Re: strange result when typing wrong password

2002-06-07 Thread Alfred M. Szmidt
* Marcus Brinkmann writes: > Yeah, well, IIRC, you have made such hacks unnecessary, too! Good job. And AFAIC pigs fly and pink elephants are out side my window. :) These hacks are still needed as Paul/Jim haven't applied them (papers, need to send those damn papers) yet. Cheers, -- Alfred M. S

Re: strange result when typing wrong password

2002-06-07 Thread Marcus Brinkmann
On Sat, Jun 08, 2002 at 02:15:50AM +0200, Alfred M. Szmidt wrote: > That doesn't work by a long shot if I remember correctly. That happens when computer programs think they are smarter than the user :) > You need a > patch (look around in the archives, I think I posted a hack for > this). Yeah,

Re: strange result when typing wrong password

2002-06-07 Thread Alfred M. Szmidt
* Marcus Brinkmann writes: > But chmod knows about octal numbers! ;) So you can actually just calculate > the right octal number and pass it to chmod on the command line, IIRC. > Something like > # chmod 0400644 /etc/passwd > should do the job (untested!). That doesn't work by a long shot if

Re: strange result when typing wrong password

2002-06-07 Thread Marcus Brinkmann
On Thu, Jun 06, 2002 at 09:24:35AM +0200, Niels Möller wrote: > There are four more bits than the traditional rwxrwxrwx. And you want > to do is modify those bits on /etc/passwd to say (i) processes that > have no uid:s at all are not included in "others", and (ii) such > processes are not allowed

Re: strange result when typing wrong password

2002-06-06 Thread Niels Möller
Niklas Söderlund <[EMAIL PROTECTED]> writes: > btw, shouldn't shadow-passwords be default? shadow-passwords breaks some things. A user should be able to run a program that verifies that a given string matches the user's own password. Examples of programs that need to do that are xlock, and person

Re: strange result when typing wrong password

2002-06-06 Thread Niels Möller
Niklas Söderlund <[EMAIL PROTECTED]> writes: > So, how do i solve this problem? I'd like to keep the login-account, > without komprimising security. There are four more bits than the traditional rwxrwxrwx. And you want to do is modify those bits on /etc/passwd to say (i) processes that have no u

Re: strange result when typing wrong password

2002-06-05 Thread Söderlund
On Wed, 5 Jun 2002 13:49:00 -0700 Marcus Brinkmann <[EMAIL PROTECTED]> wrote: > On Wed, Jun 05, 2002 at 09:56:44PM +0200, Niklas Söderlund wrote: > > bug-hurd list instead, but I don't even know if this is a bug. > > > > Sure it's a bug! :) Next time on bug-hurd@gnu.org, as a Debian bug report

Re: strange result when typing wrong password

2002-06-05 Thread Alfred M. Szmidt
Ignore this, Roland did it before me and he did it a bit nicer. Sighs... 2002-05-05 Alfred M. Szmidt <[EMAIL PROTECTED]> * Makefile (login-.bash_login): New target. * login-.bash_login.in: New file. * login-.bash_login: Removed. -- Alfred M. Szmidt -- To UNSUBSCRIB

Re: strange result when typing wrong password

2002-06-05 Thread Alfred M. Szmidt
Here is a patch that fixes the problem. Niklas, could you try it and see that it works correctly? 2002-05-05 Alfred M. Szmidt <[EMAIL PROTECTED]> * Makefile (login-.bash_login): New target. * login-.bash_login.in: New file. * login-.bash_login: Removed. Index: config/

Re: strange result when typing wrong password

2002-06-05 Thread Söderlund
On Wed, 5 Jun 2002 13:49:00 -0700 Marcus Brinkmann <[EMAIL PROTECTED]> wrote: > On Wed, Jun 05, 2002 at 09:56:44PM +0200, Niklas Söderlund wrote: > > bug-hurd list instead, but I don't even know if this is a bug. > > > > Sure it's a bug! :) Next time on bug-hurd@gnu.org, as a Debian bug report

Re: strange result when typing wrong password

2002-06-05 Thread Söderlund
On 05 Jun 2002 22:37:38 +0200 [EMAIL PROTECTED] (Alfred M. Szmidt) wrote: > * Niklas Söderlund writes: > > All I did was to change directory to /, issue "login root" and type > > in the wrong password. usually, if i am standing in /etc/login/ it > > only says "login: Invalid password", but in a

