How do I verify a password in Solaris 9 default install without using it ?  I need to script this.

Posted on 2008-10-01
Last Modified: 2013-11-13
Long story short, I create a LOT of temp accounts for short term programmers from other lands.

What is the easiest way to verify they have an account and the password works WITHOUT using it.

I would like to create a little script that zips though.  

su  does not seem to behave well in a script :)

Question by:itguy411
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
  • +2
LVL 48

Expert Comment

ID: 22618692
Do you know what the password for the accounts is or will you have to guess it?

Author Comment

ID: 22619201
I know it.  

I create it

LVL 48

Accepted Solution

Tintin earned 300 total points
ID: 22619344
In that case, you can verify the account exists by doing

grep username: /etc/passwd

for the password, you need to extract the encrypted password from /etc/shadow and then run it through the following perl script, eg:  somepasswd a3bL.vfoZZTk6
my ($pass,$encrypted) = @ARGV;
print "Match\n" if (crypt($pass,$encrypted) eq $encrypted);

Open in new window

 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

LVL 35

Expert Comment

by:Duncan Roe
ID: 22619353
If using shadow passwords, you need to be root because you have to verify passwords against /etc/shadow. Then you can run through /etc/passwd. Might be best to do with a C program - doing it in a script could be a bit of an ask
LVL 35

Expert Comment

by:Duncan Roe
ID: 22619364
Ok perl will do it
LVL 40

Expert Comment

ID: 22620125
if ftp is enabled for these users (which is the default) then you may use ftp client to access and get some file. e.g. you can use

wget ftp://servername/etc/hosts --ftp-user=username --ftp-password=password

here link to download wget if you don't have it already installed:

please check the site for dependencies

(I know, it is not the best way to do so)

Expert Comment

ID: 22622219
It could be a risk running a script or command with username/password as an argument.
If someone makes an '$>ps -ef' during this short time they will probably see a password or worse, username and password.

I wish I had and waterproof answer but at the moment I don't.
At least you could run these tests on a closed machine where only you have access?
LVL 40

Expert Comment

ID: 22622425
the test can be run from a remote system where no users are using it

Author Closing Comment

ID: 31502136
This does work  

Featured Post


Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

What do responsible coders do? They don't take detrimental shortcuts. They do take reasonable security precautions, create important automation, implement sufficient logging, fix things they break, and care about users.
Part One of the two-part Q&A series with MalwareTech.
With the power of JIRA, there's an unlimited number of ways you can customize it, use it and benefit from it. With that in mind, there's bound to be things that I wasn't able to cover in this course. With this summary we'll look at some places to go…
Simple Linear Regression
Suggested Courses

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question