On Mon, 2 Aug 1999 22:42:47 +0200 Jan Theofel
If you have many users, you might think of writing a script. But always remember: passwords MAY NOT handled as parameters for programs!!! Why not? since /etc/passwd fields are delimited by colons, a suid script could copy the salt and then put it somewhere else. Hell, you could even go as far as to right your own little program that takes in a password and gives the salt right back to you, since most of the dirty work is already in the c headers.
But don't ask me if Yast will like that. Only for the possibility that you'll use one day Yast again to add users. But I think it should be able to manage that. Uhm, Yast runs off of the same files as anything else, so it shouldn't barf over an altered /etc/passwd and /etc/shadow.
Totally unrelated question for the sizable german contingent on the list: what does GmbH stand for (both literally in german and english, as well as any nice condescending meanings for this guy with five meager and irregular years of school german)? dan ___________________________________________________________________ Get the Internet just the way you want it. Free software, free e-mail, and free Internet access for a month! Try Juno Web: http://dl.www.juno.com/dynoget/tagj.
-----Urspr|ngliche Nachricht-----
Von:
Totally unrelated question for the sizable german contingent on the list: what does GmbH stand for (both literally in german and english, as well as any nice condescending meanings for this guy with five meager and irregular years of school german)?
GmbH - Gesellschaft mit beschraenkter Haftung should be a description for a kind of company eq. to 'Limited' or 'Ltd.' Sorry, I'm not at home at the trading sector... :-) rgds. Frank
On Mon, 2 Aug 1999 earendil7@juno.com wrote:
Totally unrelated question for the sizable german contingent on the list: what does GmbH stand for (both literally in german and english, as well as any nice condescending meanings for this guy with five meager and irregular years of school german)?
GmbH = Gesellschaft mit beschränkter Haftung According to the Duden Oxford Dictionary, it is p.l.c. (brit.) which means public limited company. The other way round, Ltd. is also translated with GmbH. -- \ markus schaber -- http://www.schabi.de/ -- ICQ# 22042130 / ---------------------------------------------------------- \ Warum umständlich, es geht doch auch kompliziert! / \ (Eva Maria Schaber) --------------------------------
Hello!
If you have many users, you might think of writing a script. But always remember: passwords MAY NOT handled as parameters for programs!!! Why not? since /etc/passwd fields are delimited by colons, a suid script could copy the salt and then put it somewhere else. Hell, you could even go as far as to right your own little program that takes in a password and gives the salt right back to you, since most of the dirty work is already in the c headers. What I wanted to outline was that you may not handle it plain text. In this case such a simple shell script like
while [ true ] do (ps ax | grep passwd >>ausgabe) done would filter it out. And it doesn't matter with which rights the script runs. Bye, Jan -- +-------------------+--------------------------------------------------------+ | Jan Theofel | rst Unternehmensberatungs- und Handelsgesellschaft mbH | | Webadministrator | Bahnhofstrasse 35, 71272 Renningen | | | Tel.: 07159/800-450 Fax: 07159/800-451 | +-------------------+--------------------------------------------------------+
participants (4)
-
earendil7@juno.com
-
Frank Krüger
-
Jan Theofel
-
Markus Schaber