[tech] Getting mooneye to be a NIS slave

David Luyer david_luyer at pacific.net.au
Thu Sep 28 21:57:29 WST 2000


> > But other people can look into our network there and maybe get passwd crypts?
> 
> Assuming it's set up sanely (yes I know) then nobody outside of that network
> will be able to get any data from the server. If they are on that network, 
> then they can just get the raw passwords as they fly by.

Not for SSH.

The NIS possibility to steal raw crypts is a problem cokeauth solved years
ago which was exactly the reason it was developed :-)  However UCC lacked
people with the motivation to hack successive systems to support it.

David.
-- 
----------------------------------------------
David Luyer
Senior Network Engineer
Pacific Internet (Aust) Pty Ltd
Phone:  +61 3 9674 7525
Fax:    +61 3 9699 8693
Mobile: +61 4 1064 2258, +61 4 1114 2258
http://www.pacific.net.au        NASDAQ: PCNTF
<< fast 'n easy >>
----------------------------------------------






More information about the tech mailing list