Copying The shadow , and the password file !

[netwalker1]

Dear All :
I have 2 similar Redhat Linux machines ..
I did copy the Group , Password , Shadow , gshadow files from one of them to the other one ..

The problem is that I can't login to the 2nd one anymore !
Any help ...
How can I solve this ,..

Mohamed Farid
[green]Know Me No Pain , No Me Know Pain !!![/green]
CCNP,CCSP,CCA,MCSE,MCSA

 

[thedaver]

The message is that you shouldn't do that!
Ask first. Measure twice, cut once.

http://www.surfinbox.com/hosting/

 

[netwalker1]

OK ..
How Can I do this in the future ...


Mohamed Farid
[green]Know Me No Pain , No Me Know Pain !!![/green]
CCNP,CCSP,CCA,MCSE,MCSA

 

[ericbrunson]

I don't know why you can't do it, I do it all the time.

Unless one box is configed to use a different password scheme than the other, e.g. md5 vs. crypt.

 

[thedaver]

Reason #1

Box 1 == hacked user in shadow/passwd
Box 2 == new, not hacked
copy Box 1 shadow/passwd -> Box 2
Box 2 == hacked

Reason #2
Different OS, or crypt (see Eric's post above)(

Reason #3
Terrible security practice

Reason #4
You have potentially made a copy (.zip or .tar.gz) of your passwd from Box #1 and have made it "grabbable" from the local box, the new box, or the network in between. Depending upon your circumstances this is potentially a BIG DEAL^tm

http://www.surfinbox.com/hosting/

 

[cdlvj]

I even copied a SCO Unixware passwd/shadow/group to a RH box and it worked fine.

 

[ericbrunson]

I don't really agree with the assessment that it's a security risk.

#1 most exploits aren't the result of cracking the password, so moving an encrypted password to another machine isn't really an issue to me.

#4 if you now your tools and know they aren't making an intermediate copy, there's no risk

 

[thedaver]

...and if you're asking in this forum...?

http://www.surfinbox.com/hosting/

 

[ericbrunson]

I wasn't my question.

 

[thedaver]

Fair enough Eric...

http://www.surfinbox.com/hosting/

 

[netwalker1]

I don't know ,,,
May be the 2nd BOX has special security issue or something ...

the reason Which I made this is that I am updating my servers.. from small servers to huge ones ..
We need to do this without changing the 600 users' passwords !

Anyway , I did a ghost for the Servers , and It works fine now after updating the drivers , and resetting the environment variables ..

Thanks ,,,


Mohamed Farid
[green]Know Me No Pain , No Me Know Pain !!![/green]
CCNP,CCSP,CCA,MCSE,MCSA