[Linux-disciples] Converting to DES passwords

Stephen R Laniel steve at laniels.org
Thu Nov 11 15:45:27 EST 2004


It appears [1] that integrating OS X with NIS requires
converting from MD5 passwords to DES ones. Does anyone have
any idea how to do that?

I followed the advice in [2] and incorporated my non-system
shadow passwords into the passwd file using pwunconv. That
was the right thing to do, I assume?

[1] - http://www.bresink.de/osx/nis.html

Frequently Asked Questions
The NIS server is running an up-to-date Unix version. Mac OS
X has no problems accessing the database but logging in with
a NIS user account does not work

The current versions of Mac OS X assume that passwords are
encrypted using the classic DES scheme. Some Unix releases
use the modern MD5 encryption by default. If your NIS server
is using MD5 encryption, it won't be compatible with Mac OS
X. To check if this is causing the problem, enter

    ypcat passwd | tail

on any NIS client to display the last few lines of the user
database. The lines are structured like the following
example:

    guest:Cl/pdFPSstxJ2:596:100:Guest
User:/home/guest:/bin/tcsh

The part between the first and second colons (:) is the
encrypted user password. If it is longer than 13 characters
or begins with an "$1" marker, it is not DES-encrypted and
therefore not compatible. Here is a typical example:

    guest:$1$tJ2gSlhl$awGvwSsuXUP0jmkJmgDgK.:596:100:Guest
User:/home/guest:/bin/tcsh

Unfortunately, there is no other solution than to switch
your NIS server to DES encryption and to rebuild the whole
user database. Your server's documentation should have more
information about this.

[2] -
http://shorl.com/jajysubehafo

-- 
``Here, at last, are the cats.''
 -Cosma Shalizi, http://shorl.com/bastojepikyfro



More information about the Linux-disciples mailing list