Hi,
Further to the dramas about crypt()..
> > >The crypt() function is unimplemented due to excessive paranoia
> > remove crypt() call from script.
> > Or use so called non-US distributions.
>crypt() is in the libcrypt add-on to glibc.
Which I might obtain from where?
> depending on your distro, this might be a separate package or bundled
with glibc,
This is a distro I purchased in 1999, containing kernel version 2.2.6 I
have reinstalled that package and then installed gcc 2.95.3., and then
kernel version 2.2.18. As best I can tell I'm using glibc-2.0.7, which
is pretty old.
The problem is this...
Passwords are stored in /etc/shadow and are encrypted. Many scripts use
crypt() to figure out if a password entered matches a password stored in
/etc/shadow. So if crypt() has been removed, how does one validate
passwords?
For one program this is the code where it fails...
if (($usr ne $username) or (crypt($password, $pswd) ne $pswd)) {
$passcorrect = 1; # User/Pass combo is WRONG!
Sure, I can bypass that, however, that makes my system wide open. Ie. it
doesn't matter what password you enter, you can get into the ...
(whatever)
There must be a better solution?
Is it the upgrade to 2.2.18 that caused the problem? Or gcc, or what?
Would reinstalling an older version of whatever contained the
'crypt-less' lib solve the problem?
Thanks for your help.
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to [EMAIL PROTECTED]
Please read the FAQ at http://www.linux-learn.org/faqs
