from that Mac; the same login on another works just fine. Go figure]]

  • User Password change fails in OWA 2013

    User Password change fails in OWA with this error: Your password couldn't be changed. Make sure the old password you typed is correct and that the new password meets the minimum security requirements.
    We are migrating from Exchange 2007 to Exchange 2013.  Have mailboxes in both environments.  OWA 2007 password changes succeed (user mailbox is still in Exchange 2007).  When the user mailbox is moved to Exchange 2013, password changes fail
    with the above error.
    We have the Exch 2013 servers are on Windows 2012 and we are running Exch 2013 CU3.   We have made changes to the Default Role Assignment Policy to prevent users from changing Contact information and setting user photos, etc.  We are not exactly
    sure when user password changes stopped working, or even if they ever did work, although we recently installed our Prod Exch 2013 servers alongside our 2007 servers without any RBAC delegation implemented and a quick test of a user password change was successful.
    I reversed all the changes to the Default Role Assignment Policy but the password change still fails.

    Hi,
    Please try the following steps in your CAS server:
    1. Click Start > Run and type regedit and click OK.
    2. Navigate to the "HKLM\SYSTEM\CurrentControlSet\Services\MSExchange OWA" key.
    3. Set the ChangeExpiredPasswordEnabled value from 1 to 0.
    4. Close regedit and re-open it.
    5. Set the ChangeExpiredPasswordEnabled value from 0 to 1.
    6. Close regedit.
    7. After you configure this DWORD value, please reset IIS. The recommended method to reset IIS is to use IISReset /noforce from a command prompt.
    Here is the similar thread about password change issue in Exchange 2013 CU3, please refer to:
    http://social.technet.microsoft.com/Forums/en-US/30b74c81-9b98-46f4-9ca0-1c3bb74f4a3f/users-with-expired-passwords-or-change-password-at-next-logon-unable-to-change-password-via-owa-in?forum=exchangesvrclients
    Hope it helps.
    Thanks,
    Winnie Liang
    TechNet Community Support

  • How to change user password from default realm programaticaly

    Hello,
    I would like to know if there are any ways to change a users password from a file
    realm through java classes ie . programaticaly.

    Thank you for the support.
    After looking at the code, I noticed RealmManager is not documented in the BEA
    Javadocs. Am I missing something or is it not documented. Lot of other methods
    also not documented. Do you have the latest Javadocs?
    Thanks
    John
    "Tom Moreau" <[email protected]> wrote:
    >
    See message #4589 - it posts the code magic needed
    to change the password. The caller doesn't have to
    be aware of which realm is being used - that's taken
    care of for you.
    -Tom
    "John M" <[email protected]> wrote:
    Hello,
    I would like to know if there are any ways to change a users passwordfrom
    a file
    realm through java classes ie . programaticaly.

