The UNIX and Linux Forums  

Go Back   The UNIX and Linux Forums > Top Forums > UNIX for Advanced & Expert Users
.
google unix.com



UNIX for Advanced & Expert Users Expert-to-Expert. Learn advanced UNIX, UNIX commands, Linux, Operating Systems, System Administration, Programming, Shell, Shell Scripts, Solaris, Linux, HP-UX, AIX, OS X, BSD.

More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
Debian: New sork-passwd-h3 packages fix regression iBot Security Advisories (RSS) 0 07-14-2009 11:15 AM
tool to convert /etc/passwd and etc/shadow lamoul SUN Solaris 1 05-07-2009 03:48 AM
How to : Identify the the password is encrypted or not in /etc/shadow or /etc/passwd? avklinux UNIX for Dummies Questions & Answers 11 02-02-2009 09:46 PM
Migrating the master.passwd rbizzell BSD 0 09-16-2006 09:55 PM
Question Regarding FreeBSd and Debian hilly UNIX for Dummies Questions & Answers 3 03-30-2004 02:13 PM

Reply
English Japanese Spanish French German Portuguese Italian Dutch Swedish Russian Norwegian Hungarian Hebrew Danish Bulgarian Greek Powered by Powered by Google
 
LinkBack Thread Tools Search this Thread Rate Thread Display Modes
  #1 (permalink)  
Old 4 Weeks Ago
davidstvz davidstvz is offline
Registered User
  
 

Join Date: Nov 2009
Posts: 6
Converting freebsd (5.2.1) master.passwd to Debian shadow

I'm trying to make this work, and it half works. Accounts with password hashes matching the old crypt(3) algorithm work just fine:

JUpfW/w6jo6aw

But accounts with longer password hashes preceded by $1$, such as the following, do not work:

$1$iIcbppdP$HDyjJeVMGgJ.ovLsnjtTR.
$1$SjC4EQzq$y8iVMbr5p.t83Jk5LHSWi0

The thing is, if I change a password on the new Debian system, it still uses the $1$... format (MD5 I think?) so apparently the old BSD system is using an older/different MD5 hashing algorithm.

Anyone know how I might make this work or if I might be doing something else wrong?

---------- Post updated at 02:21 PM ---------- Previous update was at 01:18 PM ----------

ok, things get stranger. I made a test account that transfers just fine using the md5 hash, but the one particular account (which happens to be the most important) doesn't work. I guess if it's the only one I can just do a passwd command for this one account

---------- Post updated at 04:45 PM ---------- Previous update was at 02:21 PM ----------

Ok, I don't think the problem is the md5 compatibility. I think it's something more subtle. I recall, when reading about PAM, that for security reasons, even if it's not the password stopping the login, the system may tell the user their password is bad.

So far I've noticed that people with the old crypt hash can log in to webmail no matter what. Unfortunately, I didn't test any shell logins for these users until I had changed all shells to /bin/bash

People with the MD5 hash apparently could not login to webmail unless the shell existed (Debian only has bash, and two links to bash from rbash and sh). I need to do a little more testing, but changing all shells to bash seems to have allowed all users to login now. No failures so far anyway.
Reply

Bookmarks

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT -4. The time now is 07:47 AM.


Powered by: vBulletin, Copyright ©2000 - 2006, Jelsoft Enterprises Limited. Language Translations Powered by .
vBCredits v1.4 Copyright ©2007 - 2008, PixelFX Studios
The UNIX and Linux Forums Content Copyright ©1993-2009. All Rights Reserved.Ad Management by RedTyger

Content Relevant URLs by vBSEO 3.2.0