decrypt password from /tcb/auth/file

[amipankaj]

Hi Expert,

Is it possible to decrypt password from /tcb/auth/file in a trusted HPUX box? If yes...how?


Thanks and Regards,
Pankaj Roy

[madhuchakkaravarthy]

hi

its /tcb/files/auth and not tcb/auth/file

suppose if u want to edit pwd for pankaj

go to
#cd tcb/files/auth/p
#vi pankaj ( username)

edit upwd from = to :

otherwise u can edit /etc/secureety/default file and change the min history depth

regards

MC

[Shibin_2]

This is a similar post, what you are looking for.

http://forums11.itrc.hp.com/service/forums/questionanswer.do?admit=109447626+1290613623030+28353475&threadId=1023012

Attachment was removed due to security reason. You may ask him personally.

[Patrick Wallek]

No, it is not possible to decrypt passwords. Passwords are a 'hash', which is a one-way encryption function.

When you log in, the password you enter is hashed and the resulting value compared with what is stored. If they match, you are good.

The value stored in /etc/passwd or /tcb/files/* or /etc/shadow is never "decrypted" once it has been "encrypted" (hashed).

[Ismail Azad]

Hi,

This depends on which encryption algorithm is being done on the O.S if it's DES or SHA512, the latter for which you would need an extra bundle and this can be identified if you see two dollar symbols in the ciphertext. Now, it's not possible to decrypt the password but making the password visible can allow a hacker to compare the encrypted password with the dictionary and in the worst case successfully "guess" the password which is the reason for which we have /etc/shadow and in your case the trusted system. Don't forget to assign points to those who have taken the time to help you out. :)

Regards