#!/bin/ksh
read -p 'Enter username: ' USERNAME
echo -n 'Enter password: ' ; read PASSWORD >/dev/null
. /another/script '$USERNAME':'$PASSWORD'
-----------
reversible encryption is same as no encryption at all
calling script with password as parameter makes password appear in process list ( ps -ef or ps auxww) for everyone else to see
Main Topics
Browse All Topics





by: jleviePosted on 2004-12-05 at 11:35:02ID: 12749342
How best to do this depends in part on what Unix you are using. Many versions of Unix have a crypt command that could do this (see 'man crypt'). Linux on the other hand doesn't have a simple command line utility for this.
Whether you'll gain any security this way depends entirely on whether the decrypt password is in a file on the system. If it is there's no security advantage to storing decryptable passwords. The security of those is only as good as the security of the file that holds the decrypt key. Only if the decrypt password will be interactively entered each time the encrypted passwords are used will there be any advantage to this process.