[lug] Users added during install with no password
Bill Thoen
bthoen at gisnet.com
Thu Jul 1 18:17:32 MDT 2004
On Thu, 1 Jul 2004, Zan Lynx wrote:
> On Thu, 2004-07-01 at 17:52, Bill Thoen wrote:
> > I recently installed RH 9.0 and noticed that the user named 'rpm' was
> > added in the process and assigned the /bin/bash shell... but no password.
>
> Are you sure it's blank? On my system, the rpm user has an "x" for a
> password in the /etc/passwd file and !! in the /etc/shadow file. An x
> is not a valid crypt or MD5 hash, so it really means the rpm user isn't
> allowed to log in at all. If you are using shadow passwords, an "x"
> means a shadow password; for those you look in /etc/shadow. Again, an
> invalid hash in /etc/shadow means the user isn't allowed to log in.
Ah, that's it then. I have two bangs in the password position for 'rpm' in
/etc/shadow and there I also see the encrypted passwords on the users I
know have passwords, and those look reassuringly complicated.
Thanks!
- Bill Thoen
More information about the LUG
mailing list