How can I check that a password is correct?

chebarbudo · #1 (**permalink**) 02-09-2009

Hi there,
There's something I don't understand. The same string does not give the same md5 hash everytime. I wanted to find a way to check someone's password but the following script obviously shows that it's not possible that way :

Code:

ks354286:~# user=foo
ks354286:~# pw=$(mkpasswd -H md5 topsecret)
ks354286:~# echo "$user:$pw"
foo:$1$WYq0L220$25QI3T1cMGh1PsJc5guFv1
ks354286:~#
ks354286:~# useradd -p$pw $user
ks354286:~# grep "$user:$pw" /etc/shadow
foo:$1$WYq0L220$25QI3T1cMGh1PsJc5guFv1:14284:0:99999:7:::
ks354286:~#
ks354286:~# pw=$(mkpasswd -H md5 topsecret)
ks354286:~# echo "$user:$pw"
foo:$1$wrSmUGbt$DtqoBPvQ7xImZcHi3F2M71
ks354286:~#
ks354286:~# grep "$user:$pw" /etc/shadow
ks354286:~#

So in short. How can I check someone's password?
Thanks for your help
Santiago

PS: By the way, I have exactly the same problem with MySQL.

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
Check password age	Tornado	Shell Programming and Scripting	3	12-19-2006 11:21 PM
password complexity check	dbsora	SUN Solaris	1	08-29-2006 02:30 PM
Check for the correct date format in UNIx	rawatds	Shell Programming and Scripting	1	07-13-2006 07:24 AM
password check	riya	UNIX for Dummies Questions & Answers	1	03-26-2006 09:44 PM
check root password	collins	High Level Programming	1	01-17-2005 11:55 AM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Switch to Linear Mode Switch to Hybrid Mode Threaded Mode	Rate This Thread:


	Powered by