Re: [cobalt-users] Question about preventing a user of changing his password / John the Ripper

[elmer@xxxxxxxxxxxxxx]

On Wed, 7 Mar 2001, Craig Napier wrote:

} I'm curious if someone on the list who's using the program would mind
} sharing their cron-job entry as an example of how their calling the program
} on the RaQ's... I'm mostly concerned over CPU usage as well as the best
} method to use for calling various user accounts (to be checked)...

Hi Craig,

	I put the shell script which I call from cron and most
(gotta keep a few secrets up my sleeve) of the word lists we use on
our FTP server.

	john_fast.sh is the shell script. We just call it from cron
around 3:00 AM every morning. This pass uses the 'fast' mode. It it
puts too much strain on your server you've got other problems that
need to be looked at. The fast mode doesn't require much processing
power to run.

	ftp://ftp.webokay.com/pub/

	The full mode is another story. While we do run it, we do so
on our rysnc servers. Rather than waste the cpu cycles while they're
sitting there waiting to recieve the next daily backup, we run John
in the full mode against the shadow files from the last monthly
backup. Don't try running in the full mode on a live production
server :-)

	You'll find some of the word lists we use in the
appropriate directory.

	ftp://ftp.webokay.com/pub/word_lists/

	HTH