Encrypt a hardcoded passwd Post: 302778255

Sponsored Content

Operating Systems Solaris Encrypt a hardcoded passwd Post 302778255 by bakunin on Sunday 10th of March 2013 08:12:35 AM

03-10-2013

Registered User

Even if you encrypt the password somehow you would have to provide a mechanism available to the script to decrypt it, so you gain nothing. It is a fact that "ftp" uses clear-text passwords and this intrinsic insecurity cannot be changed or alleviated in any way. As the password is sent clear-text over the net in the login process every interested party can sniff it from there too. There is no way to prevent this. (Btw., the same is true for "telnet" and the other classical means of connecting from one system to the other.)

The only way is to use a securified means of communication: ssh/scp to be precise. In this case the password gets transmitted in an encrypted form, so sniffing is ruled out. You can also set up a "chain of trust" between two user/host-combinations so that userA from hostA can connect as userB to hostB without using a password (so you don't have to state one in your script) but using an exchanged secret both involved parties know. The basic procedure is to connect once, identified by the password and then to store the other hosts secret to a config file so that further connections do not need a password any more.

We have several threads dealing with the setup of such a mechanism, so i suggest you do a forum search for "scp" and/or "ssh" installation.

I hope this helps.

bakunin

bakunin

View Public Profile for bakunin

Find all posts by bakunin

10 More Discussions You Might Find Interesting

1. Programming

Help with encrypt function

Hi there, I need to include a simple encryption function in a C program and I came across this function void encrypt(char block, int edflag) whic is defined in #include des_crypt.h. According the man "the block argument to encrypt() is a character array of length 64 containing only the...

2. Shell Programming and Scripting

Tr utility to Encrypt

I need some help.. I would like to make a script that uses the tr utility to "encrypt" a selected file. I need to know how to set up the script so that if i type encrypt(script name) the letter that i want to start the encryption and then the file name, that it starts with the entered letter, and...

3. Shell Programming and Scripting

encrypt my sctipt

Hai , is there any encrypt machanishm to protect my script or logic?

4. Shell Programming and Scripting

connection string is hardcoded

Hi, I have many perl scripts in single server, i am new to perl, suggestions are appreciated. connection string is hardcoded in all perl scripts i need to make change the all perl scripts and there should be only one config file available in that server. destination database is mysql...

5. Shell Programming and Scripting

How to Encrypt password

Hello, I have a paramter file, In which I store all the user-ids and passwords for the project. So if a user just invokes the paramter file he has access to all the variables, which i have exported in the parmatere file. Now if a user echo's the variable which stores the databse password....

6. UNIX for Dummies Questions & Answers

how to enter hardcoded password automatically

In the script i am passing a command from script which is called from cron. When this command is called from cron the unix prompt asks for password. Can we automatically enter the password when promted(if the password is hardcoded in script)?? Please let me know how to enter the password...

7. Solaris

passwd cmd reenables passwd aging in shadow entry

Hi Folks, I have Solaris 10, latest release. We have passwd aging set in /etc/defalut/passwd. I have an account that passwd should never expire. Acheived by emptying associated users shadow file entries for passwd aging. When I reset the users passwd using passwd command, it re enables...

8. UNIX for Dummies Questions & Answers

Issue with use of Configuration file instead of hardcoded values inside the script

Hi, My code works perfectly fine. But, $my $min_to_add = 1 * 1 * 60; and my $hr_to_sub = 1 * 1 * 86400; i may need to change the values in future. so am keeping them in a separate configuration file like MIN = 1 * 1 * 60 HR = 24 * 60 * 60 in the script, i use a package use et_config...

9. Shell Programming and Scripting

Need help with file encrypt

Hi I need to encrypt the below file using the translate command to shift each letter five characters to the end of the character set. ALPHABETICAL FACTS. THE FIRST THREE LETTERS ARE ABC. THE MEDIAN LETTERS ARE MN. THE LAST THREE LETTERS ARE XYZ. THE FIRST WORD IN MY DISCTIONARY IS AAL. THE...

10. AIX

When did AIX start using /etc/security/passwd instead of /etc/passwd to store encrypted passwords?

Does anyone know when AIX started using /etc/security/passwd instead of /etc/passwd to store encrypted passwords?

LEARN ABOUT REDHAT

getpw

GETPW(3)						     Linux Programmer's Manual							  GETPW(3)

NAME

       getpw - Re-construct password line entry

SYNOPSIS

       #include <pwd.h>
       #include <sys/types.h>

       int getpw(uid_t uid, char *buf);

DESCRIPTION

       The  getpw()  function  re-constructs the password line entry for the given user uid uid in the buffer buf.  The returned buffer contains a
       line of format

	      name:passwd:uid:gid:gecos:dir:shell

       The passwd structure is defined in <pwd.h> as follows:

	      struct passwd {
		      char    *pw_name;       /* user name */
		      char    *pw_passwd;     /* user password */
		      uid_t   pw_uid;	      /* user id */
		      gid_t   pw_gid;	      /* group id */
		      char    *pw_gecos;      /* real name */
		      char    *pw_dir;	      /* home directory */
		      char    *pw_shell;      /* shell program */
	      };

RETURN VALUE

       The getpw() function returns 0 on success, or -1 if an error occurs.

ERRORS

       ENOMEM Insufficient memory to allocate passwd structure.

FILES

       /etc/passwd
	      password database file

CONFORMING TO

       SYSVr2.

BUGS

       The getpw() function is dangerous as it may overflow the provided buffer buf.  It is obsoleted by getpwuid().

SEE ALSO

       fgetpwent(3), getpwent(3), setpwent(3), endpwent(3), getpwnam(3), getpwuid(3), putpwent(3), passwd(5)

GNU
								    1996-05-27								  GETPW(3)

10 More Discussions You Might Find Interesting

1. Programming

Help with encrypt function

Discussion started by: giggi

2. Shell Programming and Scripting

Tr utility to Encrypt

Discussion started by: frankthetank115

3. Shell Programming and Scripting

encrypt my sctipt

Discussion started by: readycpbala

4. Shell Programming and Scripting

connection string is hardcoded

Discussion started by: prakash.gr