Shadow file entry question

[Chandler, Scott]

The "x" is a standin for an encrypted password in the *passwd* file, not the shadow file.

If I had to guess, I'd say that someone manually edited the shadow file to prevent logons but I can't confirm that.

Any other thoughts?


-----Original Message-----
From: Nathan Meyers [mailto:nmeyers-BigylZdZcsdmcu3hnIyYJQ at public.gmane.org] 
Sent: Friday, November 19, 2010 11:12 AM
To: Chandler, Scott
Cc: discuss-mNDKBlG2WHs at public.gmane.org
Subject: Re: Shadow file entry question

On Fri, Nov 19, 2010 at 10:50:32AM -0500, Chandler, Scott wrote:
> We've got a system which is being audited for SOX compliance. The auditors are asking about entries in the shadow file. For the users haldaemon and messagebus, the password section contains a single x. Note, this is the shadow file, not the passwd file. Any idea what that x denotes?
> 
> haldaemon:x:14517:0:99999:7:::0
> messagebus:x:14517:0:99999:7:::0

The shadow file holds the actual (encrypted) passwords if you're using shadow passwords. That "x" is a standin for the encrypted password; because it's there, there is no valid password for those accounts and they cannot do password-based login.

Nathan


> > Thanks, > Scott > > _______________________________________________
> Discuss mailing list > Discuss-mNDKBlG2WHs at public.gmane.org >
http://lists.blu.org/mailman/listinfo/discuss >