[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: odd passwd problem.



On Sat 03 Aug 2019 at 12:32:39 (-0400), Gene Heskett wrote:
> On Saturday 03 August 2019 11:56:38 David Wright wrote:
> > On Sat 03 Aug 2019 at 11:38:27 (-0400), Gene Heskett wrote:
> > > On Saturday 03 August 2019 11:06:27 David Wright wrote:
> > > > On Sat 03 Aug 2019 at 10:32:02 (-0400), Gene Heskett wrote:
> > > > > On Saturday 03 August 2019 10:03:18 David Wright wrote:
> > > > > > On Fri 02 Aug 2019 at 22:41:00 (-0400), Gene Heskett wrote:
> > > > > > > On Thursday 01 August 2019 16:58:46 Gene Heskett wrote:
> > > > > > > > On Thursday 01 August 2019 10:20:57 Andrei POPESCU wrote:
> > > > > > > > > On Jo, 01 aug 19, 06:28:17, Gene Heskett wrote:
> > > > > > > > > > Debian-arm netinstall on a pi3b;
> > > > > > > > > >
> > > > > > > > > > No root pw set, I am housebroken to using sudo now.
> > > > > > > > > >
> > > > > > > > > > netinstall didn't install x anything although I
> > > > > > > > > > thought I was selecting xfce4, so my first action on
> > > > > > > > > > the reboot was to "sudo apt install xfce4". reboot,
> > > > > > > > > > works, have x and 4 workspaces.
> > > > > > > > > >
> > > > > > > > > > Then "sudo apt install build-essential and buildbot,
> > > > > > > > > > cups". reboot, worked once, login normal. Then I
> > > > > > > > > > plugged in a 120GB ssd which had a bunch of src stuff
> > > > > > > > > > on it I'll need later and powered up again. Can't
> > > > > > > > > > login, passwd no good.  Dbl check, caps lock off, try
> > > > > > > > > > again several times, passwd no good.
[…]
> > > > > > > And I am being ignored. So here is a thought.
> > > > > >
> > > > > > Well, I didn't realise you were using a DM to login when I
> > > > > > wrote my first reply. As with the SSD, I would have you revert
> > > > > > from a DM to an ordinary VC login. But I know so little about
> > > > > > DEs that I don't know if that's possible. What does a DM buy
> > > > > > you?
> > > > >
> > > > > A nice gui with lots of workspaces. Menu's to run stuff.
> > > >
> > > > Isn't that provided by the DE. What specifically does the DM do
> > > > for you?
> > > >
> > > > I run X and a WM, but I don't use them to login. Just a VC.
> > > >
> > > > > > > Someone has recently mentioned a new method of encrypting
> > > > > > > passwds. Is it possible that something in xfce4 has changed
> > > > > > > to the new method, but the passwd in the passwd file was
> > > > > > > encrypted with the older method, and that an ssh login is
> > > > > > > still useing the old method, so I can login remotely only?
> > > > > > > So possibly it might be fixed by an apt update/upgrade?
> > > > > > > Unforch, there is nothing to upgrade:
> > > > > >
> > > > > > AIUI passwords are not encrypted, they're hashed.
> > > > >
> > > > > And apparently each hash is unique? I've checked 4 machines
> > > > > here, and the shadow files entry for me is different on all 4
> > > > > machines.
> > > >
> > > > That's because there are 4096 different values of salt that could
> > > > have been chosen.
[…]
> > > > > > > Or maybe its ssh thats using the new way, and xfce4 has not
> > > > > > > caught up. I haven't a clue whats changed, but it did work
> > > > > > > several times, then stopped.  Completely changing my passwd
> > > > > > > from this ssh login worked, I backed out and tried it,
> > > > > > > worked as expected from ssh, but is still rejected from its
> > > > > > > own keyboard, so I changed it back. ?? What library does
> > > > > > > that? Is there a version jump that arm did, but got miss
> > > > > > > installed?
> > > > > >
> > > > > > ssh has -v (up to 3 times) for monitoring its behaviour.
> > > > > >
> > > > > > But are you're sure you're not thinking of something like
> > > > > > LUKS1/LUKS2 rather than any change in passwd hashing (which
> > > > > > might be why you wrote "encrypting").
> > > > >
> > > > > Never touched LUKS, any version.
> > > >
> > > > In which case, can you quote your reference for where said person
> > > > mentioned it.
> > > >
> > > > Whether you've *used* LUKS is irrelevant. You might still have
> > > > *heard something* about it, and thought it was about passwd
> > > > passwords. I can recall things being written about VM here, but
> > > > was it Virtual Box, vbox, qemu, kvm, virt-manager—not having used
> > > > any VM, my memory doesn't distinguish between them.
> > >
> > > LUKS shouldn't matter David, I've never used it in 20 years. However
> > >  I just installed locate, updatedb, the locate luks spit out this:
> > > oot@picnc:~# locate luks
> > > /boot/efi/boot/grub/arm64-efi/luks.mod
> > > /boot/grub/arm64-efi/luks.mod
> > > /usr/lib/grub/arm64-efi/luks.mod
> > >
> > > Could one of those be screwing with me?
> >
> > No. I'm trying to eliminate LUKS from the conversation. What would be
> > more useful is to discover what you were talking about when you wrote
> > "Someone has recently mentioned a new method of encrypting passwds."
> > Or am I to spike it, along with
> > https://lists.debian.org/debian-user/2017/03/msg00208.html
> > and suchlike.
> >
> Whats procmail to do with this?

Nothing. What I spiked was the headline,
"procmail, when were the last rights administered?",
just as I spiked
"4 printer limit to cups printers is a debian limit, why?".

Understand, I was trying to find an explanation for your statement
"Someone has recently mentioned a new method of encrypting passwds"
in the absence of any response as to where you got this fact[oid]
from. It's not important.

OTOH I have tried to find out whether and why it's necessary for
you to run a DM to start your (presumably necessary) DE, but you
don't seem to want to go there. Were I a DE user, I'd make a
more concrete suggestion. As it is, I can only refer you to the
3rd and 4th paragraphs of Description in man startx.

Cheers,
David.


Reply to: