Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'Fix password security in 10.3.x for upgraded accounts' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Fix password security in 10.3.x for upgraded accounts
Authored by: Numbski on Dec 07, '04 10:21:18AM

Speaking of password security...

I've been lucky thus far. I haven't had to migrate a 10.3 account to another box, be it to another Mac, FreeBSD, whatever.

Under 10.2 and previous, this was pretty simple:

nidump passwd . > passwd

That would create a file named passwd (probably better named master.passwd or 'shadow'), complete with encryped passwd hashes.

I could then easily migrate this to a FreeBSD box by using the command vipw, and paste in the hash. Manually manipulate the location of the home directory, copy files and fix permissions. Done.

Likewise, you could use the niload command to load in these users on another mac.

Doing this on 10.3 yields you the 'safe' passwd file, with an asterisk in the password field. This does me no good for migration. When I change versions of OSX, I always do a clean load, since my drive is partitioned and my home directories are safe. I don't know how I'm going to manage to do this moving to 10.4.

Anyone know how to get the full passwd file?



[ Reply to This | # ]
Fix password security in 10.3.x for upgraded accounts
Authored by: mikerose on Dec 07, '04 11:17:47AM

This is deliberate... since you used to be able to get the password hashes, someone could try to crack them. 10.3 and after (as long as you change your password at least once), they are stored as shadow passwords and cannot be exported.

Best way to handle the migration would be to change all your passwords pre-move, then change them back to secure passwords after you upgrade.



[ Reply to This | # ]
Fix password security in 10.3.x for upgraded accounts
Authored by: webbix on Dec 07, '04 11:37:54AM

I do not have the answer but I am certain there is some option to do this as Apple includes this in the startup on new machines. I do not know if the tool to migrate is available outside what is packaged on new systems.

I suppose you could dig into a system and find the migration tool. Must be on drive of new machines or maybe someone has more info. I am probably not geared up to find it but if I do I will certainly pass along.



[ Reply to This | # ]