Re: Password Encryption Blues

From: Tweetie Pooh (tp601553@cia.gov)
Date: 05/24/02 

From: Tweetie Pooh <tp601553@cia.gov>
Date: Fri, 24 May 2002 16:37:02 GMT

"John" <johnc_without_spam_thankyou@no1.com.au> honoured
comp.security.unix on Wed 22 May 2002 07:51:56a with
news:3ceb4e17@news.comindico.com.au:

> Peter, firstly THANK YOU. I really can;t thank you enough...been banging
> my head against a wall.
>
> I have that working. I can produce the clear text file but I have had no
> luck encrypting it.
>
> Have been trying both PW and PASSWORD in our script but both are wanting
> input through command line interface. Although just been reading that
> the PW command can be used in a script using a "FILE DESCRIPTOR"
>
> MAN PW
><snip>
> Because the command line and environment are fundamentally insecure
> mechanisms by which programs can accept information, pw
> will only allow setting of account and group passwords via
> a file descriptor (usually a pipe between an interactive
> script and the program). sh, bash, ksh and perl all pos­
> sess mechanisms by which this can be done. Alternatively,
> pw will prompt for the user's password if -h 0 is given,
> nominating stdin as the file descriptor on which to read
> the password. Note that this password will be read only
> once and is intended for use by a script rather than for
> interactive use.
></snip>
>
> I can loop etc within my script for each entry and execute the PW
> command but how to use the PW command has got us stumped......
>
> Any additional suggestions or help you could offer? Really do appreciate
> your time!
>
> JohnC
>
><phn@icke-reklam.ipsec.nu> wrote in message
> news:acfcap$s2a$2@nyheter.crt.se...
>> John <johnc@no1.com.au> wrote:
>> > HELP - I mean this sincerely.
>>
>> > I have spent almost a week on and off trying to convert a plain text
> Unix
>> > password file (as you would use in Linux but an unshadowed version of
> it) to
>> > run under FreeBSD
>>
>> > I understand the 3 extra fields required by FreeBSD and can convert
>> > accordingly.
>>
>> > Would like to run a shell script to convert.
>>
>> > If anybody could spare me some basic steps of what to do, would be
>> > much appreciated.
>> > Or I can send somebody the script we have developed thus far? which
> ever...I
>> > am now desperate, hence posting this message.
>>
>> awk might be the easiest :
>> awk -F: '{print $1 ":"$2":"$3":"$4":0:0:0"$6":"$6}' < /etc/passwd >
> bsdpasswd.master
>>
>> ( the above contains probably some errors )
>>
>> > Thanking you all in advance.
>>
>> > John C
>>
>>
>>
>>
>> --
>> Peter Håkanson
>> IPSec Sverige ( At Gothenburg Riverside )
>> Sorry about my e-mail address, but i'm trying to keep spam
>> out,
>> remove "icke-reklam" if you feel for mailing me. Thanx.
>
>

Don't know if this will help but can you write a perl script that will telnet
to the localhost and do the deed that way.

There are also may perl modules that have passwd in the name.

Relevant Pages