[3777] in testers
Re: More data on passwd
daemon@ATHENA.MIT.EDU (Greg Hudson)
Tue Jul 14 16:43:25 1998
To: Dan Winship <danw@MIT.EDU>
Cc: "Naomi B. Schmidt" <nschmidt@MIT.EDU>, ghudson@MIT.EDU, testers@MIT.EDU
In-Reply-To: Your message of "Tue, 14 Jul 1998 16:41:22 EDT."
<199807142041.QAA26134@antharia.mit.edu>
Date: Tue, 14 Jul 1998 16:43:15 EDT
From: Greg Hudson <ghudson@MIT.EDU>
> Greg, can you delete that transaction from testers?
Done. Here's the text of the transaction with the public root
password expunged:
Subject: More data on passwd
To: ghudson@MIT.EDU
Cc: testers@MIT.EDU
Date: Tue, 14 Jul 1998 16:35:34 EDT
From: "Naomi B. Schmidt" <nschmidt@MIT.EDU>
This may or may not be relevant, but the sequence of events is as
follows:
1. I got my CPU swapped out for a new one this morning because of
hardware failures. The new CPU (I kept the name mozart) had the
standard *CENSORED* password. It was also still running 8.1.
2. I became root under 8.1 and changed the root password (at
least I thought I changed it, as the feedback I got was standard)
using /bin/passwd. I then became myself again.
3. After receiving a srvtab, I tried logging in as root again
with the new password but wasn't allowed to log in, getting the
reply 'Sorry'. I needed to go off to a meeting, so decided to
reboot in the mean time before trying again or trying *CENSORED*
again
4. On rebooting, I autoupdated to 8.2. I tried becoming root
again, and this time tried the old password (*CENSORED*) which still
seemed to work. Now that I was running 8.2, I decided to try
changing the password again, this time using the plain passwd
command. The result is what I sent in my previous message.
I'm not sure why the /bin/passwd command didn't take effect the
first time. This may or may not be relevant.
Naomi
