Two Questions I Need Answered Please.

This is a multi-part message in MIME format.

------=_NextPart_000_00FC_01C4168F.BE489A20
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

In the /etc/shadow file how is the password
"$1$shGNybY9$L)J1gwitzN6LoeS0pMpNc/" encrypted?

In the /etc/shadow file how is the password "!za1aId0hfZ2IA" encrypted and
what significance does this password hold?


Thanks,
Scott
Reno, NV

------=_NextPart_000_00FC_01C4168F.BE489A20
Content-Type: text/x-vcard;
name="Scott Smallsreed.vcf"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
filename="Scott Smallsreed.vcf"

BEGIN:VCARD
VERSION:2.1
N:Smallsreed;Scott
FN:Scott Smallsreed
TEL;HOME;VOICE:775-849-8411
TEL;HOME;FAX:775-849-8412
ADR;HOME:;;3030 Chipmunk Dr.;Washoe Valley;Nevada;89704;US
LABEL;HOME;ENCODING=3DQUOTED-PRINTABLE:3030 Chipmunk Dr.=3D0D=3D0AWashoe =
Valley, Nevada 89704=3D0D=3D0AUS
EMAIL;PREF;INTERNET:scott.smallsreed@mindspring.com
REV:20040331T034650Z
END:VCARD

------=_NextPart_000_00FC_01C4168F.BE489A20--

-
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html

Re: Two Questions I Need Answered Please.

Scott@Charter wrote:

> In the /etc/shadow file how is the password
> "$1$shGNybY9$L)J1gwitzN6LoeS0pMpNc/" encrypted?

Passwords aren't encrypted, but hashed. The distinction is that there
isn't any way to decrypt the data in the shadow file to obtain the
actual password. The password which is entered by the user is
concatenated with the salt and the result is then hashed. The hash is
compared against the one from the shadow (or passwd) file.

In the above, "$1$" indicates that the entry is hashed using MD5 (as
opposed to the traditional DES hash), "shGNybY9" is the salt, and
"L)J1gwitzN6LoeS0pMpNc/" is the base64-encoded hash (an MD5 hash is a
128-bit value).

Although, the glibc documentation (which concurs with my /etc/shadow
file) says that the base64 encoding uses A-Z, a-z, 0-9 plus "/"
(slash) and "." (period); no mention of ")".

> In the /etc/shadow file how is the password "!za1aId0hfZ2IA" encrypted and
> what significance does this password hold?

That is a DES hashed password, where "za" is the salt and
"1aId0hfZ2IA" is the base64-encoded DES hash (DES hashes are 64 bits,
although only 56 bits are significant). The leading "!" indicates that
the account is locked (it also ensures that any attempt to validate a
password will fail, regardless of the actual password which is
entered).

--
Glynn Clements
-
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html