Moving etc/shadow & etc /passwd

Moving etc/shadow & etc /passwd

Post by Willia » Tue, 19 Jun 2001 02:14:15



I recently did an initial install of Solaris 8 and when I moved /etc/passwd,
etc/shadow and /etc/group from a backup to the new system no one could log
in. I noticed that if I reset a user's password they could login. What the
heck did I miss?
Will
 
 
 

Moving etc/shadow & etc /passwd

Post by Murphy Won » Tue, 19 Jun 2001 13:35:14


Did you try adding new users back to the /etc/passwd file, and then issue
command "pwconv" to create /etc/shadow?  Afterwards, issue command "passwd
username" to update the password?


> I recently did an initial install of Solaris 8 and when I moved /etc/passwd,
> etc/shadow and /etc/group from a backup to the new system no one could log
> in. I noticed that if I reset a user's password they could login. What the
> heck did I miss?
> Will

  murphy.vcf
< 1K Download

 
 
 

Moving etc/shadow & etc /passwd

Post by Steve Menar » Wed, 20 Jun 2001 08:30:04


The only thing I can think of is the encrypted passwd for the recovered
version of /etc/shadow, if from a different version of solaris may have
been different. There by causing the password to be incorrect. I have moved
these files many times amoung the same version of Solaris with no problem.
It used to be part of a basic installation in a previous life, copy
/etc/passwd, shadow, hosts, among other files to help maintain the same
basic setup across multiple servers.

Steve


> I recently did an initial install of Solaris 8 and when I moved
/etc/passwd,
> etc/shadow and /etc/group from a backup to the new system no one could
log
> in. I noticed that if I reset a user's password they could login. What
the
> heck did I miss?
> Will

--
Posted via CNET Help.com
http://www.help.com/
 
 
 

Moving etc/shadow & etc /passwd

Post by I.. » Thu, 21 Jun 2001 06:23:22


The password encryption algorithm changed in Solaris 8.  You cannot use
the shadow file from Solaris 7 nor 2.6.  I don't remember for sure but I
believe it's mentioned in the Advanced Installation Guide under the
JumpStart section.


> Did you try adding new users back to the /etc/passwd file, and then issue
> command "pwconv" to create /etc/shadow?  Afterwards, issue command "passwd
> username" to update the password?


> > I recently did an initial install of Solaris 8 and when I moved /etc/passwd,
> > etc/shadow and /etc/group from a backup to the new system no one could log
> > in. I noticed that if I reset a user's password they could login. What the
> > heck did I miss?
> > Will

 
 
 

Moving etc/shadow & etc /passwd

Post by Alan Coopersmit » Thu, 21 Jun 2001 12:44:12



|The password encryption algorithm changed in Solaris 8.  You cannot use
|the shadow file from Solaris 7 nor 2.6.  I don't remember for sure but I
|believe it's mentioned in the Advanced Installation Guide under the
|JumpStart section.

It's not mentioned anywhere because it's completely untrue.  Solaris 8
uses the same password encryption algorithm used by every previous
version of SunOS & Solaris, and almost every UNIX system ever made.

(Many modern systems offer alternatives, but I've never seen one that
 can't handle the original UNIX pwd crypt format.)

--
________________________________________________________________________


  Working for, but definitely not speaking for, Sun Microsystems, Inc.

 
 
 

Moving etc/shadow & etc /passwd

Post by I.. » Thu, 21 Jun 2001 13:06:56


Per the Sun instructor in my JumpStart class, the encryption has changed
in Solaris 8.  It was iterated several times for it's importance in the
creation of the sysidcfg file.  Can you explain your source?  Since you
work for Sun, perhaps you can verify it with their engineers.



> |The password encryption algorithm changed in Solaris 8.  You cannot use
> |the shadow file from Solaris 7 nor 2.6.  I don't remember for sure but I
> |believe it's mentioned in the Advanced Installation Guide under the
> |JumpStart section.

> It's not mentioned anywhere because it's completely untrue.  Solaris 8
> uses the same password encryption algorithm used by every previous
> version of SunOS & Solaris, and almost every UNIX system ever made.

> (Many modern systems offer alternatives, but I've never seen one that
>  can't handle the original UNIX pwd crypt format.)

> --
> ________________________________________________________________________


>   Working for, but definitely not speaking for, Sun Microsystems, Inc.

 
 
 

Moving etc/shadow & etc /passwd

Post by Tony Walto » Thu, 21 Jun 2001 18:18:25



> Per the Sun instructor in my JumpStart class, the encryption has changed
> in Solaris 8.  It was iterated several times for it's importance in the
> creation of the sysidcfg file.  Can you explain your source?  Since you
> work for Sun, perhaps you can verify it with their engineers.

Your instructor was either misinformed or unclear.  The default
encryption scheme is unchanged between Solaris 2.6/7 and 8.  One example
of why this has to be true - if 2.6/7 and 8 used a different encryption
scheme they couldn't both use the same encrypted password field from a
NIS server common to clients running both 7 and 8.

--
Tony