I cannot get Shadow-3.3.1 to create shadow passwd file

I cannot get Shadow-3.3.1 to create shadow passwd file

Post by Kelly Fall » Mon, 16 Jan 1995 15:55:50



  I am running Linux 1.1.70.  I have Shadow-3.1.1 patched with
Shadow-3.1.1-2.dif.  It compiles fine. ('make' and 'make install' used)  BUT
it does not convert my etc/passwd and create a shadowed file, nor are the 16
character passwords in effect.  My syslog is shows login giving a message of:
no shadow password found for 'userbob'.  I can login in fine, just no shadowed
passwords.

  I've noticed a pwconvert program being used for other OSs, but the Linux
patch does not result in one.  Can someone please tell me what I am missing?


 
 
 

I cannot get Shadow-3.3.1 to create shadow passwd file

Post by Randy Za » Fri, 20 Jan 1995 00:27:37




>  I am running Linux 1.1.70.  I have Shadow-3.1.1 patched with
>Shadow-3.1.1-2.dif.  It compiles fine. ('make' and 'make install' used)  BUT
>it does not convert my etc/passwd and create a shadowed file, nor are the 16
>character passwords in effect.  My syslog is shows login giving a message of:
>no shadow password found for 'userbob'.  I can login in fine, just no shadowed
>passwords.

I did this recently (using a 1.1.59 kernel), and if I recall correctly, I
had to change all the passwords on the system using the new "passwd"
program.  This changed the password, and put the new password in the
shadow password file.  (I think I was even able to "change" them to the
same thing, but I don't recall exactly.)  Of course, I did this for the
accounts I have control over, and told everyone else on the system to
change their password _now_.

I also had problems with the syslog file, which was fixed by deleting the
old one, and letting the new shadow-system start over.

Now, all this was done a couple of months ago, in a state of frenzy, so I
may have missed a step or two, or mis-remembered something, so don't take
this as gospel.  But I hope this helps.

--

                                        Leave my nose alone please

 
 
 

I cannot get Shadow-3.3.1 to create shadow passwd file

Post by Christian Led » Tue, 24 Jan 1995 21:13:17


:   I am running Linux 1.1.70.  I have Shadow-3.1.1 patched with
: Shadow-3.1.1-2.dif.  It compiles fine. ('make' and 'make install' used)  BUT
: it does not convert my etc/passwd and create a shadowed file, nor are the 16
: character passwords in effect.  My syslog is shows login giving a message of:
: no shadow password found for 'userbob'.  I can login in fine, just no shadowed
: passwords.

:   I've noticed a pwconvert program being used for other OSs, but the Linux
: patch does not result in one.  Can someone please tell me what I am missing?


You will have to touch /etc/shadow into being and use 'passwd' to change
and recreate the password for each account. The new 'passwd' will store the
passwords in /etc/shadow.

Christian Leder

 
 
 

1. shadow files getting wiped out (standard passwd/shadow)

We run a SPARCserver 1000, 256 MB memory, 4 CPUs, Solaris 2.4, with
over 11,000 accounts at Northern Arizona University.  We have been using
the standard passwd/shadow file systems for dealing with passwords,
partly because of security concerns with NIS/NIS+, plus NIS doesn't have
a particularly easy way to reset passwords if the user has forgotten
his/her password (and that happens a lot here).  We have had bad experiences
with conflicts in running the passwd utility to change passwords; due to
what we have concluded are an insufficiently robust dile locking mechanism in
passwd (it just "touches" /etc/.pwd.lock) we have had several times a day for
the last few days had our shadow file completely disappear!  This chaotic
condition is claimed to be probably due to a run condition by Sun, but
Sun says nobody else has this problem, so istead of fixing it, they
recommended we switch to NIS or NIS+.  So, my question is, given our
university environment, how have other similar institues dealt with managing,
and changing passwords on large machines like this?  What security concerns
have been addressed?  How do you deal with forgotten passwords?  Is kerberos
potentially a better solution?  Feedback would be most appreciated.

-- Tobias

+=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=+

 Computing Technology Services                //\   .  ,     Tel: 520-523-6158
 Northern Arizona University                //   `\//\//\    Fax: 520-523-7407
 Box 5100 (Bldg. 54A, Knowles Drive)      //       `  `  `\
 Flagstaff, AZ 86011                  ---''      N.A.U.    `---

2. scsi/hosts.c device_register fix

3. I used Shadow-3.3.1 Can't Change Passwd

4. CONFIG_SERIAL_ACPI and early_serial_setup

5. changing passwd on NIS server updates /etc/shadow only and not shadow.byname map

6. Windows key leak threatens mass piracy

7. new shadow-3.3.1 patches

8. Need contact with mirror server

9. recompiling shadow-3.3.1

10. shadow-3.3.1 and rlogin security hole

11. wu-ftpd isnt working with shadow-3.3.1

12. shadow-3.3.1 on Linux

13. gcc-2.7.0ELF+shadow-3.3.1 doesnt compile