LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 09-15-2003, 02:58 PM   #1
tjm
Member
 
Registered: Oct 2002
Posts: 55

Rep: Reputation: 15
shadow file?


Hi all,

I understand that most linux distributions shadow passwords these days. A question though...

When I log in as root and do cat /etc/shadow, only the root password has the password hash filled in. Where are all the other user's hashes stored?

Cheers,

-TJM
 
Old 09-15-2003, 03:09 PM   #2
jpbarto
Senior Member
 
Registered: Mar 2003
Location: Pittsburgh, PA
Distribution: Gentoo / NetBSD
Posts: 1,251

Rep: Reputation: 45
they are (typically) stored in /etc/shadow... is your distro redhat or something? perhaps they moved the hashes elsewhere?
 
Old 09-15-2003, 03:14 PM   #3
tjm
Member
 
Registered: Oct 2002
Posts: 55

Original Poster
Rep: Reputation: 15
ok... some more info:

only root is corectly filled in.
most of the others entries have either * or !! instead of a hash.
of the ~100 or so other users of the system, their usernames are not even listed

Cheers,

-TJM
 
Old 09-15-2003, 03:45 PM   #4
jpbarto
Senior Member
 
Registered: Mar 2003
Location: Pittsburgh, PA
Distribution: Gentoo / NetBSD
Posts: 1,251

Rep: Reputation: 45
you can try pwconv (if the user passwords appear to be stored in /etc/password) to convert an existing /etc/password over to /etc/shadow
 
Old 09-15-2003, 04:23 PM   #5
Blinker_Fluid
Member
 
Registered: Jul 2003
Location: Clinging to my guns and religion.
Posts: 683

Rep: Reputation: 63
Are you talking about system users? like mail, apache, nobody, etc?
They won't have a password set by default... They might have something like !! or * where the password should be...
Check this page out:
http://www.tldp.org/LDP/lame/LAME/li...e-formats.html

Just watch out for ones that have username:: because they do not require a password to log in.

Last edited by Blinker_Fluid; 09-15-2003 at 04:32 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
/etc/shadow file missing Computergirl24 Linux - Software 3 08-28-2008 06:28 AM
shadow file os2 Linux - Security 3 10-18-2005 03:20 PM
Shadow File Crack Elbryan Linux - Security 2 02-22-2005 05:00 PM
CHPASSWD Help! Shadow File! clintonm9 Linux - Software 3 04-17-2004 09:15 AM
shadow file stevee Linux - Security 1 10-07-2003 10:11 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 11:58 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration