question about modem security

[Mark Fenton]

probably a dumb question, but I'm feeling lazy and stupid just now.

1) /etc/dialups and d_passwd
I get the deal with the tty name in dialups, but how in blazes am I supposed to get an encrypted passwd into the d_passwd file?

This is all probably a little complicated by the fact that we're at trusted system (read tlb db vice normal passwd file) and I didn't have any modem security in place prior.

Do I need to create a "user" with the terminal name and assign it a passwd that way?

Any advise from someone who's done this appreciated.

[Sundar_7 · Accepted solution]

Hi Mark,

Refer the attached pic. that explains the flow.

1) List all the terminal device files in /etc/dialups.

2) d_passwd file format is as below

:

Eg:

/usr/bin/sh:
/usr/bin/ksh:
/usr/bin/csh:

3) You can create encrypted passwords by using makekey command or by adding a temporary user, copy the password from /tcb/files/auth//username file and delete the user./

# echo "Password12" | makekey

makekey takes 10 chars as input - first 8 chars for the password, the next 2 is the password salt.

Copy and paste the output to /etc/d_passwd.

4) Now when a user logsin, his tty is compared with the entries in /etc/dialups, if it matches, then the dialup password is determined based on the login shell of the user.

If the user is using /usr/bin/sh, d_passwrd will be checked for the entries starting with /usr/bin/sh and the user should enter the correct password to get in.

Hope this helps

-- Sundar

[Mark Fenton]

suscinct and thorough.

Thank you very much