Experiences with John Haugh's Shadow Suite

Thread View: comp.security.misc

2 messages

[T] Back to Threads [V] Tree View [G] Group Articles

2 total messages Started by Randy Carpenter Fri, 13 Nov 1992 20:51

#550

Author: Randy Carpenter
Date: Fri, 13 Nov 1992 20:51

14 lines
1131 bytes

We are considering installing John Haugh's shadow password suite on our
Silicon Graphics systems because of all the grief we get from our users
about the proactive password program we installed.  We're looking for any
experiences you have had installing this package and whether it affected
other programs on your system (i.e. does getpwent(3) still work?).  
I'll post a summary if there is enough interest.

P.S. I wish vendors would hurry up and support shadow password files.

-- 
===========================================================================
Randy Carpenter                    rcarpent@gsu.edu          % Got a light?
Georgia State University           (404) 651-2648            No match.
Wells Computer Center                                        %

Re: Experiences with John Haugh's Shadow Suite

#551

Author: Christopher Davis
Date: Fri, 13 Nov 1992 23:54

18 lines
1445 bytes

Randy> == Randy Carpenter <syscrc@pickle.gsu.edu> 

 Randy> We are considering installing John Haugh's shadow password suite
 Randy> on our Silicon Graphics systems because of all the grief we get
 Randy> from our users about the proactive password program we
 Randy> installed.

Shadowed passwords are not a replacement for a good (some would say
fascist) proactive password program.

NFS misconfigurations, buggy setuid programs, and the like can offer
access to the shadow file.  (I won't even go into the behavior most NIS
installations have of giving the shadow file to the world.)
--
Christopher K. Davis      | ``Usenet seems to run much like the Kif (or,
<ckd@eff.org>   EFF #14   |   for the TV generation, Klingon) high command.
System Administrator, EFF |   Whoever takes action and can be heard wins.''
+1 617 864 0665  [CKD1]   |   --Peter da Silva <peter@ferranti.com>

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads