full-disclosure - password plugin for linux?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Thu, 18 Oct 2007 10:11:24 -0500
From: ". /" <winter@...nkyholdings.com>
To: full-disclosure@...ts.grok.org.uk
Subject: password plugin for linux?

hi all,

naive question - but you know how i can load password plugins in window's to
capture password changes in the clear. is there any way to achieve the same
in linux? atm all i can think of (naively as i said) is to monitor the
shadow file or whatever and then <insert fav technique here> to open the
hash. but i am really trying to achieve a near realtime understanding of
password changes on the system side, so i can sync them out to apps or
systems or whatever.

are there pam's out there that do this? or maybe there are rootkits that can
do this, that i could canabalise the password stuff out of to pam-ify it. im
not looking to write anything nasty here - just think password sync-ing,
without like a managed enterprise approach like NIS or LDAP auth or
whatever.

any thoughts would be appreciated :)

david.

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/