LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices


Reply
  Search this Thread
Old 02-17-2005, 04:18 PM   #1
outspoken
LQ Newbie
 
Registered: Nov 2004
Distribution: Gentoo
Posts: 24

Rep: Reputation: 15
echo user password


well., i know there is a command out there for it - i just can't remember it! =/

it could have been a script as well, but google.com/linux and a search on here give no results (or atleast not what i'm looking for).

as root i need to be able to see users passwords in clear text - needed to test a few things, 'su - $username' is not going to do the job here.

thanks!
 
Old 02-17-2005, 04:51 PM   #2
Dark_Helmet
Senior Member
 
Registered: Jan 2003
Posts: 2,786

Rep: Reputation: 374Reputation: 374Reputation: 374Reputation: 374
I don't believe there is such a utility. Or at least, I've never heard of it. Talk about a huge security hole if there is.

Instead of trying to crack your users' passwords, why not create a new, test account that you know the password for, and practice/experiment on it. Then delete the account when you're finished. If you need it to behave like a different user (through personal settings, etc.), then just copy of the home directory of the user you're trying to imitate to the home directory of the experimental user (and change the permissions of course).
 
Old 02-17-2005, 04:52 PM   #3
perfect_circle
Senior Member
 
Registered: Oct 2004
Location: Athens, Greece
Distribution: Slackware, arch
Posts: 1,783

Rep: Reputation: 53
I really don't think you can do that. The passwords are encrypted with one way encryption functions. Hackers, if the ever find a way to read the shadow file, they will do a brute force attack to decrypt it.

This is how the the authentication mechanism works:
You apply a new password:<string>
the system will use the encryption function and encrypt the <string>:
f(<string>)=<encrypted string>,
and then the encrypted password will be stored.
When someone logs in, the password he applies in the prompt, is encrypted and then compared with the stored encrypted password (<encrypted string>). If they are the same, the user logs in. If not, the users authentication will fail. The System does never decrypt the stored passwords. If it could do that, the whole encryption thing would be a joke.
The encryption function is constructed this way that there is no way to reverse this process. Only by trying passwords you can do that.

If you 've ever been a simple user in a Unix environment you should know that. If you forget your password, you go to the system administrator, you report him that, and he opens a prompt for you to apply a new password, but not even root knows your password.

Last edited by perfect_circle; 02-17-2005 at 05:01 PM.
 
Old 02-17-2005, 04:56 PM   #4
mikeyt_333
Member
 
Registered: Jun 2001
Location: Up in the clouds
Distribution: Fedora et al.
Posts: 353

Rep: Reputation: 30
There isn't a way to do this as root. It's a standard thing that even administrators, no matter what OS, can't see users passwords. As it has already been pointed out, this would present a major security flaw. You can, however, change a users password to anything and then you will know what it is.
 
Old 02-17-2005, 05:36 PM   #5
outspoken
LQ Newbie
 
Registered: Nov 2004
Distribution: Gentoo
Posts: 24

Original Poster
Rep: Reputation: 15
all of the above options are already known to me, but thank you for the replies. i could have sworn there was an echopass script that i had seen before, i must have been mistaken or it could have been for something altogether different than system accounts.

unfortunately there are a lot of variables in this scenario for me to duplicate and i was hoping for a quick fix instead of making another similar account.

thanks for the replies though, i'll put my quest for that script to rest as i'm sure it must have been for something other than - oh, it just came to me.. it was for mail accounts under vpopmail using the '--enable-clear-password' config switch. uhg, where is my brain! ;P
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
No echo for user id when logging in LORDL Linux - General 1 07-28-2005 12:21 PM
Help! Cannot Add a User to User Manager or Change Root Password lennysokol Linux - General 2 06-25-2005 09:59 AM
Samba -- XP user can log in to shares but smbclient user always gets password errors ejoe Linux - Software 3 04-18-2005 10:55 AM
what is the command to make a user change their password after creating a new user? naweenio Linux - Newbie 7 01-05-2005 07:07 AM
Kphone echo (echo echo) scabies Linux - Software 0 10-18-2004 02:59 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - General

All times are GMT -5. The time now is 02:19 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration