From owner-freebsd-questions  Mon Oct  1 20:55:13 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from smtp016.mail.yahoo.com (smtp016.mail.yahoo.com [216.136.174.113])
	by hub.freebsd.org (Postfix) with SMTP id 36A9837B409
	for <freebsd-questions@freebsd.org>; Mon,  1 Oct 2001 20:55:10 -0700 (PDT)
Received: from unknown (HELO cheech.uchaswv.edu) (12.4.161.230)
  by smtp.mail.vip.sc5.yahoo.com with SMTP; 2 Oct 2001 03:55:09 -0000
X-Apparently-From: <nmace85@yahoo.com>
Date: Tue, 2 Oct 2001 00:03:39 -0400
From: Nathan Mace <nmace85@yahoo.com>
To: Jonathan Chen <jonathan.chen@itouch.co.nz>
Cc: freebsd-questions@freebsd.org
Subject: Re: shadow passwords
Message-Id: <20011002000339.3417c5d7.nmace85@yahoo.com>
In-Reply-To: <20011002153410.A92785@jonc.itouch>
References: <20011001232941.5db52eb7.nmace85@yahoo.com>
	<20011002153410.A92785@jonc.itouch>
X-Mailer: Sylpheed version 0.6.2 (GTK+ 1.2.10; i386--freebsd4.4)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Tue, 2 Oct 2001 15:34:10 +1200
Jonathan Chen <jonathan.chen@itouch.co.nz> wrote:

> On Mon, Oct 01, 2001 at 11:29:41PM -0400, Nathan Mace wrote:
> > does freebsd support shadow passwords?
> 
> FreeBSD does not show the encrypted password in /etc/passwd. It's
> stored
> in /etc/master.passwd, and the only way you can see it is if you've
> got
> root privileges. And if someone has root, the system's open to them.


sweet...thats what i wanted to know...but what about making the
master.passwd entries harder to crack?  what would keep them from
somehow getting a copy and using  pure brute force to crack it?  i'm
currently using MD5(i think, not sure) is that the best encryption to
use?

also i read in the handbook how you can tell...the MD5 entries have a
$1$ in them...my root passwd has it but my user account doesn't...whats
up with that?

nathan

_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message