Sophie: howto-text-ja-2006-5mdv2010.0 noarch

howto-text-ja-2006-5mdv2010.0.noarch.rpm

  Linux Shadow Password HOWTO
  Michael H. Jackson, mhjack@tscnet.com
  v1.3, 1996N43ú
  ¡´PÃ, fujiwara@linux.or.jp

  ±Ì¶Í Linux ÌpX[hð shadow »·é Shadow Suit ÌüèAC
  Xg[yÑÝèÌû@ÉÂ¢Äà¾·éàÌÅ·BÜ½A[UÌpX[
  hFØðs¤\tgEFAâf[Ì(Ä)CXg[ÉÂ¢ÄàðàµÜ
  ·B±êçÌvOÍ Shadow Suit ÌêÅÍ èÜ¹ñªAShadow
  Suit ðT|[g·é½ßÉÍÄRpC·éKvª èÜ·BÜ½A±Ì
  ¶ÉÍ shadow pX[hðT|[g·évOÌáà¢Ä èÜ
  ·B«ÌüèÅÍæ·©êé¿âÖÌñà³çÉÁ¦éÂàèÅ·B
  ______________________________________________________________________

  Ú

  1. Í¶ßÉ
     1.1 ÈOÌÅ©çÌÏX_
     1.2 ±Ì¶ÌÅVÅÉÂ¢Ä
     1.3 tB[hobN

  2. shadow pX[hðg¤×«R
     2.1 shadow pX[hðgíÈ¢Ù¤ªÇ¢ê
     2.2 /etc/passwd t@CÌtH[}bg
     2.3 shadow t@CÌtH[}bg
     2.4 crypt(3) ÌTv

  3. Shadow Suite Ìüè
     3.1 Linux pÌ Shadow Suite Ìðj
     3.2 Shadow Suite Ìüè
     3.3 Shadow Suite ÉÍ½ªÜÜêÄ¢é©

  4. vOÌRpC
     4.1 A[JCuÌWJ
     4.2 config.h ÉæéÝè
     4.3 ³ÌvOÌobNAbvÌì¬
     4.4 Make ÌÀs

  5. CXg[
     5.1 VXejóÉõ¦ÄÌu[gfBXNì¬
     5.2 d¡·éIC}jAÌí
     5.3 make install ÌÀs
     5.4 pwconv ÌÀs
     5.5 npasswd Æ nshadow Ìl[

  6. AbvO[h·é©pb`ðÄéKvª évO
     6.1 Slackware adduser program
     6.2 wu_ftpd T[o
     6.3 WÌ ftpd
     6.4 pop3d (Post Office Protocol 3)
     6.5 xlock
     6.6 xdm
     6.7 sudo
     6.8 imapd (E-Mail [pine pbP[W])
     6.9 pppd (PPP vgRT[o)

  7. Shadow Suite ðgÁÄÝé
     7.1 [UÌÇÁAÏXAí
        7.1.1 useradd
        7.1.2 usermod
        7.1.3 userdel
     7.2 passwd R}hÆpX[hÌúÀÝè
     7.3 login.defs t@C
     7.4 O[vÌpX[h
     7.5 êÑ«ð`FbN·évO
        7.5.1 pwck
        7.5.2 grpck
     7.6 _CAAbvEpX[h

  8. CvOð Shadow Suite ÉÎ³¹éû@
     8.1 wb_t@C
     8.2 libshadow.a Cu
     8.3 Shadow \¢Ì
     8.4 Shadow T|[gÌ½ßÌÖ
     8.5 áè

  9. æ·©êé¿â(Frequently Asked Questions).
  10. Copyright Message(ì \¦)
  11. »Ì¼ / Ó«
  12. óÒæè

  ______________________________________________________________________

  1.  Í¶ßÉ

  ±Ì¶Í Linux Shadow-Password-HOWTO Å·B±Ì¶Í Linux VXe
  ÉÈº shadow pX[hð±ü·éÌ©AÜ½ÇÌæ¤É±ü·éÌ©ðà
  ¾µÜ·BShadow Suite Ì@\Ìp@ÉÂ¢ÄÌà¾à èÜ·B

