<html>
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered)">
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
pre
{margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
tt
{font-family:"Courier New";}
span.EmailStyle17
{font-family:Arial;
color:windowtext;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1><pre><font size=2 face="Courier New"><span
style='font-size:10.0pt'>I’ll give this a try, but looking at /etc/shadow right now does not look like HEX characters after the $1$. </span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'> </span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>Does anyone know if this is a standard algorithm? Or if /etc/pam can use SHA or another encryption I can easily export out of the directory server? So far my searches seem only MD5 or crypt is what is normal for Redhat.</span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'> </span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'> </span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'> </span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>>dennis demarco com wrote:</span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'> </span></font></pre>
<p class=MsoNormal><tt><font size=2 face="Courier New"><span style='font-size:
10.0pt'>>I would like to export the MD5 hash from the Fedora directory
user's password attribute into /etc/shadow of a Linux machine not in LDAP
(Redhat). </span></font></tt></p>
<pre><font size=2 face="Courier New"><span style='font-size:10.0pt'> </span></font></pre>
<p class=MsoNormal><tt><font size=2 face="Courier New"><span style='font-size:
10.0pt'>>It appears this isn't working, is there a way for me to do this?
Not all machines are using >ldap but I would like to export from ldap. </span></font></tt></p>
<pre><font size=2 face="Courier New"><span style='font-size:10.0pt'> </span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'> </span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>>Hi,</span></font></pre>
<p class=MsoNormal><tt><font size=2 face="Courier New"><span style='font-size:
10.0pt'>>I haven't tried this, but here's an idea just off the top of my
head which _might_ work: </span></font></tt></p>
<pre><font size=2 face="Courier New"><span style='font-size:10.0pt'> </span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'> </span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>>1. take away the {MD5} from the string</span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'> </span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>>2. base64 decode the rest of the string</span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'> </span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>>3. convert the string to hex</span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'> </span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>>4. put the $1$ at the front of the hex string</span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'> </span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>>5. put the whole string into the password field in /etc/shadow and test</span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'> </span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'> </span></font></pre>
<p class=MsoNormal><tt><font size=2 face="Courier New"><span style='font-size:
10.0pt'>>If that works, you could write a perl script to automate the
procedure. And report back to >the list as well :-) </span></font></tt></p>
<pre><font size=2 face="Courier New"><span style='font-size:10.0pt'> </span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'> </span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>BR,</span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'> </span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>--</span></font></pre><pre><font
size=2 face="Courier New"><span style='font-size:10.0pt'>mike</span></font></pre>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> </span></font></p>
</div>
</body>
<!--[object_id=#seisint.com#]--><FONT color=#0000ff>
<P align=center><FONT face=Tahoma color=#000000 size=2><STRONG>This message (including any attachments) contains confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message. Any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited.</STRONG></FONT></P></FONT></html>