darxus on Fri, 16 Jun 2000 22:31:06 -0400 (EDT)


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] stuied newbie problem...


On Fri, 16 Jun 2000, ChinFung wrote:

> i tryed to use the "passwd" command to create a no password user. but it
> won't let me, always say" password too short" or something like that. how
> could i do so?

Forgot to say the other part...

My last post was assuming you want to be able to login as this user
without giving a password.

If you want this user to not have a valid password, so that nobody can log
in as it.. 

if you're not using shadow, edit /etc/passwd.  If you're using shadow,
edit /etc/shadow.

delete what's between the 1st & second colon, and replace it with..
something else -- an "x" or a "*" will do.


Before shadow, the encrypted password (looks like random characters) was
put between the 1st & second colons of /etc/passwd.

With shadow, this entry is replaced with an invalid encrypted password
("x" is not the encrypted form of any password), and the encrypted
password data is moved to the /etc/shadow file, which only root, and
members of group "shadow" can read.

This is good, because if someone could get your encrypted passwords, they
could do a brute force attack on them with say, the program "crack", and
find all your bad passwords.  crack is a beautiful piece of work.

___________________
www.ChaosReigns.com


______________________________________________________________________
Philadelphia Linux Users Group       -       http://plug.nothinbut.net
Announcements - http://lists.nothinbut.net/mail/listinfo/plug-announce
General Discussion   -   http://lists.nothinbut.net/mail/listinfo/plug