full-disclosure - Re: password plugin for linux?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <20071018203943.B4D53DA826@mailserver8.hushmail.com>
Date: Thu, 18 Oct 2007 16:39:43 -0400
From: <full-disclosure@....hush.com>
To: <full-disclosure@...ts.grok.org.uk>,<winter@...nkyholdings.com>
Subject: Re: password plugin for linux?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ask john hale

On Thu, 18 Oct 2007 11:11:24 -0400 ". /"
<winter@...nkyholdings.com> wrote:
>hi all,
>
>naive question - but you know how i can load password plugins in
>window's to
>capture password changes in the clear. is there any way to achieve
>the same
>in linux? atm all i can think of (naively as i said) is to monitor
>the
>shadow file or whatever and then <insert fav technique here> to
>open the
>hash. but i am really trying to achieve a near realtime
>understanding of
>password changes on the system side, so i can sync them out to
>apps or
>systems or whatever.
>
>are there pam's out there that do this? or maybe there are
>rootkits that can
>do this, that i could canabalise the password stuff out of to pam-
>ify it. im
>not looking to write anything nasty here - just think password
>sync-ing,
>without like a managed enterprise approach like NIS or LDAP auth
>or
>whatever.
>
>any thoughts would be appreciated :)
>
>
>david.
-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Charset: UTF8
Version: Hush 2.5

wpwEAQECAAYFAkcXxI8ACgkQqTTbVuUWvbI8KgP/cH3JsxfJ3axZ532sN8oJeUIcE2sq
RYU4MCVbuZ5nDszdB/8dOtqTCNJmARqBPqn/G6HyedBIY6B8hzHIMV8/giqLpx4oF99g
QAuFEEKQNP75UiVb6UAr6d5HLydiNhVh1dz8cl22H2yx8wU1TV/bA5OZja3MxxkOobYX
8xw4swE=
=DqfS
-----END PGP SIGNATURE-----


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/