If you are running release 4.0g can you run the following comman ds against your /usr/bin/passwd [resend with return email address]

From: Popovich, Tom (Tom.Popovich_at_iLAN.com)
Date: 06/12/03

  • Next message: Markus Waldorf: "SUMMARY: remote CDE logins" 
    Date: Wed, 11 Jun 2003 22:37:36 -0700
To: "'tru64-unix-managers@ornl.gov'" <tru64-unix-managers@ornl.gov>

    My email address is tom_popovic@hotmail.com
    - thanks, Tom.
    > ----- Previous Message-----
    > From: Popovich, Tom
    > Sent: Wednesday, June 11, 2003 8:13 PM
    > To: 'tru64-unix-managers@ornl.gov'
    > Subject: If you are running release 4.0g can you run the following
    > commands against your /usr/bin/passwd
    >
    > On a user's 4.0g system, we are having trouble with the passwd command. I
    > have received some
    > information that there may be a patch, but searching all the 4.0g patches
    > turned up nothing.
    >
    > Symptom: when you do: # passwd FooBar
    > nothing happens, it does not hang, it simply gives you back the shell
    > prompt: #
    > It never prompts for any password.
    >
    > Has anyone else seen this problem?
    >
    > Can you compare our binary to yours?
    >
    > How to compare our binary to yours:
    > ----------------------------------------------------
    > Its easy to do, if we compare checksums.
    >
    > To make it easy to compare our /usr/bin/passwd against yours, here is what
    > I did: I ran sum
    > on passwd and the c-runtime-lib. If you run command "ldd" on
    > /usr/bin/passwd you will see that
    > it depends on the C lib.
    >
    > 1. below you will see our sum output.
    > 2. can you compare to your output from sum to ours?
    > 3. if you get different values for the /usr/bin/passwd command on 4.0g,
    > can you email me the /usr/bin/passwd
    > binary [its only 16k bytes in size].
    >
    > ==> details
    >
    > Commands to compute checksum data:
    > To quickly verify if the passwd file differs from our system, you can use
    > the sum command.
    > The SUM {checksum} data regarding the version of passwd command on your
    > system can be obtained like this:
    >
    > do : NOTE: the password command "passwd" may be only readable from the
    > root account
    > also note that emailing the passwd command is perfectly safe as it has
    > no useraccount or
    > password data from the system.
    >
    > %
    > % su -
    > # sum /usr/bin/passwd
    > # ^D
    > %
    > sum of passwd on the system having a problem returns=> 45835 32
    >
    > passwd uses the C run time library. You can see this by running command:
    >
    > #
    > # ldd /usr/bin/passwd
    > #
    >
    > If you run sum on the library, can they compare to :
    > sum std-C-library => 58345 3268
    > and tell us if its different?
    >

  • Next message: Markus Waldorf: "SUMMARY: remote CDE logins"