LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 09-15-2003, 03:58 PM   #1
tjm
Member
 
Registered: Oct 2002
Posts: 55

Rep: Reputation: 15
shadow file?


Hi all,

I understand that most linux distributions shadow passwords these days. A question though...

When I log in as root and do cat /etc/shadow, only the root password has the password hash filled in. Where are all the other user's hashes stored?

Cheers,

-TJM
 
Old 09-15-2003, 04:09 PM   #2
jpbarto
Senior Member
 
Registered: Mar 2003
Location: Pittsburgh, PA
Distribution: Gentoo / NetBSD
Posts: 1,251

Rep: Reputation: 45
they are (typically) stored in /etc/shadow... is your distro redhat or something? perhaps they moved the hashes elsewhere?
 
Old 09-15-2003, 04:14 PM   #3
tjm
Member
 
Registered: Oct 2002
Posts: 55

Original Poster
Rep: Reputation: 15
ok... some more info:

only root is corectly filled in.
most of the others entries have either * or !! instead of a hash.
of the ~100 or so other users of the system, their usernames are not even listed

Cheers,

-TJM
 
Old 09-15-2003, 04:45 PM   #4
jpbarto
Senior Member
 
Registered: Mar 2003
Location: Pittsburgh, PA
Distribution: Gentoo / NetBSD
Posts: 1,251

Rep: Reputation: 45
you can try pwconv (if the user passwords appear to be stored in /etc/password) to convert an existing /etc/password over to /etc/shadow
 
Old 09-15-2003, 05:23 PM   #5
Blinker_Fluid
Member
 
Registered: Jul 2003
Location: Clinging to my guns and religion.
Posts: 682

Rep: Reputation: 63
Are you talking about system users? like mail, apache, nobody, etc?
They won't have a password set by default... They might have something like !! or * where the password should be...
Check this page out:
http://www.tldp.org/LDP/lame/LAME/li...e-formats.html

Just watch out for ones that have username:: because they do not require a password to log in.

Last edited by Blinker_Fluid; 09-15-2003 at 05:32 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
/etc/shadow file missing Computergirl24 Linux - Software 3 08-28-2008 07:28 AM
shadow file os2 Linux - Security 3 10-18-2005 04:20 PM
Shadow File Crack Elbryan Linux - Security 2 02-22-2005 06:00 PM
CHPASSWD Help! Shadow File! clintonm9 Linux - Software 3 04-17-2004 10:15 AM
shadow file stevee Linux - Security 1 10-07-2003 11:11 AM


All times are GMT -5. The time now is 06:02 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration