Thanks, John - but what I'm trying to do is determine whether the user has entered the right password - and since they don't have shells, I need something that doesn't attempt an actual login.
As to the written authorization, being root on the system, I'd have to authorize myself (in writing, presumably). No shady underhanded stuff going on - it's part of what will be a password change page. Curt On Mon, Dec 7, 2009 at 3:21 PM, John F. Eldredge <j...@jfeldredge.com>wrote: > If I understand your question correctly, you are looking for something that > can be used to test whether or not a given password is valid for a given > account, and you don't want to actually attempt to log in. Forgive me if I > am misinterpreting the situation, but it sounds rather like you are planning > a brute-force attempt at cracking the system, and are trying to avoid the > system logs. If you are, indeed, authorized to do this, make sure you have > authorization in writing. Otherwise, you are risking a felony conviction > and prison time. > > -- > John F. Eldredge -- j...@jfeldredge.com > "Reserve your right to think, for even to think wrongly is better than not > to think at all." -- Hypatia of Alexandria > > -----Original Message----- > From: Curt Lundgren <verif...@gmail.com> > Date: Mon, 7 Dec 2009 12:47:36 > To: NLUG<nlug-talk@googlegroups.com> > Subject: [nlug] Testing Linux user authentication with no shell > > We have a large number of users on a SuSE Linux server without shell > access. I'm looking for a way to test whether a plaintext password is > valid or not. I thought I could use "login" and do something based on > the way it fails (bad password vs. no login shell) but that's not > working for me. > > Does anyone know of something command line based that will give me > thumbs up/thumbs down for a given user/password combination? > > Thanks! > > Curt > > -- > > You received this message because you are subscribed to the Google Groups > "NLUG" group. > To post to this group, send email to nlug-t...@googlegroups.com. > To unsubscribe from this group, send email to > nlug-talk+unsubscr...@googlegroups.com<nlug-talk%2bunsubscr...@googlegroups.com> > . > For more options, visit this group at > http://groups.google.com/group/nlug-talk?hl=en. > > > -- > > You received this message because you are subscribed to the Google Groups > "NLUG" group. > To post to this group, send email to nlug-t...@googlegroups.com. > To unsubscribe from this group, send email to > nlug-talk+unsubscr...@googlegroups.com<nlug-talk%2bunsubscr...@googlegroups.com> > . > For more options, visit this group at > http://groups.google.com/group/nlug-talk?hl=en. > > > -- You received this message because you are subscribed to the Google Groups "NLUG" group. To post to this group, send email to nlug-t...@googlegroups.com. To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en.
