12 Nov
2010
12 Nov
'10
11 a.m.
Hello Dan,
Dan White, 12.11.2010 (d.m.y):
What is doing the authentication? Are you using pam_unix via an ldap nss module, or maybe pam_ldap?
We're using pam_ldap.
If pam_unix, see pam_unix/passverify.c in the pam source, which expects an md5 hash to have the format of:
$1$SALT$HASH
like:
$1$6biGTEUt$FrTcXRocuExNsLZItn06l1
However, you have two dollar signs after your salt, and I don't know that indicates. I tried playing around with your hash but couldn't get it to match 'password' on my Debian system.
That's why I suppose that Solaris' MD5 has not that much in common with "GNU MD5". *All* MD5 hashes in Solaris' /etc/shadow start with "$md5$".
Gruss/Regards, Christian Schmidt
--
Q: Why was Stonehenge abandoned?
A: It wasn't IBM compatible.