Page 1 of 2 12 LastLast
Results 1 to 10 of 20

Thread: Different password for screen lock?

  1. #1
    Join Date
    Jun 2008
    Location
    Hessia
    Posts
    303

    Question Different password for screen lock?

    How can I set a different password for the screen lock mechanism?

    I'm on Suse 12.3 with KDE 4.10.5. Since I sometimes need to ssh into my machine, I choose a long and strong account password. For boot-up, I use auto-login, since the laptop's bios secures booting both with a fingerprint-scan and a password for the hdd (which I think is good enough - or is it not?)

    However, whenever I shortly leave my machine or even suspend it to ram, I need the long password which is annoying (since I need to look it up in my password safe), so I sometimes do not lock it. However, I fear that my kids might try typing around on the keyboard at home, or that office mates might pull a prank at the office. So a simple password with 6 or 8 characters would suffice for the screen lock.

  2. #2

    Default Re: Different password for screen lock?

    On 09/24/2013 06:16 AM, STurtle wrote:
    >
    > How can I set a different password for the screen lock mechanism?
    >
    > I'm on Suse 12.3 with KDE 4.10.5. Since I sometimes need to ssh into my
    > machine, I choose a long and strong account password. For boot-up, I use
    > auto-login, since the laptop's bios secures booting both with a
    > fingerprint-scan and a password for the hdd (which I think is good
    > enough - or is it not?)


    I would not, and do not, rely on the BIOS for anything anymore, primarily
    because it takes about two minutes to remove a hard drive and then all you
    have is (possibly) the hard drive protection. Encrypting the entire drive
    with a strong passphrase, though, does a good job for these types of
    attacks, and includes startup.

    Regarding your SSH concerns, I would recommend disabling password-based
    logins for all users and then setup an SSH key for access. Forging one of
    those is much harder than guessing any reasonable password, and it also
    means you can speed up your access by no longer needing to type the
    password for every operation done (SSH, SCP, SFTP, etc.). All attempts to
    login via passwords from would-be intruders are destined to fail and you
    can use things like fail2ban to quickly block their IPs entirely, further
    protecting your system.

    Good luck.

  3. #3
    Join Date
    Jun 2008
    Location
    Groningen, Netherlands
    Posts
    19,867
    Blog Entries
    14

    Default Re: Different password for screen lock?

    Quote Originally Posted by STurtle View Post
    How can I set a different password for the screen lock mechanism?

    I'm on Suse 12.3 with KDE 4.10.5. Since I sometimes need to ssh into my machine, I choose a long and strong account password. For boot-up, I use auto-login, since the laptop's bios secures booting both with a fingerprint-scan and a password for the hdd (which I think is good enough - or is it not?)

    However, whenever I shortly leave my machine or even suspend it to ram, I need the long password which is annoying (since I need to look it up in my password safe), so I sometimes do not lock it. However, I fear that my kids might try typing around on the keyboard at home, or that office mates might pull a prank at the office. So a simple password with 6 or 8 characters would suffice for the screen lock.
    AFAIK not possible at the moment with the default desktop locker/screensaver. It's simply the user password the locker asks for, not just some password. So, either change your user's password to something you can remember, or learn the "hard" password by heart. But, you might take a look at the xlockmore package. From
    Code:
    xlock -help
    I get that one can provide a separate password for it.
    ° Appreciate my reply? Click the star and let me know why.

    ° Perfection is not gonna happen. No way.

    https://en.opensuse.org/openSUSE:Board#Members
    http://en.opensuse.org/User:Knurpht
    http://nl.opensuse.org/Gebruiker:Knurpht

  4. #4
    Join Date
    Feb 2009
    Location
    Spain
    Posts
    25,547

    Default Re: Different password for screen lock?

    On 2013-09-24 14:36, ab wrote:

    > Regarding your SSH concerns, I would recommend disabling password-based
    > logins for all users and then setup an SSH key for access. Forging one of
    > those is much harder than guessing any reasonable password, and it also
    > means you can speed up your access by no longer needing to type the
    > password for every operation done (SSH, SCP, SFTP, etc.). All attempts to
    > login via passwords from would-be intruders are destined to fail and you
    > can use things like fail2ban to quickly block their IPs entirely, further
    > protecting your system.


