Re: [AOLSERVER] nspasswd/nsperm

2004-02-27 Thread Dossy
On 2004.02.27, John Shafto [EMAIL PROTECTED] wrote:
 Reading the docs, it says that one can either use the bin/nspasswd
 program or cut and paste an encrypted password from the system passwd
 file.   Well, there is no bin/nspasswd program in any of the aolserver
 builds I have.

What docs are you reading?  On the web?  If so, please provide the URL.
I have a feeling you're looking at old (AOLserver 2.x) docs ...

 I find some references on the web to a ns_passwd module for encrypting
 passwords within the server, but nothing outside.  When I copy from
 the system passwd file, the '$' characters in the md5 encrypted
 passwords there goof the nsperm module up, and it fails to load.  I
 even tried to remove the $1$ md5 marker at the beginning, but '$'
 within the passwords still messed it up.

nsperm doesn't speak md5 hashed passwords, only unix crypt.  If you need
to crypt a password, try this Perl script one-liner:

$ perl -le 'print crypt(password, ..);'
..UZoIyj/Hy/c

Replace password with the password you want to encrypt (up to 8
characters -- anything more gets truncated silently anyway).  The output
from the script (..UZoIyj/Hy/c) is the crypted password that you can
cut and paste into your passwd file.

 I suppose it wants DES or some other encryption type there,
 any clues/tips on what it wants, and how to get it quickly
 (without writing a program)?

Sorry, wrote a program.  But, Perl is widespread enough that I'm
figuring it's not a problem.

-- Dossy

--
Dossy Shiobara   mail: [EMAIL PROTECTED]
Panoptic Computer Network web: http://www.panoptic.com/
  He realized the fastest way to change is to laugh at your own
folly -- then you can let go and quickly move on. (p. 70)


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to [EMAIL PROTECTED] with the
body of SIGNOFF AOLSERVER in the email message. You can leave the Subject: field of 
your email blank.


Re: [AOLSERVER] nspasswd/nsperm

2004-02-27 Thread John Shafto
On Fri, 27 Feb 2004 18:17:52 -0500,
 Dossy [EMAIL PROTECTED] tippety tapped:

 On 2004.02.27, John Shafto [EMAIL PROTECTED] wrote:
  Reading the docs, it says that one can either use the bin/nspasswd
  program or cut and paste an encrypted password from the system passwd
  file.   Well, there is no bin/nspasswd program in any of the aolserver
  builds I have.

 What docs are you reading?  On the web?  If so, please provide the URL.
 I have a feeling you're looking at old (AOLserver 2.x) docs ...

The docs on www.aolserver.com are pretty old, from 1996, but I have
downloaded the 3.x docs from sourceforge, and it (Admin-Security)
says the same thing on my local copy, which is tagged:
$Header: /cvsroot/aolserver/aolserver.com/docs/admin/security.html,v 1.1
 2002/03/07 19:15:34 kriston Exp

The 'Permissions and Access Control Guide' doesn't say anything about
bin/nspasswd, but it does say that copying a password from /etc/passwd
is the way to get it done (not on systems that use MD5 though).



  I find some references on the web to a ns_passwd module for encrypting
  passwords within the server, but nothing outside.  When I copy from
  the system passwd file, the '$' characters in the md5 encrypted
  passwords there goof the nsperm module up, and it fails to load.  I
  even tried to remove the $1$ md5 marker at the beginning, but '$'
  within the passwords still messed it up.

 nsperm doesn't speak md5 hashed passwords, only unix crypt.  If you need
 to crypt a password, try this Perl script one-liner:

 $ perl -le 'print crypt(password, ..);'
 ..UZoIyj/Hy/c

Thank you much.

(That's not really a 'program' in my view ;)



--
 Eat drink and be merry, for tomorrow they may make it illegal.


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to [EMAIL PROTECTED] with the
body of SIGNOFF AOLSERVER in the email message. You can leave the Subject: field of 
your email blank.