I don't understand why you have a Pass field at all. Default passwords are evil, and are an obvious route for attackers. Perhaps Pass should be a flag to indicate that Fink should prompt the user for a password? That's still rotten, IMHO, but infinitely better than having default passwords.
The usual procedure is to use "*" as the crypted password for daemon accounts, indicating that nobody may log in using that account directly. IIRC, a blank password crypt usually means that no password is required for login, yes? That would be very bad.
Chris
On Monday, August 11, 2003, at 09:36 AM, TheSin wrote:
I have started a new fink branch to auto add and remove users/groups. I'd like to vote on the field style for this.
Type 1: User: << Name: postfix Desc: Postfix User Pass: password Shell: /usr/bin/false Home: %p/var/mail << Group: << Name: postfix Desc: SMTP group Pass: password <<
or type 2:
User: postfix:Postfix User:password:/usr/bin/false:%p/var/mail Group: postfix:SMTP Group:password
in both cases password can be left out to auto gen one. in the first case just leave the whole tag out in the second leave it blank so user would be
name:desc::shell:home
shell can also be left out and will default to /usr/bin/false
-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/ direct;at.aspnet_072303_01/01
_______________________________________________
Fink-devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/fink-devel
-- Chris Dolan, Software Developer, Clotho Advanced Media Inc. [EMAIL PROTECTED], 294-7900, 211 S Paterson, Madison WI 53703
------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Fink-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/fink-devel
