[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

npasswd: new ELF package



I really didn't want to do this package, but when one of my clients had
50% of his Debian users' passwds cracked by crack I had to do something!
And Pluggable Authentication Modules (PAM) aren't available yet.  So it
had to be done :)

I know that some people think that shadow passwds are the way to go.
I don't know (I'm not yet a security guru).  But I saw that Alan Cox was
recommending npasswd + cracklib as (perhaps) better than shadow passwds.
So until Marek gets shadow passwd to the useable phase, this package
will help make Debian a bit more secure (or so I hope).  And someone
(preferably not me :) can recompile npasswd to support shadow passwds
anyway.

It is an ELF package.  It's big because it includes a big dictionary to
help npasswd disallow "bad" passwds.

The package mv's /bin/passwd out of its way and restores it in the
postrm.  Since dpkg almost supports doing this in a less kludgy
manner, I guess I could have delayed longer.  But I hope someone else
takes over this package for me.  I've enough to do with gawk and slang
:)

Date: 18 Jan 96 04:18 UT
Source: npasswd_boulder
Binary: npasswd_boulder 
Version: 1.2.2-1
Description: 
 npasswd_boulder: npasswd - a replacement passwd (for better site security)
Priority: Low
Changes: 
Files:
 -rw-r--r--   1 root     root      2032981 Jan 16 00:10 npasswd_boulder-1.2.2-1.tar.gz
 -rw-r--r--   1 root     root         6748 Jan 16 00:10 npasswd_boulder-1.2.2-1.diff.gz
 -rw-r--r--   1 root     root       937797 Jan 16 00:07 npasswd_boulder-1.2.2-1.deb
 6413260802d676e1021d5e90736f4a37  npasswd_boulder-1.2.2-1.tar.gz
 73310020ee75adf67dc376774ba8ca41  npasswd_boulder-1.2.2-1.diff.gz
 c3d4a591114169fc475f133a68f3faa2  npasswd_boulder-1.2.2-1.deb


Reply to: