Prev: (Follow-up) **** Need printing help in Solaris 10 zones
Next: sun java desktop - best way to mount an smb share?
From: ChrisS on 6 Feb 2010 11:51
On Jan 31, 8:26 pm, hume.spamfil...(a)bofh.ca wrote:
> Ryan Hard <ryan.m.h...(a)gmail.com> wrote:
> > Well yes but they're only accessible locally(like, the same room
> > locally) in a controlled building in a controlled area and the
> > passwords are really just for show. If someone has physical access who
>
> Okay, your original post made it sound like the passwords being worthless
> was actually a concern.
>
> Glad to hear these aren't on the network, however.  I hope that bad practice
> doesn't extend to anything that actually is.  (In my experience, it usually
> does...)
>
> --
> Brandon Hume    - hume -> BOFH.Ca,http://WWW.BOFH.Ca/

It's a mystery to me why Sun was (and still is) shipping Solaris with
a default __UNIX__ in the security policy. Why not ship with at least
option "1". I know in recent releases doing this for root's password
broke SMC, but I'm not sure if that's still the case since I don't use
SMC by default. Many new (and even experienced Sol admins) don't know
this simple change needs to happen.

From: Richard B. Gilbert on 6 Feb 2010 15:39
ChrisS wrote:
> On Jan 31, 8:26 pm, hume.spamfil...(a)bofh.ca wrote:
>> Ryan Hard <ryan.m.h...(a)gmail.com> wrote:
>>> Well yes but they're only accessible locally(like, the same room
>>> locally) in a controlled building in a controlled area and the
>>> passwords are really just for show. If someone has physical access who
>> Okay, your original post made it sound like the passwords being worthless
>> was actually a concern.
>>
>> Glad to hear these aren't on the network, however. I hope that bad practice
>> doesn't extend to anything that actually is. (In my experience, it usually
>> does...)
>>
>> --
>> Brandon Hume - hume -> BOFH.Ca,http://WWW.BOFH.Ca/
>
> It's a mystery to me why Sun was (and still is) shipping Solaris with
> a default __UNIX__ in the security policy. Why not ship with at least
> option "1". I know in recent releases doing this for root's password
> broke SMC, but I'm not sure if that's still the case since I don't use
> SMC by default. Many new (and even experienced Sol admins) don't know
> this simple change needs to happen.
>

This __UNIX__ is something I do not recall from school.

What is it, where is it and what SHOULD it be?
From: Chris Ridd on 6 Feb 2010 15:52
On 2010-02-06 20:39:28 +0000, Richard B. Gilbert said:

> This __UNIX__ is something I do not recall from school.
>
> What is it, where is it and what SHOULD it be?

See the manpage for crypt.conf, also the comments in /etc/security/crypt.conf.
--
Chris

From: Richard B. Gilbert on 6 Feb 2010 16:17
Chris Ridd wrote:
> On 2010-02-06 20:39:28 +0000, Richard B. Gilbert said:
>
>> This __UNIX__ is something I do not recall from school.
>>
>> What is it, where is it and what SHOULD it be?
>
> See the manpage for crypt.conf, also the comments in
> /etc/security/crypt.conf.

Thanks. It's not in Solaris 8 which was current when I went to school
for it.

From: Chris Ridd on 6 Feb 2010 16:56
On 2010-02-06 21:17:50 +0000, Richard B. Gilbert said:

> Chris Ridd wrote:
>> On 2010-02-06 20:39:28 +0000, Richard B. Gilbert said:
>>
>>> This __UNIX__ is something I do not recall from school.
>>>
>>> What is it, where is it and what SHOULD it be?
>>
>> See the manpage for crypt.conf, also the comments in >
>> /etc/security/crypt.conf.
>
> Thanks. It's not in Solaris 8 which was current when I went to school for it.

A quick google suggests it arrived in one of the "mid to late" Solaris
9 updates.
--
Chris

First  |  Prev  |  Next  |  Last
Pages: 1 2 3
Prev: (Follow-up) **** Need printing help in Solaris 10 zones
Next: sun java desktop - best way to mount an smb share?