From owner-freebsd-isp  Thu Jun 10  5:44:33 1999
Delivered-To: freebsd-isp@freebsd.org
Received: from hyperion.eclipse.net.uk (hyperion.eclipse.net.uk [195.188.32.122])
	by hub.freebsd.org (Postfix) with ESMTP id 0415414CA1
	for <FreeBSD-isp@FreeBSD.Org>; Thu, 10 Jun 1999 05:44:21 -0700 (PDT)
	(envelope-from stuart@eclipse.net.uk)
Received: from eclipse.net.uk (stuart@elara.eclipse.net.uk [195.188.32.31])
	by hyperion.eclipse.net.uk (8.9.3/8.9.3) with ESMTP id NAA66961;
	Thu, 10 Jun 1999 13:44:15 +0100 (BST)
Message-ID: <375FB347.678E2667@eclipse.net.uk>
Date: Thu, 10 Jun 1999 13:44:55 +0100
From: Stuart Henderson <stuart@eclipse.net.uk>
Organization: Eclipse Networking Ltd.
X-Mailer: Mozilla 4.6 [en] (WinNT; U)
X-Accept-Language: en-GB
MIME-Version: 1.0
To: Bill Vermillion <bill@bilver.magicnet.net>
Cc: FreeBSD-isp@FreeBSD.Org
Subject: Re: Finding what user's previous password was.
References: <199906092223.SAA83399@bilver.magicnet.net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

> > ..or it's still in /var/backups/master.passwd.bak
> 
> However it's encoded.  To prove the the user that it had
> not changed you'd neet to take the password the user thinks he
> had an encrypt it with the same salt - otherwise you have one
> chance of 4096 of them matching.

Unless you copy and paste it to the master.passwd file and
get him to try logging in with it :)


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message