Very Computer

by **simo** » Mon, 24 Jun 2002 23:28:13

seems the content is identical, if you don't choose the "Shadow passowrd"
option.

anybody can enlight me?

by **Rev. Don Koo** » Tue, 25 Jun 2002 00:55:53

> seems the content is identical, if you don't choose the "Shadow passowrd"
> option.

> anybody can enlight me?

In the beginning, all the information from both files was in the
"/etc/passwd" file. This allowed all users to see the encrypted
password of all other users which facilitated running cracking programs
against them. In the interests of security, the encrypted password
entries were removed from the "/etc/passwd" file and placed in the
"/etc/shadow" file which is only readable by root. Other fields were
also added to control when the account expires, how long a user can keep
the same password, etc...

Hope this helps,
Don

--
*********************** You a bounty hunter?
* Rev. Don McDonald * Man's gotta earn a living.
* Baltimore, MD * Dying ain't much of a living, boy.
*********************** "Outlaw Josey Wales"

by **Joe Blogg** » Tue, 25 Jun 2002 05:46:04

Quote:> seems the content is identical, if you don't choose the "Shadow passowrd"
> option.

> anybody can enlight me?

try the man pages

by **Chris Thomps** » Tue, 25 Jun 2002 07:07:50

>In article

>> seems the content is identical, if you don't choose the "Shadow passowrd"
>> option.

>> anybody can enlight me?

>Since Solaris doesn't have a shadow password option, I'm not sure I
>understand what your question is. It's obviously directed to a bunch of
>different groups in a attempt to gather information.

>The orginal /etc/password file on SunOS 4.x had a passwd field which is
>a 1-way crypt hash with 2 salt bytes. It required that UNIX systems
>have the /etc/passwd file readable by WORLD, which isn't as secure.
>Solaris 2.x took this design and added another file with additional
>features called /etc/shadow. It's supposed to be accessed (rw) only by
>root. It contains the hashed passwd and other fields (man shadow has
>them all).

SunOS 4.x, in its later days, did have the c2secure option that moved
the encoded passwords to /etc/security/passwd.adjunct, which provided
functionality roughly equivalent to Solaris 2's /etc/shadow.

Chris Thompson
Email: cet1 [at] cam.ac.uk

Very Computer

what's the difference between /etc/shadow and /etc/passwd?

what's the difference between /etc/shadow and /etc/passwd?

what's the difference between /etc/shadow and /etc/passwd?

what's the difference between /etc/shadow and /etc/passwd?

what's the difference between /etc/shadow and /etc/passwd?