Great Circle Associates Firewalls
(May 1994)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Password Aging
From: yerkes_chuck @ jpmorgan . com
Date: Fri, 6 May 94 12:50:06 EDT
To: firewalls @ GreatCircle . COM, ken @ cameron . East . Sun . COM

I IS reassuring to see that Sun can't get Sun support better than
anyone else.  No, I have never found a password aging this with NIS.
The trick I've used it to have a program nightly look at the SOURCE 
map and store the information/user with the date. (using perl)  Do
a dbm lookup against USER to get PASSWORD (encrypted).  If it's different,
run CRACK on it and store it and note the date (a separate DBM map).
After an aging time, send mail to the user, after a period (three weekdays)
change it to "EXPIRED" and rebuild NIS.  It's weak in that until this job
is run, the password could be "password" and be vulnerable.  But it's
better than nothing.

If you want to send us source for YPPASSWD, I'll be happy to improve it ;)

chuck yerkes
Sr Consultant, OpenVision Technologies.

> 
> 
> Hi All,
> 
> 	Does anyone have any expeirence with password aging using NIS???? Are
> there any password aging apps out there that are compatible with NIS??? We have
> tried ARM and it's a no go!!!! And I don't beleive the standard SunOS password
> aging works with NIS.
> 
> Helppppppppppppppppppppppppppp!!!!!!!!!!!!!!!
> 
> 
> Ken

Indexed By Date Previous: Re: Resolving IP Addresses
From: yerkes_chuck @ jpmorgan . com
Next: Re: Router advice needed -- Me too
From: Fernando Cabral <fernando%boemia @ ax . apc . org>
Indexed By Thread Previous: Password Aging
From: ken @ cameron . East . Sun . COM (Ken Harford - Network Architecture Consultant)
Next: Re: Password Aging
From: jim @ Tadpole . COM (Jim Thompson)

Google
 
Search Internet Search www.greatcircle.com