Re: RH 6.0 shadow passwords and locking users bug

From: Walter Klomp (walterat_private)
Date: Sat Sep 04 1999 - 04:32:25 PDT

  • Next message: John N Dvorak: "Re: Local DoS on network by unpriviledged user using setsockopt()" 

    Hi,

I solved this problem by downloading the source of the latest
shadow-password package, and just recompile and make install...

It's indeed an error in the .rpm of RedHat 6.0...

Hope this helps
Regards
Walter

> -----Original Message-----
> From: Bugtraq List [mailto:BUGTRAQat_private]On Behalf Of Shuman
> Sent: Thursday, September 02, 1999 7:24 AM
> To: BUGTRAQat_private
> Subject: Re: RH 6.0 shadow passwords and locking users bug
>
>
> On Mon, 30 Aug 1999, Prince Ctrl wrote:
> [ When administering a Red Hat 6.0 server and locking users with the
> [ 'passwd -l <user>' command, and then unlocking a user with the 'passwd
> [ -u <user>' command, a control character is added to the end of a
> [ users' encrypted password in the form of a "^Q" in the shadowed passwd
> [ file.
>
> The "usermod" program, a part of shadow-utils that comes with RedHat 6.0
> has a similar feature and does NOT has this "^Q" problem when unlocking.
>
> To lock an account:
> usermod -L username
>
> To unlock an account:
> usermod -U username
>
> [ OS affected/tested: Red Hat 6.0
>
> Too bad, I just upgraded the last RH 5.2 box to 6.0 today!
>
> ---
> M S Anam                                       <shumanat_private>
>
> Annex Group, Bangladesh                            We hack to learn!
>
> Those who can't write, write manuals.
>

    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:01:48 PDT