  Shadow Suite ðCXg[·éâA[eBeBðg¤ÉÍ root
  ÅÈ¯êÎÈèÜ¹ñBShadow Suite ðCXg[·éÛÉÍVXeÌ
  î²\tgEFAÌÏXªsíêéÌÅAãÅà¾·éæ¤ÉobNAbvð
  æé×«Å·BÜ½ìÆðnßéOÉÍA±ê©çs¤à¾ð·×ÄÇÝA
  ðµÄ¨×«Åµå¤B

  1.1.  ÈOÌÅ©çÌÏX_

  ÇÁ:
          shadow pX[hðCXg[µÈ¢Ù¤ªæ¢êÉÂ¢ÄÌßðÇÁ
          xdm ÌXVÉÂ¢ÄÌßðÇÁ
          Shadwo Sutie Ì®ìÌ³¹©½ÉÂ¢ÄÌÍðÇÁ
          æ·©êé¿âÉÂ¢ÄÌÍðÇÁ

  ù³/XV:
          Sunsite Ì html ÖÌQÆðù³
          wu-ftp ÌÍÅ Makefile É -lshadow ð Makefile ÉÁ¦éæ¤ù³
          ëEÌù³
          wu-ftp ÌÍÅ ELF ðT|[g·éæ¤ÏX
          vO'login'Å¨±éZLeBãÌâèðXV
          Marek Michalkiewicz Éæé Linux Shadow Suite ð§·éæ¤XV

  1.2.  ±Ì¶ÌÅVÅÉÂ¢Ä

  ±Ì¶ÌÅVÅÍÈºÌTCg©ç anonymous FTP ÅüèÅ«Ü·:
  sunsite.unc.edu

  /pub/Linux/docs/HOWTO/Shadow-Password-HOWTO

   é¢Í:

  /pub/Linux/docs/HOWTO/other-formats/Shadow-Password-HOWTO{-html.tar,ps,dvi}.gz

   é¢ÍAWWW ðpµÄA Linux Documentation Project Web Server
  <http://sunsite.unc.edu/mdw/linux.html> Ì Shadow-Password-HOWTO
  <http://sunsite.unc.edu/linux/HOWTO/Shadow-Password-HOWTO.html> Ìy[
  W©çüè·é±ÆàÅ«Ü·B

  Ü½AMÒ(<mhjack@tscnet.com>) ©ç¼Úüè·é±ÆàÅ«Ü·µA
  comp.os.linux.answers j[XO[vÉàe³êÜ·B

  ±Ì¶Í»ÝÍ Shadow-YYDDMM pbP[WÉàÜÜêéæ¤ÉÈèÜµ
  ½B

  ó: ú{êóÌÅVÅÉÂ¢ÄÍ WWWªpÅ«éÈçÎ JF-INDEX
  <http://jf.linux.or.jp/JF/JF-ftp/other-formats/INDEX-JF.html> ©çA
  ftp ªpÅ«éÈçÎ jf.linux.or.jp Ì/Linux/JF/fBNgÈÇ©ç
  üèÅ«Ü·B
  1.3.  tB[hobN

  Rgâù³AñÄÈÇÍMÒ(Michael H. Jackson
  <mhjack@tscnet.com>)ÉÁÄº³¢BtB[hobNð¾çêêÎA»
  ê¾¯±Ì¶ð¼·±ÆªÅ«Ü·B Üèlbgj[XÍ©Ä¢È
  ¢ÌÅAsïð©Â¯½êÉÍ¼Ú[ðÁÄº³¢B

  2.  shadow pX[hðg¤×«R

  »ÝÍÙÆñÇÌ Linux ÌpbP[WÅÍ Shadow Suite ÍWÅÍCX
  g[³êÜ¹ñBSlackware 2.3, Slackware 3.0 â¼Ì|s[Èpb
  P[WÅ»¤ÈÁÄ¢Ü·B±ÌRÌêÂÍIWiÌ Shadow Suite Ì
  ì \¦ÍA³¿zzÅÈ¢êÉÂ¢Äs¾m¾©çÅ·BLinux Í CD-
  ROM Ìæ¤ÈzzÉÖÈfBAÖpbP[W»µA±êÉÎ·éñVðó
  ¯æé±Æªs¢â·¢ GNU Copyright (Copyleft Æà¾íêÜ·ª)ðÌp
  µÄ¢Ü·B

