Verifying a users password on AIX setup with LPA Post: 302961365

Sponsored Content

Operating Systems AIX Verifying a users password on AIX setup with LPA Post 302961365 by evansch on Friday 27th of November 2015 03:28:30 PM

11-27-2015

Registered User

It's working!

Thanks very much for both replies - I was certainly looking into the authenticate function as an alternative, but was having difficulty getting it to return anything useful, or anything at all really.

As it turns out, I forgot to give the program the proper low-level ownership/permissions, so it would always fail.

For those interested, the program needs to be owned by a root-level user/group and have 4755 permissions for it to be able to access the authentication level calls.

Again, thanks a bunch!

Chris

---------- Post updated at 03:28 PM ---------- Previous update was at 10:09 AM ----------

Another update on this for enquiring minds!

Previously, our crypt() call was in a shared object - and this used to work (still does with the old encryption method, (non-LPA) ). However, from what i've been able to tell, calls to crypt() using LPA currently require that the program have a proper authoritative owner and permissions, meaning if you create a stand-alone executable and give it the same permissions as listed above (and the proper salt), the crypt() function will work without issue.

This User Gave Thanks to evansch For This Post:

evansch

View Public Profile for evansch

Find all posts by evansch

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

documentation for beginners setup virtual site, users, mailaccounts on raq 550

Greetings to all reading this, I am a Linux/Unix newbie webmaster with a dedicated server, a RaQ 550. I am looking for some step by step documentation about managing a server with shell (not the GUI), from adding a virtual site to adding users, email accounts etc. I can find only parts of this...

2. Red Hat

SSH Prompts for Password After Keys Setup Successfully

I setup the keys between 2 servers, but my user account has no password specified for it (never set one up on the account for security reasons). When I try to SSH to the server, SSH prompts for a password that doesn't exist (so I can never connect successfully). Note: 'passwd -d Rynok' removes...

3. Red Hat

setup sudo for cmd exec w/o password

i need to set up a user to execute a restricted command as another user and to be able to do so without entering a password. I understand the security concerns but let's not go there, unless you are really compelled to do so... The directive to permit is that I believe should work and did add to...

4. Red Hat

how to setup An extra account with name 'unixuser' who can have the previlege to reset other users?

Hi I want to setup an extra account with name 'unixuser' who has the previlege to reset the passwords of other users like eng or myuser (other user). Please help me.. Waiting for a reply.. Thanks, MJavalkar

5. Shell Programming and Scripting

How to setup a password less ftp??

hi, i want to setup a password less FTP to a remote server so that i can ftp to a remote server without the password. i have setup a passwordless ssh and i am able to use scp commands to connect to the remote server without asking for the password. but when i try to ftp to the same remote...

6. Solaris

How can i setup ssh password-less login for particular user?

HI Community. I was trying to create ssh password less authentication for one user called night and it's not working for me. These are the steps I followed:- I have logged into the server and issued ssh-ketgen -t rsabash-3.2$ ssh-keygen -t rsa Generating public/private rsa key pair....

7. UNIX for Advanced & Expert Users

Setup Samba Server to always ask user and password

How do I setup a Samba server to always ask to user and password, when a windows user, prints your files using a shared printer through a Samba Linux Server (CUPS)?

8. AIX

Change password for many users on an AIX server

Hi I want to change password for around 100 users on an aix server. I have the list of those 100 users with me. instead of doing # passwd username for all the 100 users one by one, can you please help with a script through which we can change the password for all the 100 users in a...

9. Red Hat

SSH password less setup asking for password

Hello Experts, when I am trying to connect my target server through sftp after creating ssh password less setup, it is asking for passowrd to connect. to setup this I followed below process: -->generated keys by executing the command "ssh-keygen -t rsa" -->this created my .ssh directory...

10. UNIX for Beginners Questions & Answers

New to AIX: How do I setup high availability on an AIX System

I am new to AIX but not new to unix. I have an interview for an AIX systems admin position and I know they want someone who has knowledge of High Availability, Failover and LPARs From my research so far, It appear powerha is used to setup high availability and failover on Power systems but is...

LEARN ABOUT HPUX

encrypt

crypt(3C)																 crypt(3C)

NAME

       crypt  - generate hashing encryption

SYNOPSIS

   Obsolescent Interfaces
DESCRIPTION

   crypt():
       is  the	password encryption function.  It is based on a one way hashing encryption algorithm with variations intended (among other things)
       to frustrate use of hardware implementations of a key search.

       key is a user's typed password.	salt is a two-character string chosen from the set this string is used to perturb the hashing algorithm in
       one of 4096 different ways, after which the password is used as the key to encrypt repeatedly a constant string.  The returned value points
       to the encrypted password.  The first two characters are the salt itself.

   Obsolescent Interfaces
       generate hashing encryption.

WARNINGS

       The return value for points to data whose content is overwritten by each call.

       and are obsolescent interfaces  supported only for compatibility with existing DCE applications. New multithreaded applications should use

SEE ALSO

       crypt(1), login(1), passwd(1), getpass(3C), passwd(4), thread_safety(5).

STANDARDS CONFORMANCE

																	 crypt(3C)

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

documentation for beginners setup virtual site, users, mailaccounts on raq 550

Discussion started by: rolandk

2. Red Hat

SSH Prompts for Password After Keys Setup Successfully

Discussion started by: Rynok

3. Red Hat

setup sudo for cmd exec w/o password

Discussion started by: twk

4. Red Hat

how to setup An extra account with name 'unixuser' who can have the previlege to reset other users?

Discussion started by: mjavalkar