  • Change User password not working in SAP ME 6.0

    Hi,
    In SAP ME 6.0 SP01 6.0.1.0 Counter 40, the activity "Change User Password" does not work for me or any other user.
    The activity window (Netweaver) shows, but in the top it says "An error occurred - contact system administrator".
    This is the output from the default trace file. Seems my user is not authorized, but where do I set this authorization?
    Br,
    Johan
    #2.0 #2011 09 06 11:15:11:064#+0200#Error#com.sap.security.core.wd.jmxmodel.JmxModelComp#
    #BC-JAS-SEC-UME#sap.com/tcsecumewduimodel#C0000AD3034800820000000100000450#9934850000000004#sap.com/tcsecumewdkit#com.sap.security.core.wd.jmxmodel.JmxModelComp#JONORD#16##380199ECD86811E088C3000000979802#ae0e9d52d86811e08e7a000000979802#ae0e9d52d86811e08e7a000000979802#0#Thread[HTTP Worker [@312363456],5,Dedicated_Application_Thread]#Plain##
    public void supplyCompany(IPrivateJmxModelCompInterface.ICompanyNode node, IPrivateJmxModelCompInterface.IContextElement parentElement)
    [EXCEPTION]
    com.sap.engine.services.jmx.exception.JmxSecurityException: Caller JONORD not authorized, required permission missing (javax.management.MBeanPermission -\#getCompanyConceptEnabled[:SAP_J2EECluster="",j2eeType=UmeJmxServer,name=IJmxServer] invoke)
         at com.sap.engine.services.jmx.auth.UmeAuthorization.checkMBeanPermission(UmeAuthorization.java:100)
         at com.sap.engine.services.jmx.JmxServerFrame.checkMBeanPermission(JmxServerFrame.java:101)
         at com.sap.engine.services.jmx.MBeanServerSecurityWrapper.checkMBeanPermission(MBeanServerSecurityWrapper.java:438)
         at com.sap.engine.services.jmx.MBeanServerSecurityWrapper.invoke(MBeanServerSecurityWrapper.java:288)
         at com.sap.engine.services.jmx.ClusterInterceptor.invoke(ClusterInterceptor.java:813)
         at com.sap.pj.jmx.server.interceptor.MBeanServerInterceptorChain.invoke(MBeanServerInterceptorChain.java:367)
         at com.sap.security.core.jmx._gen.IJmxServer$Impl.getCompanyConceptEnabled(IJmxServer.java:1415)
         at com.sap.security.core.wd.jmxmodel.JmxModelCompInterface.supplyCompany(JmxModelCompInterface.java:1498)
         at com.sap.security.core.wd.jmxmodel.wdp.InternalJmxModelCompInterface.supplyCompany(InternalJmxModelCompInterface.java:710)
         at com.sap.security.core.wd.jmxmodel.wdp.IPublicJmxModelCompInterface$ICompanyNode.doSupplyElements(IPublicJmxModelCompInterface.java:4301)
         at com.sap.tc.webdynpro.progmodel.context.DataNode.supplyElements(DataNode.java:110)
         at com.sap.tc.webdynpro.progmodel.context.Node.getElementListAsObject(Node.java:263)
         at com.sap.tc.webdynpro.progmodel.context.MappedNode.createMappedElementList(MappedNode.java:78)
         at com.sap.tc.webdynpro.progmodel.context.MappedNode.supplyElements(MappedNode.java:71)
         at com.sap.tc.webdynpro.progmodel.context.Node.getElementListAsObject(Node.java:263)
         at com.sap.tc.webdynpro.progmodel.context.MappedNode.createMappedElementList(MappedNode.java:78)
         at com.sap.tc.webdynpro.progmodel.context.MappedNode.supplyElements(MappedNode.java:71)
         at com.sap.tc.webdynpro.progmodel.context.Node.getElementListAsObject(Node.java:263)
         at com.sap.tc.webdynpro.progmodel.context.Node.getElements(Node.java:270)

    Hi,
    Change User Password screen is in fact user self services screen of NW UME and to access it, user must have Manage_My_Password action. Installation and Security Guide ask to assign this action to all roles.

  • How to prevent user password being reset to the same password?

    Hi,
    As you all know, domain admin has the power to reset user password.  Let's think of the following scenario:
    if an admin lets a user reset his password to use the same string, this action means he could nullify company policy on password which requires user's last N passwords being recorded in the history.
    We could very well imagine that the admin reset his own personal password in order to bypass company policy.
    I have asked partner forum to see if there's a way to prevent such thing, but the reply I got is "No".
    I wanted to know if anyone of you have any idea to prevent such thing from happening?
    Or if it's possible to get the hash value of users past N password to see if he's always using the same password?
    Thanks in advance for your ideas.

    Good rules is better alternative to complex policy.
    Combine password history with time interval between changes.
    Regards
    Milos
    You don't understand what I mean.
    He knows exactly what you mean. 
    check out this link below:
    http://technet.microsoft.com/en-us/library/cc757692%28v=ws.10%29.aspx
    Enforce password history
    The Enforce password history policy setting determines the number of unique new passwords that must be associated with  a
    user account before an old password can be reused .
    The possible values for this Group Policy setting are:
    A user-defined number from 0 through 24.
    Not defined.
    Discussion
    Password reuse is an important concern in any organization. Many users want to reuse the same password for their account over a long period of time. The longer the same password is used for
    a particular account, the greater the chance that an attacker will be able to determine the password through brute force attacks. If users are required to change their password, but nothing prevents them from using the old password or continually reusing a
    small number of passwords, the effectiveness of a good password policy is greatly reduced.
    Specifying a low number for Enforce password history allows users to continually use the same small number of passwords repeatedly. If you do not also set Minimum
    password age, users can change their password as many times in a row as necessary in order to reuse their original password.
    If you set Enforce password history to a number greater than zero, users must come up with a new password every time they are required to change their old one. This
    improves security, but it can increase the risk that users will write down their passwords so they do not forget them.
    If you set the value to the maximum of 24, it helps to ensure that vulnerabilities caused by password reuse are kept to a minimum.
    For this policy setting to be effective in your organization, configure Minimum password age so that you do not allow passwords to be changed immediately. Enforce
    password history should be set at the level that combines a reasonable maximum password age with a reasonable password change interval requirement for users.
    Location
    GPO_name\Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy\
    Every second counts..make use of it. Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
    IT Stuff Quick Bytes

