[852] in bugtraq
Always about ATHENA Wide ....
daemon@ATHENA.MIT.EDU (Davide Melchiorre)
Tue Jan 31 09:01:37 1995
Date: Tue, 31 Jan 1995 10:56:04 +0100
From: security@ncub1.polito.it (Davide Melchiorre)
To: bugtraq@fc.net
X-Envelope-To: bugtraq@fc.net
Thanx for the answers .... but my philosophical doubt permain....
Ok.. all users' lines are copied by hesiod from, usually,
/etc/athena/nameserver/passwd.db into the /etc/passwd when an user
logs into the machine ... but where are archieved the encrypted password
of the users to validate them when they logs into ? ..
Into 'passwd.db' we've got user:*:id:gid:etc.etc. and not the
encrypted password .. but when the user logs into the machine we've
got into the /etc/passwd : user:encr.pass:id:gid:etc.etc. (of course
if there isn't other shadow systems in surplus) ..
To validate an user somewhere should be the encrypted passwords ..
where ? ..
thanx in advance ....
Davide Melchiorre..
