Openwall Project   /home  Owl  JtR  Pro  crypt  pam_passwdqc  tcb  phpass  scanlogd  popa3d  msulogin  /  Linux  BIND  /  advisories  presentations  /  services  donations  /  wordlists  passwords  /  community  lists  wiki  CVSweb  mirrors  signatures
bringing security into open environments
 
This website is powered by Openwall GNU/*/Linux security-enhanced OS
[<prev] [next>] [thread-next>] [month] [year] [list] 
Date: Thu, 25 Nov 2004 16:19:40 +0300
From: Maxim Timofeyev <tmahome@....spb.ru>
To: owl-users@...ts.openwall.com
Subject: chpasswd bug?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello!

> old-Owl
www!root:~# adduser -r lotus
www!root:~# echo lotus:lotus | chpasswd
www!root:~# cat /etc/tcb/lotus/shadow
lotus:$2a$08$TWi3xgQwx7ERaxK/kvjxQOxFtChT/NpwVVjdesUIOAKbXJQv7kKJe:12747::::::

rpm -q shadow-utils
shadow-utils-4.0.0-owl16


> new-Owl (after big upgrade):
adduser -r lotus
echo lotus:lotus | chpasswd
cat /etc/tcb/lotus/shadow
lotus:lotus:12747::::::

why?

man chpasswd
"Without the -e switch, the passwords are  expected  to  be  cleartext"

shadow-utils-4.0.4.1-owl2

- -- 
Maxim Timofeyev
JabberID: tma@....spb.ru
E-Mail: tma@....spb.ru
WWW: http://tma.spb.ru
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQFBpdvuA3plQlX2rewRAsuWAJ0fNPobEZhoHh+f8/KdQkbLD2lsmQCePG65
XwrndPTr3VTapJhPkXhEIBw=
=wIsM
-----END PGP SIGNATURE-----

Hosted by DataForce ISP - Powered by Openwall GNU/*/Linux