Shadow file entry question
Matthew Gillen
me-5yx05kfkO/aqeI1yJSURBw at public.gmane.org
Fri Nov 19 11:24:17 EST 2010
On 11/19/2010 11:18 AM, Chandler, Scott wrote:
> The "x" is a standin for an encrypted password in the *passwd* file, not the shadow file.
>
> If I had to guess, I'd say that someone manually edited the shadow file to prevent logons but I can't confirm that.
>
> Any other thoughts?
man 5 shadow:
> encrypted password
> Refer to crypt(3) for details on how this string is interpreted.
>
> If the password field contains some string that is not a valid result of crypt(3), for instance ! or *, the user will not be able to use a
> unix password to log in (but the user may log in the system by other means).
>
> This field may be empty, in which case no passwords are required to authenticate as the specified login name. However, some applications
> which read the /etc/shadow file may decide not to permit any access at all if the password field is empty.
>
> A password field which starts with a exclamation mark means that the password is locked. The remaining characters on the line represent
> the password field before the password was locked.
'x' is not a valid result of crypt(3). So it is equivalent to "*" or "!".
More information about the Discuss
mailing list