Re: Should I give passwords to server ids?

From: Wild Wizard (somebody@wildwizard.kicks-ass.org)
Date: 10/15/02 

From: Wild Wizard <somebody@wildwizard.kicks-ass.org>
Date: Tue, 15 Oct 2002 01:20:00 GMT

Sundial Services wrote:

>
> After the aforementioned scare involving the user "news," I began to
> wonder.
>
> There are several user-ids associated with daemons. Some have a shell
> other than /false/ or /nolog/.
>
> What are the passwords to these daemon accounts? Are they predictable?
> Should they be changed? If so, what will break?

they have no passwords and you can not log onto those accounts in any normal
manor

from my /etc/shadow file (slackware 9beta1)
the password is * you cant logon to these accounts

bin:*:9797:0:::::
daemon:*:9797:0:::::
adm:*:9797:0:::::
lp:*:9797:0:::::
sync:*:9797:0:::::
shutdown:*:9797:0:::::
halt:*:9797:0:::::
mail:*:9797:0:::::
news:*:9797:0:::::
uucp:*:9797:0:::::
operator:*:9797:0:::::
games:*:9797:0:::::
ftp:*:9797:0:::::
smmsp:*:9797:0:::::
mysql:*:9797:0:::::
rpc:*:9797:0:::::
gdm:*:9797:0:::::
pop:*:9797:0:::::
nobody:*:9797:0::::: 

-- 
He hadn't a single redeeming vice.
                -- Oscar Wilde

Relevant Pages

  • Re: Should I give passwords to server ids?
    ... > After the aforementioned scare involving the user "news," I began to ... > There are several user-ids associated with daemons. ... The daemons do not have any passwords by default. ...
    (comp.os.linux.security)
  • Re: password expiration policy for admin and system accounts ?
    ... policy that Admins manually reset these important account passwords every ... You can still have the passwords set to never expire, ... > Privileged accounts should be the most, not the least, well guarded. ...
    (microsoft.public.security)
  • Re: password expiration policy for admin and system accounts ?
    ... policy that Admins manually reset these important account passwords every ... You can still have the passwords set to never expire, ... > Privileged accounts should be the most, not the least, well guarded. ...
    (microsoft.public.win2000.security)
  • RE: Security Logging - Passwords & Accounts
    ... Security Logging - Passwords & Accounts ... Does anybody know of any way to log changes to user & group accounts and ...
    (RedHat)
  • Antivirus programs for XP - best ones?
    ... DON'T create user accounts during setup as they will become ... Turn of transmission of passwords and user credentials in clear ... Keep your system and ALL installed applications uptodate (Microsoft ...
    (alt.computer.security)