[kde-solaris] KCheckpass on Solaris 8

Skip Duckwall - TXDC Sysadmin kde-solaris@mail.kde.org
Mon Nov 11 21:06:00 2002


indeed it is.

The whole purpose of the /etc/shadow file is to hide the password hashes
from account users so they don't have fodder to feed to any of the
password cracking programs out there.  Making it world readable might
fix your problem, but not in the optimal way.

Skip


On Mon, 2002-11-11 at 13:38, Joshua Symons wrote:
> That is not what you want to do. Bad idea.
> 
> ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
> Joshua Symons &lt vmcore at mysun dot com &gt
> ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
> 
> ----- Original Message -----
> From: Paresh Pitalia <paresh_su@yahoo.com>
> Date: Monday, November 11, 2002 12:45 pm
> Subject: Re: [kde-solaris] KCheckpass on Solaris 8
> 
> > chmod 4755 /etc/shadow
> > 
> > Thats all I did and it started working.
> > 
> > 
> > --- Joshua Symons <vmcore@mysun.com> wrote:
> > > kcheckpass has to be 4755 or kdesktop_lock has to be 4755? by 
> > default> kcheckpass is 4755 on my box and it still doesn't work 
> > (passwd). It
> > > would be nice if kdesktop_lock could simply use a third party app,
> > > like
> > > say xlockmore.
> > > 
> > > ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
> > > Joshua Symons &lt vmcore at mysun dot com &gt
> > > ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
> > > 
> > > ----- Original Message -----
> > > From: Paresh Pitalia <paresh_su@yahoo.com>
> > > Date: Monday, November 11, 2002 10:35 am
> > > Subject: Re: [kde-solaris] KCheckpass on Solaris 8
> > > 
> > > > Thanks Torsten
> > > > 
> > > > chmod 4755 worked !!
> > > > 
> > > > 
> > > > --- Torsten Kasch <tk@Genetik.Uni-Bielefeld.DE> wrote:
> > > > > Hi Ian,
> > > > > 
> > > > > On Mon, Nov 11, 2002 at 09:56:53AM -0500, Ian Reinhart Geiser
> > > wrote:
> > > > > > -----BEGIN PGP SIGNED MESSAGE-----
> > > > > > Hash: SHA1
> > > > > > 
> > > > > > Greetings
> > > > > > 	What options do people out there to get checkpass to work on
> > > > > solaris 8?  
> > > > > > Currently I cannot get the screen to unlock after Ilock it
> > > because
> > > > > kcheckpass 
> > > > > > fails?  Is this something that needs to be fixed?
> > > > > 
> > > > > That depends on what naming service(s) you're using in
> > > > > /etc/nsswitch.conf for
> > > > > "passwd". If "files" is one of them, kcheckpass needs to be 
> > > > installed> setuid root in order to be able to access 
> > /etc/shadow. 
> > > > For NIS this
> > > > > isn't
> > > > > necessary, but would not hurt...
> > > > > 
> > > > > Please note, that in the first case, mode 4711 isn't sufficient,
> > > > > since
> > > > > somewhere the readabilty of the binary is checked (don't know
> > > why),
> > > > > so
> > > > > you would need 4755...
> > > > > 
> > > > > cheers,
> > > > > 	Torsten
> > > > > 
> > > > > -- 
> > > > >    Torsten Kasch                              
> > > > > tk@Genetik.Uni-Bielefeld.DE
> > > > >         Biologie VI/Zentrum f. Genomforschung
> > > > >         Universität Bielefeld                  Phone: +49 521
> > > > > 106-4828
> > > > >         D-33594 Bielefeld                      Fax:   +49 521
> > > > > 106-5626
> > > > > ___________________________________________________
> > > > > This message is from the kde-solaris mailing list.
> > > > > Account management: 
> > > > > http://mail.kde.org/mailman/listinfo/kde-solaris.
> > > > > Archives: http://lists.kde.org/.
> > > > > More info: http://www.kde.org/faq.html.
> > > > 
> > > > 
> > > > __________________________________________________
> > > > Do you Yahoo!?
> > > > U2 on LAUNCH - Exclusive greatest hits videos
> > > > http://launch.yahoo.com/u2
> > > > ___________________________________________________
> > > > This message is from the kde-solaris mailing list.
> > > > Account management: 
> > > http://mail.kde.org/mailman/listinfo/kde-solaris.
> > > > Archives: http://lists.kde.org/.
> > > > More info: http://www.kde.org/faq.html.
> > > >
> > > 
> > > ___________________________________________________
> > > This message is from the kde-solaris mailing list.
> > > Account management: 
> > > http://mail.kde.org/mailman/listinfo/kde-solaris.
> > > Archives: http://lists.kde.org/.
> > > More info: http://www.kde.org/faq.html.
> > 
> > 
> > __________________________________________________
> > Do you Yahoo!?
> > U2 on LAUNCH - Exclusive greatest hits videos
> > http://launch.yahoo.com/u2
> > ___________________________________________________
> > This message is from the kde-solaris mailing list.
> > Account management:  http://mail.kde.org/mailman/listinfo/kde-solaris.
> > Archives: http://lists.kde.org/.
> > More info: http://www.kde.org/faq.html.
> > 
> 
> ___________________________________________________
> This message is from the kde-solaris mailing list.
> Account management:  http://mail.kde.org/mailman/listinfo/kde-solaris.
> Archives: http://lists.kde.org/.
> More info: http://www.kde.org/faq.html.
>