Re: [SLE] passwd -d suse 9.3
Thorsten Kukuk <kukuk@suse.de> writes:
On Mon, Jun 20, Chadley Wilson wrote:
Greetings
In one of our systems we require the system to have no password for a specific user,
In 9.2 passwd -d <username> achieved this, how do I achieve it in 9.3?
In the same way, this was not changed as a view in /etc/shadow will show you.
While the password is removed, it is now impossible to log into an account using a totally empty password. (This may be caused by "blowfish" encryption, or it might be because of some option or feature of pam (personally, I just broke down and entered a password, but the original poster is correct.)
On Mon, Jun 20, Mark Gray wrote:
Thorsten Kukuk <kukuk@suse.de> writes:
On Mon, Jun 20, Chadley Wilson wrote:
Greetings
In one of our systems we require the system to have no password for a specific user,
In 9.2 passwd -d <username> achieved this, how do I achieve it in 9.3?
In the same way, this was not changed as a view in /etc/shadow will show you.
While the password is removed, it is now impossible to log into an account using a totally empty password.
Ah, but this is something completly different and has nothing to do with the original question.
(This may be caused by "blowfish" encryption, or it might be because of some option or feature of pam (personally, I just broke down and entered a password, but the original poster is correct.)
If the poster means the above, it he incorrect by asking the wrong question. "man pam_unix2", it is really simple. Thorsten -- Thorsten Kukuk http://www.suse.de/~kukuk/ kukuk@suse.de SUSE LINUX Products GmbH Maxfeldstr. 5 D-90409 Nuernberg -------------------------------------------------------------------- Key fingerprint = A368 676B 5E1B 3E46 CFCE 2D97 F8FD 4E23 56C6 FB4B
On Monday 20 June 2005 16:16, Mark Gray wrote:
Thorsten Kukuk <kukuk@suse.de> writes:
On Mon, Jun 20, Chadley Wilson wrote:
Greetings
In one of our systems we require the system to have no password for a specific user,
In 9.2 passwd -d <username> achieved this, how do I achieve it in 9.3?
In the same way, this was not changed as a view in /etc/shadow will show you.
While the password is removed, it is now impossible to log into an account using a totally empty password. (This may be caused by "blowfish" encryption, or it might be because of some option or feature of pam (personally, I just broke down and entered a password, but the original poster is correct.)
I can say I solved it by rebuilding pam login as follows: auth required /lib/security/pam_securetty.so auth required /lib/security/pam_unix.so shadow nullok auth required /lib/security/pam_nologin.so account required /lib/security/pam_unix.so password required /lib/security/pam_cracklib.so retry=3 password required /lib/security/pam_unix.so shadow nullok use_authtok session required /lib/security/pam_unix.so I know many people think this is crazy, so I just want to say that there are certian conditions in this world that call for measures that others may or may not agree with. In this case it is of absolute importance to have a password-less login, It is for a point of sale system and the keyboard does not have the normal keys (a,b,c,d,e,...), so we program one key to input the username. TIA -- -- Chadley Wilson Production Line Superintendant Pinnacle Micro Manufacturers of Proline Computers ==================================== Exercise freedom, Use LINUX =====================================
participants (3)
-
Chadley Wilson -
Mark Gray -
Thorsten Kukuk