*BSD News Article 36574


Return to BSD News archive

Path: sserve!newshost.anu.edu.au!harbinger.cc.monash.edu.au!bunyip.cc.uq.oz.au!munnari.oz.au!quagga.ru.ac.za!Braae!g89r4222
From: csgr@cs.ru.ac.za (Geoff Rehmet)
Newsgroups: comp.os.386bsd.questions
Subject: Re: Crypting passwords without passwd.
Date: 5 Oct 1994 19:06:43 GMT
Organization: Rhodes University Computing Services
Lines: 23
Message-ID: <36utg4$ams@quagga.ru.ac.za>
References: <36s8k8$9a6@sundog.tiac.net> <Cx7GMI.qw0@ns1.nodak.edu>
Reply-To: csgr@cs.ru.ac.za
NNTP-Posting-Host: braae.ru.ac.za
X-Newsreader: NN version 6.5.0 #4 (NOV)

In <Cx7GMI.qw0@ns1.nodak.edu> tinguely@plains.NoDak.edu (Mark Tinguely) writes:

>In article <36s8k8$9a6@sundog.tiac.net> mcgovern@spoon.beta.com (Brian McGovern) writes:
>>
>> I would like to be able to have a 
>>process create a set of files, much in the format of master.passwd, to be 
>>distributed to a limited number of machines to be used to actually create
>>the user/password database on each of these machines.

>build the file in the format of the master.passwd file (use two random seed
>charaters fed into crypt to build the password, for an example see:
>/usr/src/usr.bin/passwd/local_password.c), send it to the remote machine
>and then run /usr/sbin/pwd_mkdb on the file. Be careful about security
>holes you may introduce in the remote copy/remote shell commands.

I have used encrypted kerberised rcp to do this at one stage :-)

Geoff.
--
 Geoff Rehmet, Computer Science Department, Rhodes University, South Africa
  FreeBSD core team: csgr@freebsd.org          | ____   _ o         /\
  csgr@cs.ru.ac.za, geoff@neptune.ru.ac.za     |___  _-\_<,        / /\/\
  finger rehmet@cs.ru.ac.za for PGP public key |    (*)/'(*)    /\/ /  \ \