Re: strange result when typing wrong password

2002-06-05 Thread Söderlund
On 05 Jun 2002 22:42:16 +0200 [EMAIL PROTECTED] (Niels Möller) wrote: > Niklas Söderlund <[EMAIL PROTECTED]> writes: > > > Yup, but since /bin/login is suid:ed as root, > > There's no reason /bin/login need to be setuid root on the Hurd. > > Why not? You tell login your name and passwd. login s

Re: strange result when typing wrong password

2002-06-05 Thread Marcus Brinkmann
On Wed, Jun 05, 2002 at 10:42:16PM +0200, Niels M?ller wrote: > PPS. On the only Hurd system I have access to, /usr/bin/login is > actually setuid root. I hope that's a bug. Yeah, it seems the Hurd packaging is not sober. Too many programs in the Hurd package end up being suid root for no reason

Re: strange result when typing wrong password

2002-06-05 Thread Marcus Brinkmann
On Wed, Jun 05, 2002 at 10:26:37PM +0200, Niklas Söderlund wrote: > Yup, but since /bin/login is suid:ed as root, it should be harmless > to do chmod 640 /etc/passwd? login isn't (or shouldn't be) suid root. The password server runs as root, though. Thanks, Marcus -- To UNSUBSCRIBE, email to

Re: strange result when typing wrong password

2002-06-05 Thread Marcus Brinkmann
On Wed, Jun 05, 2002 at 09:56:44PM +0200, Niklas Söderlund wrote: > bug-hurd list instead, but I don't even know if this is a bug. > Sure it's a bug! :) Next time on bug-hurd@gnu.org, as a Debian bug report or as a bug report in the Savannah Hurd project, please (whatever is most convenient for

Re: strange result when typing wrong password

2002-06-05 Thread Niels Möller
Niklas Söderlund <[EMAIL PROTECTED]> writes: > Yup, but since /bin/login is suid:ed as root, There's no reason /bin/login need to be setuid root on the Hurd. Why not? You tell login your name and passwd. login sends them to the passwd server. If they are correct, the passwd server replies with a

Re: strange result when typing wrong password

2002-06-05 Thread Alfred M. Szmidt
* Niklas SÂÃderlund writes: > All I did was to change directory to /, issue "login root" and type in the > wrong password. > usually, if i am standing in /etc/login/ it only says "login: Invalid > password", but in > another working directory it tries to login. This is because of a bug in the .b

Re: strange result when typing wrong password

2002-06-05 Thread Söderlund
On 05 Jun 2002 22:18:12 +0200 [EMAIL PROTECTED] (Niels Möller) wrote: > Niklas Söderlund <[EMAIL PROTECTED]> writes: > > > Use `login USER' to login, or `help' for more information. > > login> grep root /etc/passwd > > root::0:0:root:/root:/bin/bash > > > > Anyone know why it is like this? Is it

Re: strange result when typing wrong password

2002-06-05 Thread Söderlund
On Wed, 5 Jun 2002 13:12:04 -0700 (PDT) James Morrison <[EMAIL PROTECTED]> wrote: > It seems like you press enter a couple of extra times. I don't actually know > what happened, but you logged in as nouser, thus why .bashrc and .procfile > couldn't be found. hm, nope.. All I did was to change di

Re: strange result when typing wrong password

2002-06-05 Thread Niels Möller
Niklas Söderlund <[EMAIL PROTECTED]> writes: > Use `login USER' to login, or `help' for more information. > login> grep root /etc/passwd > root::0:0:root:/root:/bin/bash > > Anyone know why it is like this? Is it possible to use shadow-file? Even if not using shadow passwords, it would make sens

Re: strange result when typing wrong password

2002-06-05 Thread James Morrison
--- Niklas Söderlund <[EMAIL PROTECTED]> wrote: > Hi, > > I don't know, but it seems like the login-program tries > to login even if the entered password was incorrect, if I > enter a directory outside /etc/login. > > > Use `login USER' to login, or `help' for more information. > login> cd / >

strange result when typing wrong password

2002-06-05 Thread Söderlund
Hi, I don't know, but it seems like the login-program tries to login even if the entered password was incorrect, if I enter a directory outside /etc/login. Use `login USER' to login, or `help' for more information. login> cd / login> login root Password: login: Invalid password login prompt (ba