04-17-2019
The approach to manage risk in IT should be based on a risk analysis.
For example, a person running their own blog who has not much to lose if their DB password is compromised has a much different risk profile than a bank doing financial transactions.
Security controls come with "costs" and so the controls used should be appropriate to the risk profile of the system.
All WordPress blocks, Wikipedia Wikis and indeed most all CMS apps freely available on the network store DB password as clear text in config files which with various standard unix / linux file system permissions and controls.
These 2 Users Gave Thanks to Neo For This Post:
8 More Discussions You Might Find Interesting
1. Shell Programming and Scripting
I'm finding the following command very tedious to type in all the time, so I created a one line bash script called mount.bash with the following contents:
mount -t cifs //mark/C\$ -o unc=//mark\\C$,ip=10.1.1.33,user=Administrator,password=$1 /mnt/mark
I don't like the fact that I have to put... (5 Replies)
Discussion started by: siegfried
5 Replies
2. Shell Programming and Scripting
Hi Unix experts....
I am in the process checking user and root password of more than 1000 servers manulay.
I am very pissed of checking these many servers manualy.
Could some one of you help me how can i check the passwords just by runing some scripts..!
Need Help Guys..! :confused: (5 Replies)
Discussion started by: bullz26
5 Replies
3. Solaris
Ok,
I am trying to install solaris, but I would like as a lean installation as possible (while still having a shread of functionality).
If I chose the minimal install I have little if no utilities to do work on the box.
My question is what installation method do most admins take?
... (7 Replies)
Discussion started by: liven
7 Replies
4. Shell Programming and Scripting
Hi
Most of the shell scripts I am dealing with have to connect to oracle database . The username password is stored in a environment file which sets the variables for username and password . Set user id do not work on AIX so users who will execute these scripts need to have read or execute... (5 Replies)
Discussion started by: clifford
5 Replies
5. Shell Programming and Scripting
Hi All ,
I need to call a script runscript_B.sh on server A, the runscript_B.sh script locating in server B.
The runscript_B.sh in calls another script runscript_A on server A itself.
it seend, i need to be connect from Server A to Server B using ssh.
I have tryed like this in... (3 Replies)
Discussion started by: koti_rama
3 Replies
6. UNIX for Advanced & Expert Users
I've been using various versions of UNIX and Linux since 1993, and I've never run across one that showed your password as you type it in when you log in, or one that stored passwords in plain text rather than encrypted. I'm writing a script for work for a security audit, and two of the... (5 Replies)
Discussion started by: Anne Neville
5 Replies
7. AIX
Does anyone know when AIX started using /etc/security/passwd instead of /etc/passwd to store encrypted passwords? (1 Reply)
Discussion started by: Anne Neville
1 Replies
8. UNIX for Advanced & Expert Users
Hi,
this question is not specially unix related, but I expect advanced and expert unix users to have a solution for this, and I've found no other subforum that fits ;)
what do you use to store accounts, customer ids, ip addresses, users and specially passwords, to access them from... (6 Replies)
Discussion started by: funksen
6 Replies
LEARN ABOUT SUSE
makepasswd
makepasswd(1) UNIX Reference Manual makepasswd(1)
NAME
makepasswd - generate and/or encrypt passwords
SYNOPSIS
makepasswd [ --chars N ] [ --clearfrom file ] [ --count N ] [ --crypt | --nocrypt ] [ --cryptsalt N ] [ --help ] [ --maxchars N ] [ --min-
chars N ] [ --randomseed N ] [ --rerandom N ] [ --repeatpass N ] [ --string string ] [ --verbose | --noverbose ]
DESCRIPTION
makepasswd generates true random passwords by using the /dev/random feature of Linux, with the emphasis on security over pronounceability.
It can also encrypt plaintext passwords given on the command line.
OPTIONS
--chars N
Generate passwords with exactly N characters (do not use with options --minchars and --maxchars).
--clearfrom FILE
Use password from FILE instead of generating passwords. Requires the --crypt option; may not be used with these options: --chars,
--maxchars, --minchars, --count, --string, --nocrypt. Trailing newlines are removed but other white space is not.
--count N
Produce a total of N passwords (the default is one).
--crypt
Produce encrypted passwords.
--cryptsalt N
Use crypt() salt N, a positive number <= 4096. If random seeds are desired, specify a zero value (the default).
--help Ignore other operands and produce only a help display.
--maxchars N
Generate passwords with at most N characters (default = 8).
--minchars N
Generate passwords with at least N characters (default = 6).
--nocrypt
Do not encrypt the generated password(s) (the default).
--noverbose
Display no labels on output (the default).
--randomseed N
Use random number seed N, between 0 and 2^32 inclusive. A zero value results in a real-random seed.
--rerandom N
Set the random seed value every N values used. Specify zero to use a single seed value (the default). Specify one to get true-ran-
dom passwords, but plan on hitting the CONTROL key a lot while it's running. The Linux entropy device is quickly depleted and key-
stroke intervals are one source of new randomness.
--repeatpass N
Use each password N times (4096 maximum, --crypt must be set and --cryptsalt may not be set).
--string STRING
Use the characters in STRING to generate random passwords.
--verbose
Display labelling information on output.
HISTORY
makepasswd was originally part of the mkircconf program used to centrally administer the Linux Internet Support Cooperative IRC network.
It may potentially be of use in any situation where passwords must be secure and need not be memorized by humans.
COPYRIGHT
Copyright (c) 1997 by lilo <lilo@linpeople.org>. All rights are reserved by the author. This program may be used under the terms of ver-
sion 2 of the GNU Public License.
SEE ALSO
passwd(5)
Debian Distribution 1998 February 9 makepasswd(1)