Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [shadow]

Shadow passwords is a security feature commonly used on Unix and Linux systems.

Filter by
Sorted by
Tagged with
0
votes
1answer
47 views

Why shouldn't LDAP support inequality searches on shadowExpire?

When I try to search my OpenLDAP 2.4.42 server for (shadowExpire<=18074), I get no results. However, a search for (shadowExpire=12671) yields several results. My ultimate goal is to periodically ...
0
votes
0answers
12 views

Security implications of making a program setgid shadow

I'm thinking about adding a small programm to the shadow group and setting its setgid bit: chown :shadow myprogram chmod g+s myprogram The program uses the Linux PAM library to authenticate users ...
0
votes
1answer
141 views

Linux custom NSS module, `_nss_SERVICE_getspnam_r` is called but `_nss_SERVICE_getpwnam_r` is not

I'm creating a custom NSS module. I managed to make it work on my local Redhat 7.3 box, configured nsswitch.conf correctly passwd: files SERVICE shadow: files SERVICE and confirmed that both ...
2
votes
1answer
732 views

Disabling logging in as root via kickstart? Advice recommendations?

This is a two part question. Firstly, I am just looking to validation, if I am doing this correctly since I am not sure how to test this. The goal is to disallow the login of the root account and have ...
1
vote
2answers
568 views

try to lock password but have no entry in /etc/shadow

Goal: Maintaining a former colleagues system, I want to lock all password logins in order to only allow ssh key based logins. Infos: The CentOS 6.5 system does not offer any network based ...
1
vote
1answer
208 views

Linux to Samba Automatical Password Synchonization

Nothing found at all on the Net: I'm looking up for an automatical synchonization of linux to samba (NOT Samba to Linux) passwords. I wrote a cgi web form that changes this password directly in the ...
4
votes
1answer
333 views

PAM vs /etc/shadow in Dovecot SASL configuration - Security differences?

I set up a server with Postfix SMTP auth through Dovecot SASL. However, it was not possible to get the PAM authentification working as standard out of the box. So more by chance, I changed it to ...
0
votes
1answer
4k views

Can't edit files /etc/passwd and /etc/shadow

I have some issues with files /etc/passwd and /etc/shadow. Both of them are without permissions: ---------- 1 root root 1357 Aug 5 11:30 passwd ---------- 1 root shadow 1175 Aug 5 11:30 shadow ...
20
votes
3answers
6k views

useradd not encrypting passwords in /etc/shadow

I stumbled accross this problem when trying to create new FTP users for vsftpd. Upon creating a new user with the following command and attempting login with FileZilla, I would get an "incorrect ...
-2
votes
1answer
352 views

Understanding linux /etc/shadow file structure (Linux) [closed]

Consider the following line taken from /etc/shadow file: root:$1$NFEf74q.$bmukkxAq9dOMJINgEtP7u0:15258:0::::: From this I understand that the hashing algorithm is md5 ($1) and starting from third $ ...
2
votes
2answers
2k views

Migrate user and passwords to new linux box

I am trying to migrate old Centos 4.3 box to Centos 7. I have followed the migration steps from an article published way long back on http://www.cyberciti.biz/faq/howto-move-migrate-user-accounts-old-...
1
vote
2answers
7k views

passwd: Authentication token manipulation error

I am running a Ubuntu 12 machine, and have recently been working to secure it. I made all the changes from this guide. I am not running a Linode, but I used these as a starting point for setting up ...
1
vote
1answer
115 views

updating shadow file in a KVM guest in a mounted system

I have a KVM guest that I need to reset the password. If I use 'virsh console' to access the guest account, I'm able to update the shadow file with a new hash line like '$6$avdwsefs$...
-1
votes
1answer
186 views

can't reset password from centos

I lost the root password. So I modified /etc/shadow and also changed '/etc/inittab' file to access single user mode. But both didn't work. It asked me for a password that I don't have. Why updating ...
-1
votes
2answers
88 views

manually editing shadow file on disk from raid1 array

At work we have a machine to which root password has been lost. I have pulled out the disk and mounted it to another computer. Now I think the next step should be editing root password in the shadow ...
3
votes
1answer
1k views

NIS: which mechanism hides shadow.byname for unpriviledged users?

On some Linux box (SLES 11.1) which is a NIS client I can do as root: ypcat shadow.byname and get output, i.e. some lines with the encrypted passwords, amongst other information. On the same Linux ...
6
votes
3answers
4k views

How are the hashes in /etc/shadow generated?

I was reading the Wikipedia article on the shadow file and it mentioned the format of the lines is like this: $id$salt$hashed So, my question is, how does it work? I tried to calcualte the hash for ...
5
votes
4answers
5k views

Is there a way to prevent password expiration when user has no password?

Okay, we all care about security so users should change their passwords on a regular basis (who said passwords are like underwear?). On redhat and centos (5.x and 6.x), it's possible to make every ...
0
votes
2answers
3k views

Change password hashing algorithm for SuSE users from blowfish to MD5

I have a network of roughly 1000 SuSE machines with 20-200 users on each. The password hashing algorithm used is the default i.e. blowfish. In order to check, whether a user has used a dictionary word ...
10
votes
1answer
12k views

How to generate a /etc/shadow compatible password for Ubuntu 10.04?

How are passwords generated that are used by Ubuntu 10.04? I know that they use SHA 512 as hashing algorithm, but I figure that there is some sort of salting done. I need to generate such a password ...
0
votes
3answers
473 views

RHEL not accepting any passwords

I have RHEL 5 on virtual machine installed. I was creating the new user by making entry in /etc/passwd. I deleted the /etc/shadow file and used pwconv command to make new shadow file. Now when i ...
3
votes
2answers
4k views

MySQL: Permit user to change his/her _own_ password

On a webserver there is a MySQL-service running, providing databases for the users of the server. Each user has it's own DB and it's own password and the right so INSERT/SELECT/UPDATE/DROP tables in ...
0
votes
2answers
3k views

Restore passwd for root on a server

      I have a DVR server with linux embeded. It has some telnet functions but i don't have the password for it (the chinese manufacturer refuses to give me the password). ...
4
votes
3answers
13k views

What is the `shadow` group used for?

On my Ubuntu 9.10 system, there's a shadow system group. There does not appear to be any user assigned to this group at all. The only files that I can find belonging to this group are /etc/shadow and /...
9
votes
6answers
32k views

How should someone create an encrypted password for /etc/shadow?

I am setting up a new account on a Linux box for Subversion repository access, and can send the password to the new user. However, I think there was a command line utility for this new user to encrypt ...
1
vote
2answers
135 views

Diskless login with Linux/OpenSolaris

Is it possible to enable a Linux or OpenSolaris based server to process standard unix login requests without spinning up the hard drive holding the root partition? I have a Nexenta-based (1) server ...