On Mon, 6 Nov 2006, Jan Engelhardt wrote:
I do not know where/what program I installed that causes one system to send emails weekly telling of insecure passwords. I have 20 systems with the same rpm -qa list. One system weekly sends emails with a warning of using insecure password. Only one system does it. I would like to find out why only one of 20 systems does it. They are all using the same passwd group shadow file. And if I can believe
CHeck the mail headers from which host it comes.
I know the host that does the email. I know all the hosts that do not do
it. They all run seccheck
START_SECCHK=yes in /etc/sysconfig/seccheck
They all have john installed and when I run it does show the same
usernames with the weak passwords. What I can not figure out is why only
this one system generates the emails. They either all should or all not.
But this one system is the only one that does. I am stupped as to what is
different.
I have been going through /etc/sysconfig and all the files are the same
with the execptions of where they should be different because of system
names.
Thanks,
--
Boyd Gerber