topic Re: NO Password in Operating System - HP-UX

NO Password

gogleboy — Wed, 06 May 2009 12:36:51 GMT

Hi Team,

Could you tell me the command to find no password users in server,

Thanks
Nanda

Re: NO Password

Steven E. Protter — Wed, 06 May 2009 12:45:24 GMT

Shalom,

There is no command for that.

You can edit /etc/passwd and null out the password field.

Of course this will cause you problems on your next security audit.

SEP

Re: NO Password

Pete Randall — Wed, 06 May 2009 12:49:05 GMT

Perhaps these threads will help:
http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1108594
http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1103234

Pete

Re: NO Password

Patrick Wallek — Wed, 06 May 2009 12:57:29 GMT

Run 'passwd -s ' for each user. If the result is something like:

username NP

Then that means the user does not have a password set.

This could be easily scripted as well:

for USER in $(awk -F : '{print $1}' /etc/passwd)
do
passwd -s ${USER}
done

Re: NO Password

mobidyc — Wed, 06 May 2009 13:13:36 GMT

Hello,

on untrusted system you can use this command:
awk -F: '{if($2 ~ /\*/ ){print $1 " has curently no password"}}' /etc/passwd

on trusted system, use the /etc/shadow file.

regars,
Cedrick Gaillard

Re: NO Password

OldSchool — Wed, 06 May 2009 13:15:08 GMT

I don't recall exactly, but, if you're root, "passwd -s" (without id) or "passwd -s *" should list every user currently in /etc/passwd. I believe it's the first case, but haven't got access to an hp box at the moment

Re: NO Password

mobidyc — Wed, 06 May 2009 13:36:07 GMT

I'm not sure OldSchool:

# passwd -s
root PS
# passwd -s *
Invalid login name.
# passwd -s \*
Invalid login name.

duh!

Regards,
Cedrick Gaillard

Re: NO Password

G V R Shankar — Wed, 06 May 2009 14:35:18 GMT

Hi,

logins -p will give you the list of users, that doesn't have password.

Ravi.

Re: NO Password

gogleboy — Wed, 06 May 2009 14:53:11 GMT

Thanks lot dear friends...

Re: NO Password

OldSchool — Wed, 06 May 2009 18:31:10 GMT

Mobidyc said: "duh!"

In my defense, I *said* I wasn't able to check it....after looking at the online "man" page, what I should have said was:

as root on non-trusted system, run:

passwd -s -a

oh, well....

Re: NO Password

mobidyc — Thu, 07 May 2009 09:08:49 GMT

Hey OldSchool,

I said duh! but it was not pejorative.
Please don't think it had a critical meaning.

Best regards,
Cedrick Gaillard.