🚀 go-pugleaf

nelson@reed.edu (Nelson Minar) writes:
>A far more common way for accounts to be cracked is for someone to
>steal your YP password file (not too hard to do if you're running yp
>and are on the internet) and run a fine cracking tool like Crack 4.1
>with a fast crypt().

>How do you, as a sysadmin, prevent this? Crack your password file
>yourself. Don't let users have crackable passwords. 

>If you want to be butch try to fix yp, or use a shadow scheme that
>works. That's a lot of trouble, and the best you'll probably do is
>security through obscurity.

With Sun's latest patches, YP is supposed to be fairly secure;
nobody can get your passwd map that you don't want to.