TCLUG Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [TCLUG:2245] shadow passwords



It runns suid as root, group bin with -r-sr-xr-x   

Any ideas?

On Wed, 18 Nov 1998, Mark Dalton wrote:

> 
> The main question would be.. as a user.. find out which 'passwd' command:
> 	which passwd
> 
> Then check the permissions set on that command...  On SGIs and Suns
> we have it set to:
> 
> % ls -l /usr/bin/passwd
> -rwsr-sr-x    1 root     sys        44664 Nov 18 07:14 /usr/bin/passwd*
> 
> That would be my first _guess_.  Also I will be there on Saturday..
> 
> Mark
> 
> > I have rh5.1 and I just tried to install shadow passwords using the alread
> > installed package shadow-utils-980403-3. I followed the how-to guide, and
> > ran pwconv which then made an /etc/passwd without passwords and
> > /etc/shadow (the how-to said it would make npasswd and nshadow and that
> > I'd copy but, but pwconv did this for me). Everything works except that
> > users can't change thier passowrds. If I type passwd, and type something
> > in says authentication failure. /etc/passwd is 644 and /etc/shadow is 640.
> > Any ideas? I can change passwords as root without any problems.
> > 
> > (I just noticed this on my friends computer with I think default install
> > on rh5.2, hmm)
> > 
> > Ben
> > 
> > Ben Luey
> > lueyb@carleton.edu
> > ICQ: 19144397
> 
> -- 
> Mark Dalton       CH3-S-CH2 H                      H      O       H
> Silicon Graphics, Inc.  |   |                      |       \      |
> Eagan, MN 55121         CH2-C-COO    //\ ---C--CH2-C-COO    C-CH2-C-COO
> mwd@sgi.com                 |       |  ||   ||     |       //     |
>                             NH3      \\/ \ / CH    NH3    O       NH3
>                                           NH
> My home page: http://www.cbc.umn.edu/~mwd/mwd.html
> BEAM Robotics: http://www.webconn.com/~mwd/beam.html
> WWW Cell Bio. course: http://www.cbc.umn.edu/~mwd/cell.html
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tclug-list-unsubscribe@listserv.real-time.com
> For additional commands, e-mail: tclug-list-help@listserv.real-time.com
> Try our website: http://tclug.real-time.com
> 

Ben Luey
lueyb@carleton.edu
ICQ: 19144397

Money is like manure--it only works if you spread it around.  -- Jim Hightower