  »ÝShadow SuiteðeiXµÄ¢é, Marek Michalkiewicz
  <marekm@i17linuxb.ists.pwr.wroc.pl> Í³ÌìÒ©çAÄzzÌÅ«é
  BSD X^CÌì ÌàÆÉ\[XR[hðó¯æÁÄ¢Ü·B»ÝÍì
   ÌâèÍðµÄ¢éÌÅA«ÍWÅ Linux ÌpbP[WÉ Shadow
  Suite ªÜÜêé±ÆÉÈéÅµå¤B»êÜÅÍA[Uª©ª©gÅC
  Xg[µÈ¯êÎÈèÜ¹ñB

  pbP[Wð CD-ROM ©çCXg[·éêÉÍApbP[W©ÌÍ
  Shadow Suite ðCXg[µÈÄàAShadow Suite ÌCXg[ÉK
  vÈt@CÍ CD-ROM ÉÜÜêÄ¢é±Æª èÜ·B

  µ©µAo[W3.3.1, 3.3.1-2Ì Shadow Suite Æ shadow-mk ÅÍ
  login vOÆroot É suid ³ê½vOÅZLeBãÌâè
  ðN±µÜ·BÅ·©çA±êçðgÁÄÍ¢¯Ü¹ñB

  KvÈt@CÍ anonymous FTP â WWW ðpµÄüè·é±ÆªÅ«Ü
  ·B

  Shadow Suite ªCXg[³êÄ¢È¢ Linux VXeÅÍpX[hð
  Üß½[UîñÍ /etc/passwd t@CÉL^³êÄ¢Ü·Bà¿ëñA
  pX[hÍÃ»³ê½óÔÅL^³êÄ¢Ü·Bµ©µAÃÌêåÆÉ
  ¾í¹éÆ±êÍÃ»(encrypt)ÅÍÈGR[h(encode)Éß¬È¢»
  ¤Å·Bcrypt(3) ðp¢éêÌ¶ñªóÅ êÎpX[hÍL[É
  ÈÁÄµÜ¤©çÅ·B±ÌR©çA±êÈ~Ì¶ÅÍ'Ã»'ÅÍÈ
   'GR[h'Ìêðp¢Ü·B

  ±±ÅpX[hðGR[h·é½ßÉp¢çêéASYÍAZpI
  ÉÍPûüÌnbVÖÆ¾íêéàÌÅ·B±êÍA éûüÉÍvZµ
  â·¢¯êÇA»ÌtûüÌvZÍñíÉïµ¢Æ¢¤ASYÅ·BÀ
  ÛÌASYÉÂ¢ÄÌæèÚµ¢à¾Í 2.4ß© crypt(3) Ì}jA
  ðQÆµÄº³¢B

  [Uª épX[hðß½êA±ÌpX[hÍ_Éßçê
  ½ salt ÆÄÎêélðp¢ÄGR[h³êÜ·B±¤·é±ÆÅêÂÌ¶
  ñªGR[h³ê½ÊÆµÄæè¤éÊÍ 4096 ÊèÉÈèÜ
  ·Bsalt ÌlÍGR[h³ê½pX[hÆêÉL^³êÜ·B

  [UªOCÉpX[hðüÍ·éÆAÜ¸ salt ªGR[h³ê
  Ä¢épX[h©çæèo³êÜ·B»µÄAüÍ³ê½pX[hð
  salt ðp¢ÄGR[hµÄ»ÌÊðGR[h³ê½¶ñÆärµÜ
  ·B±êªêvµ½êÉ³µ¢[UÆµÄFØµÜ·B

  _ÉGR[h³ê½pX[hðüèµA³ÌpX[hð³·é
  ±ÆÍvZÌ_©ç¢ïÅ·(sÂ\ÅÍÈ¢)Bµ©µA¡ÈãÌlªg¤
  VXeÅÍÈ©ç¸ÌpX[hÍ èÓê½Pê( é¢Í èÓê½
  PêðµÏ¦½¾¯ÌàÌ)ÉÈÁÄ¢Ü·B

