Re: Listing locked user accounts on Linux
By: John Guillory to Chris Trainor on Thu Apr 26 2012 11:38:57
> fyi, the older less secure method was /etc/passwd, but most systems
> have their passwords shadow'ed... Actually, /etc/passwd should also
> get you a list of user accounts and passwords, as well as groups and
> user id's, etc...
Yes, /etc/passwd still exists on modern systems, but you cannot tell if
the user account is locked out from that.
Anyone not using shadow passwords (or something else even more secure
like Kerberos/LDAP/etc) is generally begging to be hacked. :)
--Chris
---------------------------------
Chris Trainor - FleetHQ BBS
telnet://bbs.fleethq.org
---
■ Synchronet ■ FleetHQ BBS - Greenville, RI
|
