1.

How shadow passwords are given by in Linux?

Answer»

In Linux, User passwords save in /etc/passwd system FILE. This file accessible to all users and VISIBLE passwords is a security RISK. Linux COMES up with a feature of shadow password or encrypted password. In Shadow password, Passwords are encrypted before saving in /etc/passwd system file. This gives you security from unauthorized system access. The pwconv command is used for providing shadow passwords. This command creates the file as /etc/shadow and changes all passwords to ‘x’ in the /etc/passwd file. This functionality may require additional installation of shadow suite.

The original password is encrypted after creating shadow password by an encryption key

Encryption key saves along with the encrypted password for a further refresh

When a user USING a shadow password tries to connect, the system decrypts the password before connecting.



Discussion

No Comment Found