Full Disclosure mailing list archives

Re: password plugin for linux?


From: <full-disclosure () mac hush com>
Date: Thu, 18 Oct 2007 16:39:43 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ask john hale

On Thu, 18 Oct 2007 11:11:24 -0400 ". /"
<winter () shonkyholdings com> wrote:
hi all,

naive question - but you know how i can load password plugins in
window's to
capture password changes in the clear. is there any way to achieve
the same
in linux? atm all i can think of (naively as i said) is to monitor
the
shadow file or whatever and then <insert fav technique here> to
open the
hash. but i am really trying to achieve a near realtime
understanding of
password changes on the system side, so i can sync them out to
apps or
systems or whatever.

are there pam's out there that do this? or maybe there are
rootkits that can
do this, that i could canabalise the password stuff out of to pam-
ify it. im
not looking to write anything nasty here - just think password
sync-ing,
without like a managed enterprise approach like NIS or LDAP auth
or
whatever.

any thoughts would be appreciated :)


david.
-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Charset: UTF8
Version: Hush 2.5

wpwEAQECAAYFAkcXxI8ACgkQqTTbVuUWvbI8KgP/cH3JsxfJ3axZ532sN8oJeUIcE2sq
RYU4MCVbuZ5nDszdB/8dOtqTCNJmARqBPqn/G6HyedBIY6B8hzHIMV8/giqLpx4oF99g
QAuFEEKQNP75UiVb6UAr6d5HLydiNhVh1dz8cl22H2yx8wU1TV/bA5OZja3MxxkOobYX
8xw4swE=
=DqfS
-----END PGP SIGNATURE-----


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: