Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 07 Mar 2001 20:34:27 +0100
From:      Christoph Sold <so@server.i-clue.de>
To:        Walter Hop <walter@binity.com>
Cc:        "Houben,G.J.J. (Geert)" <G.Houben@fontys.nl>, "'freebsd-questions@freebsd.org'" <freebsd-questions@FreeBSD.ORG>
Subject:   Re: A * as encrypted password?
Message-ID:  <3AA68D43.98A3D9F@i-clue.de>
References:  <C1E0E1EF0987D3119E720008C70D266601800AF0@fontmail02.fontys.nl> <3AA683B3.BC99C209@i-clue.de> <56363525492.20010307200123@binity.com>

next in thread | previous in thread | raw e-mail | index | archive | help


Walter Hop schrieb:
> 
> [in reply to so@server.i-clue.de, 07-03-2001]
> 
> >> Can I put with vipw a * as password? Or do I have to do that when I create
> >> it?
> >
> > Just make create the user, using any password you like. After that, edit
> > /etc/master.passwd, putting the "*" into the passwd field
> 
> I believe just editing the master.passwd file without running pwd_mkdb(8)
> has no effect. The vipw tool runs some checks and does this for you.

Sorry to condratict Walter, but:

The vipw tool encrypts the "*" to a valid passwd string, thus you may
login using the passwd "*". Do as I said first and nobody will be able
to login, because the string "*" will never match any encrypted passwd.

Try it: create test user, vipw his passwd to "*", log in using passwd
"*". Next, vi /etc/master.passwd, changing the encrypted passwd to "*",
try to login again.

HTH
-Christoph Sold

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3AA68D43.98A3D9F>