  • Multiple users\passwords on the same website with Safari

    Coming over from Netscape for MAC to Safari.
    Here is the issue-- In Netscape I was able to have multiple users/passwords for the same website page. Netscape controls its users/passwords; not the keychain. With Safari everytime I try to enter the second user/password this wipes out the first user and password.
    Is there a way with Safari to have mutlple users/passwords for the same website page?
    Thanks,
    Reed

    A service might call the other one.

  • [SOLVED] How to get sudo and kdesu to honor my user password?

    Hi folks,
    Well, I must be missing something. I think I've tried everything listed here https://bbs.archlinux.org/viewtopic.php?id=143487 and in the referenced links, but I still have the problem of my system rejecting my password for some uses of sudo and kdesu but not others.  I've included my /etc/sudoers file below.
    My problem may be due to screwing around with users:  I started out using bruce (1000), then switched to bbraley (1001), then deleted bruce in kusers, then changed bbraley to 1000. When that created more problems without solving the original one, I switched back to 1001.  I've played with adding and removing my user from groups, including creating a sudo group, making sure I am a member of wheel group, etc. 
    What seemed to be everyone's magic fix,
    pacman -S pambase
    didn't work when I tried it successfully with my bbraley password, then later, when that began failing, using the root password. pambase reinstalls, but there is no resulting change in the behavior of sudo.
    Side question: Most of my experience is with kubuntu in which I never created a root user and never had any trouble having my user password work with sudo or kdesu. Is there a reason Archwiki beginners guide suggests assigning a separate root account and password?
    Can anyone help?
    Here's the output of
    groups
    root adm disk wheel log locate network video audio optical storage scanner power users nm-openconnect systemd-network bbraley sudo sddm
    Here's the output of
    cat /etc/group |grep `id -un`
    root:x:0:bbraley
    adm:x:4:root,daemon,bbraley
    disk:x:6:root,bbraley
    wheel:x:10:root,bbraley
    log:x:19:root,bbraley
    locate:x:21:bbraley
    network:x:90:bbraley
    video:x:91:bbraley
    audio:x:92:bbraley
    optical:x:93:bbraley
    storage:x:95:bbraley
    scanner:x:96:bbraley
    power:x:98:bbraley
    users:x:100:bbraley
    systemd-network:x:193:bbraley
    nm-openconnect:x:104:bbraley
    sddm:x:619:bbraley
    bbraley:x:500:
    sudo:*:501:bbraley
    Here's what
    ls -l /etc/sudoer
    yields:
    -r--r----- 1 root root 2948 Mar 22 07:25 /etc/sudoers
    And here's my sudoers file:
    ## Defaults specification
    ## You may wish to keep some of the following environment variables
    ## when running commands via sudo.
    ## Locale settings
    # Defaults env_keep += "LANG LANGUAGE LINGUAS LC_* _XKB_CHARSET"
    ## Run X applications through sudo; HOME is used to find the
    ## .Xauthority file. Note that other programs use HOME to find
    ## configuration files and this may lead to privilege escalation!
    # Defaults env_keep += "HOME"
    ## X11 resource path settings
    # Defaults env_keep += "XAPPLRESDIR XFILESEARCHPATH XUSERFILESEARCHPATH"
    ## Desktop path settings
    # Defaults env_keep += "QTDIR KDEDIR"
    ## Allow sudo-run commands to inherit the callers' ConsoleKit session
    # Defaults env_keep += "XDG_SESSION_COOKIE"
    ## Uncomment to enable special input methods. Care should be taken as
    ## this may allow users to subvert the command being run via sudo.
    # Defaults env_keep += "XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER"
    ## Uncomment to enable logging of a command's output, except for
    ## sudoreplay and reboot. Use sudoreplay to play back logged sessions.
    # Defaults log_output
    # Defaults!/usr/bin/sudoreplay !log_output
    # Defaults!/usr/local/bin/sudoreplay !log_output
    # Defaults!REBOOT !log_output
    ## Runas alias specification
    ## User privilege specification
    root ALL=(ALL) ALL
    ## Uncomment to allow members of group wheel to execute any command
    ##%wheel ALL=(ALL) ALL
    ## Same thing without a password
    %wheel ALL=(ALL) NOPASSWD: ALL
    ## Uncomment to allow members of group sudo to execute any command
    %sudo ALL=(ALL) ALL
    bbraley ALL=(ALL) ALL
    ## Uncomment to allow any user to run sudo if they know the password
    ## of the user they are running the command as (root by default).
    Defaults targetpw # Ask for the password of the target user
    ALL ALL=(ALL) ALL # WARNING: only use this together with 'Defaults targetpw'
    ## Read drop-in files from /etc/sudoers.d
    ## (the '#' here does not indicate a comment)
    #includedir /etc/sudoers.d
    Last edited by Bruce1956 (2015-03-28 05:16:03)