    On the other hand, once somebody gains access to your account, he has
    automatically access to all the sites you use ssh on. No password,
    remember...

    --
    Cheers / Saludos,

    Carlos E. R.
    (from 12.3 x86_64 "Dartmouth" at Telcontar)

  5. #5
    Join Date
    Feb 2009
    Location
    Spain
    Posts
    25,547

    Default Re: Different password for screen lock?

    On 2013-09-24 14:16, STurtle wrote:
    >
    > How can I set a different password for the screen lock mechanism?
    >
    > I'm on Suse 12.3 with KDE 4.10.5. Since I sometimes need to ssh into my
    > machine, I choose a long and strong account password. For boot-up, I use
    > auto-login, since the laptop's bios secures booting both with a
    > fingerprint-scan and a password for the hdd (which I think is good
    > enough - or is it not?)


    Are you using HDD firmware password? How do you do that? Does the bios
    ask for the password prior to booting?

    > However, whenever I shortly leave my machine or even suspend it to ram,
    > I need the long password which is annoying, so I sometimes do not lock
    > it. However, I fear that my kids might try typing around on the keyboard
    > at home, or that office mates might pull a prank at the office. So a
    > simple password with 6 or 8 characters would suffice for the screen
    > lock.


    Interesting. I would like that, too. No, I'm not aware of such a feature.


    --
    Cheers / Saludos,

    Carlos E. R.
    (from 12.3 x86_64 "Dartmouth" at Telcontar)

  6. #6

    Default Re: Different password for screen lock?

    Quote Originally Posted by Knurpht View Post
    But, you might take a look at the xlockmore package. From
    Code:
    xlock -help
    I get that one can provide a separate password for it.
    Not really, it asks for the password of the user who started it, see "man xlock":
    Code:
    DESCRIPTION
           xlock locks the X server till the user enters  their  password  at  the
           keyboard.   While  xlock  is  running,  all  new server connections are
           refused.  The screen saver is disabled.  The  mouse  cursor  is  turned
           off.   The  screen  is  blanked  and  a  changing pattern is put on the
           screen.  If a key or a  mouse  button  is  pressed  then  the  user  is
           prompted for the password of the user who started xlock.
    But then there's also the "allowroot" option:
    Code:
           -/+allowroot
                The allowroot option allows the root password to unlock the server
                as  well  as  the user who started xlock.  May not be able to turn
                this on and off depending on your system and how xlock was config-
                ured.
    So you would have at least the option to use two different passwords.

  7. #7

    Default Re: Different password for screen lock?

    Account passwords and SSH passphrases are not the same thing.

    Good luck.

  8. #8
    Join Date
    Jun 2011
    Location
    Germany
    Posts
    130

    Default Re: Different password for screen lock?

    Could he create a new kind of (dummy) user with an easy password and write a short shell script to "su" into that account and start xlock?
    The script could be put as and icon onto the desktop.
    The downside: The password would have to be entered one more time or put into the skript. So that dummy user shoudn't have any permissions at all aside from xlock and it may still be a security risk.

  9. #9
    Join Date
    Feb 2009
    Location
    Spain
    Posts
    25,547

    Default Re: Different password for screen lock?

    On 2013-09-24 15:43, ab wrote:
    > Account passwords and SSH passphrases are not the same thing.


    I know.

    --
    Cheers / Saludos,

    Carlos E. R.
    (from 12.3 x86_64 "Dartmouth" at Telcontar)

  10. #10

    Default AW: Re: Different password for screen lock?

    Quote Originally Posted by kasi042 View Post
    Could he create a new kind of (dummy) user with an easy password and write a short shell script to "su" into that account and start xlock?
    Yes, that would work, I just tried it. But you would have to grant that dummy user access to your X session with "xhost".

Page 1 of 2 12 LastLast

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •