[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] [Mips] Are these Passwords Shadowed?



James Hoaggs schrieb:

> 1) Are these passwords shadowed?
> root:9E8yTJJJJJfdW:0:0:Root:/root:/bin/sh <changed some for protection>
> admin:9E8yTJJJJJfdW:110:100:Administrator:/home/users/admin:/bin/bash

no.

> 2) If not, how does one go to shadow them.  I can not find a /etc/shadow
> file, and the /etc/passwd has these permissions:
> -rw-r--r--   1 root     root         1311 Dec  1 04:04 passwd

that`s okay, /etc/passwd must be world readable.

for this reason, passwords are normally shadowed, as /etc/shadow does
not have to be world readable.
that makes it harder to gain the (encrypted) passwords from /etc/passwd
and to run a brute force dictionary attack against them.

-- 

H. P.  Stroebel, Germany

CGI-FAQ for Raq-Newbies :
http://users.iol.it/hpstr/

Apollo 13 - Commander : "Houston, we have a problem"
Win2000 - Administrator : "Redmond, we have 64000 problems"