    Trilby wrote:I've never used the targetpw setting, but I wouldn't be surprised if that was the problem.  With that setting, if you want to run something as root (the default use of sudo) then you'd need the root password, not the user password.  Comment out that setting, and the next line.
    I had never used it, either, but I misread some reference and thought it might help. Since you say it causes the behaviour I'm trying to eliminate, I will get rid of it, as suggested. However, the behavior preceded my addition of this line in the file, so I don't think this will correct the problem. Edit: Removing it kept the root password from being universally required (I can now edit /etc/sudoers using my user password) and returned it to requiring it sometimes (I still need the root password to use kdesu).
    As for some other distro not having a root account, that is simply impossible.  There was a root account.  If you didn't have the password for it, then that installation was severely crippled.
    Sorry, you're right. I should have said that kubuntu does not expect users to assign a password to the root account and instead expects primary users to access that account's privileges via su, sudo, or kdesu only.
    https://help.ubuntu.com/community/RootSudo
    By default, the root account password is locked in Ubuntu. This means that you cannot login as root directly or use the su command to become the root user. However, since the root account physically exists it is still possible to run programs with root-level privileges. This is where sudo comes in - it allows authorized users (normally "Administrative" users; for further information please refer to AddUsersHowto) to run certain programs as root without having to know the root password.
    Thanks for responding to my request for help. Any other ideas?
    Edit:  Here's what I keep getting that only accepts the root password, not my user password
    http://s15.postimg.org/4z0o86oln/Runasroot_KDEsu.png
    -- mod edit: read the Forum Etiquette and only post thumbnails http://wiki.archlinux.org/index.php/For … s_and_Code [jwr] --
    Last edited by Bruce1956 (2015-03-23 04:41:06)

  • How to get rid of the user password during start up of the newly upgraded 10.6 Mac to 10.7 Lion?

    Hi All,
    I previously ran Mac 10.6 Snow Leopard on my MacBook. I upgraded to 10.7 Lion today and it was successfully done. After the Mac had restarted, it took me to the usual login page (now with grey background) and was asking me for a user password. I didn't set up a password on the 10.6. I only used to hit the Return key on the keyboard and the Mac was logging me in. And now with Lion, it asks for password and whenever I press the Return key on the keyboard, it does not log me in. It shows the password hint instead. The hint says "Wala" (A filipino term for "none". I indicated it like that when I setup my user account). And Lion does not let me login without typing in a password. I don't know what to type since I don't have a password setup. Is there a way to bypass this? Can someone help shed light on this? Thank you.

    As Baltwo said, you should have a password set on your computer for secutity reasons. You can set it to automatically log you on if you are the only user when starting up and you don't need to input the password.
    What Baltwo was getting to was to make sure nothing was in the field such as a space. Apparantly, it won't let you log into it without a password.
    I seem to remember a default password in past systems. I think it was computer. Try typing that in. If it doesn't work, then follow the steps in this article and set a password for your user account.
    http://osxdaily.com/2011/08/24/reset-mac-os-x-10-7-lion-password/

  • Multiple users password for some pages on iWeb site?

    Hi guys,
    I've been checking out this topic here on AD, but not really happy with what I found. Is there anybody out here who could help me with a multiple users password html code??? I want a "members only" link on the homepage linked to a page where people have to enter username and password and then go to a special "homepage" where they can click to different PDF files. It doesn't sound that hard, but again, I don't like the html codes I found so far. Hope there is someone out here who knows something nice.
    Thanks!!
    Marc : )

    Marc ~ You may have to +"think different"+ to integrate the following suggestion into your iWeb site, but take a look at: http://drop.io/about
    Here's an example: http://drop.io/alancito
    ...the password there is: guest1
    You'll find a downloadable PDF document at the bottom of that page and note that drop.io didn't require an email address, name or personal registration to set up the above “drop”.

Maybe you are looking for