topic decrypt password from /tcb/auth/file in Operating System - HP-UX

decrypt password from /tcb/auth/file

amipankaj — Wed, 24 Nov 2010 15:32:23 GMT

Hi Expert,

Is it possible to decrypt password from /tcb/auth/file in a trusted HPUX box? If yes...how?

Thanks and Regards,
Pankaj Roy

Re: decrypt password from /tcb/auth/file

madhuchakkaravarthy — Wed, 24 Nov 2010 15:37:06 GMT

hi

its /tcb/files/auth and not tcb/auth/file

suppose if u want to edit pwd for pankaj

go to
#cd tcb/files/auth/p
#vi pankaj ( username)

edit upwd from = to :

otherwise u can edit /etc/secureety/default file and change the min history depth

regards

MC

Re: decrypt password from /tcb/auth/file

Shibin_2 — Wed, 24 Nov 2010 15:55:10 GMT

This is a similar post, what you are looking for.

http://forums11.itrc.hp.com/service/forums/questionanswer.do?admit=109447626+1290613623030+28353475&threadId=1023012

Attachment was removed due to security reason. You may ask him personally.

Re: decrypt password from /tcb/auth/file

Patrick Wallek — Wed, 24 Nov 2010 16:50:58 GMT

No, it is not possible to decrypt passwords. Passwords are a 'hash', which is a one-way encryption function.

When you log in, the password you enter is hashed and the resulting value compared with what is stored. If they match, you are good.

The value stored in /etc/passwd or /tcb/files/* or /etc/shadow is never "decrypted" once it has been "encrypted" (hashed).

Re: decrypt password from /tcb/auth/file

Ismail Azad — Thu, 25 Nov 2010 04:58:11 GMT

Hi,

This depends on which encryption algorithm is being done on the O.S if it's DES or SHA512, the latter for which you would need an extra bundle and this can be identified if you see two dollar symbols in the ciphertext. Now, it's not possible to decrypt the password but making the password visible can allow a hacker to compare the encrypted password with the dictionary and in the worst case successfully "guess" the password which is the reason for which we have /etc/shadow and in your case the trusted system. Don't forget to assign points to those who have taken the time to help you out. :)

Regards