Re: \'useradd -p\' problems.

From: Steve Mickeler (steve@neptune.on.ca)
Date: 08/28/01


Date: Tue, 28 Aug 2001 15:54:17 -0400 (EDT)
From: Steve Mickeler <steve@neptune.on.ca>
To: joetesta@hushmail.com
Subject: Re: \'useradd -p\' problems.
Message-ID: <Pine.LNX.4.21.0108281552080.17513-100000@triton.neptune.on.ca>

On Tue, 28 Aug 2001 joetesta@hushmail.com wrote:

> Hi --
>
> On my Trustix 1.2 box, I noticed that creating a user with 'useradd' and
> the '-p' option (which gives the new user a default password) does not hash
> the password in /etc/shadow:

did you happen to 'man useradd' before posting this ?

       -p passwd
              The encrypted password, as returned by crypt(3). The
default is to disable the account.

"man crypt" would be your next adventure.

> This bug doesn't seem exploitible for two reasons:

Thats because its not a bug.

Todays root password is brought to you by /dev/random

.-------------------------------------.
| Steve Mickeler * Network Operations |
+-------------------------------------+
| Neptune Internet Services |
`-------------------------------------'

1024D/ACB58D4F = 0227 164B D680 9E13 9168 AE28 843F 57D7 ACB5 8D4F



Relevant Pages

  • useradd -p problems.
    ... I noticed that creating a user with 'useradd' and ... Trustix Secure Linux release 1.2 ... I can't think of a practical environment where ...
    (Vuln-Dev)
  • Re: useradd -p problems.
    ... > On my Trustix 1.2 box, I noticed that creating a user with 'useradd' and ... the query, he's wondering why it's not going directly into shadow, ...
    (Vuln-Dev)
  • Re: useradd -p problems.
    ... > On my Trustix 1.2 box, I noticed that creating a user with 'useradd' and ... Read the man page for useradd: ... That option is intended for use in scripts where the hash has already been ... - Squidward to SpongeBob ...
    (Vuln-Dev)
  • Re: Does anyone know why RH9 does not allow useradd or adduser to create users with DOTS?
    ... useradd does not permit the use of dots in the user ID ... To my opinion it is a bug, and I have informed the shadow maintainers ...
    (linux.redhat.misc)