  NbJ[Í±Ìæ¤ÈîðæmÁÄ¢éÌÅ 4096 ÂSÄÌ salt ðp
  ¢Ä«ÌPêÆægíê»¤ÈpX[hð ç©¶ßGR[hµÄ¨
  «Ü·B»µÄA/etc/passwd É©êÄ¢éGR[hµ½pX[hð±
  ÌÊÆärµÜ·B±±Åêv·éàÌª©Â©êÎANbJ[Í¼lÌ
  pX[hðjÁ½±ÆÉÈéí¯Å·B±êÍu«UvÆÄÎêéàÌ
  ÅA³KÌFØðó¯¸ÉVXeÉANZX·é½ßÌíèiÅ·B

   é 8 ¶©çÈépX[hÍ A13 ¶©ç¬é 4096 ÊèÌ¶ñÌ
  Çê©ÉGR[h³êÜ·Bµ½ªÁÄAî{êâÅL¼Æ»êÉÈPÈ
  Ï»ðÂ¯½àÌðWßÄìÁ½400,000 êöxÌ«Í 4GB Ìn[hfB
  XNÉ\ªûÜéç¢Ìå«³Å·BNbJ[Í±êçð\[gµÄ¨
  «A /etc/passwd Ì¶ñÆêv·é©Ç¤©ð²×é¾¯Åæ¢ÌÅ
  ·B4GB Ìn[hfBXNÍ 1,000 hÈºÅ¦éç¢Å·©çAåï
  ÌNbJ[ÍÁÄ¢éÆl¦é×«Å·B

  Ü½ANbJ[ªÅÉ È½Ì /etc/passwd t@CðèÉüê½ê
  ÉÍNbJ[Í±Ìt@CÉÜÜêÄ¢ésaltðgÁÄ«ðGR[h
  µÄä¯Îæ¢¾¯ÉÈÁÄµÜ¢Ü·BfBXNSKoCgÆ486N
  XÌCPUðÂ}Vª êÎA±ÌöxÌ±ÆÍqÅàÅ«ÄµÜ¢Ü
  ·B

  åÊÌfBXNªÈÄà crack(1) Ìæ¤È[eBeBðp¢êÎA 
  éöxÈãÌÌ[Uª¢éVXeÌÈÆàêÂÍpX[hðjé
  ±ÆªÅ«Ü·B([UÍ©ªÅe©ÌpX[hðßéàÌÆµÜ·B)

  /etc/passwd t@CÉÍ½ÌVXevOªg¤[U ID âO
  [vID Ìæ¤Èîñª©êÄ¢Ü·B]ÁÄA±Ìt@CÍ¢E©ç
  ANZXÅ«È¯êÎÈèÜ¹ñBá¦ÎA /etc/passwd t@CðNàÇ
  ßÈ¢æ¤ÉµÄµÜÁ½çAÄÁÍßÉÈéÅµå¤B

  Shadow Suite ÍpX[hðÊÌêÉÚ·±ÆÅ±ÌâèððµÜ·(Ê
  íÍ /etc/shadow)B±Ìt@CÍNàÇßÈ¢æ¤ÉÝè³êÜ
  ·Broot¾¯ª /etc/shadow t@CðÇÝ«Å«Ü·B¢Â©Ìv
  O(xlock ÈÇ)Í /etc/shadow ðÏXÍÅ«ÈÄà¢¢Å·ªApX
  [hÌmFÍs¤Kvª èÜ·B±Ìæ¤ÈvOÍ root É SUID
  ·é©Ashadow O[vÉ®·éKvª èÜ·BpX[hðmF·é½
  ß¾¯É root É SUID ·éæèÍAshadow É SGID ·éûªÇ¢l¦Æ¾
  ¦Ü·B

  pX[hð /etc/shadow ÉÚ®³¹é±ÆÉæÁÄANbJ[ªGR
  [h³ê½pX[hÉANZXµÄ«UÉp·é±Æðh°Ü·B

  Á¦ÄAShadow Suite ÍÈºÌæ¤ÈÁ·ðÁÄ¢Ü·:

  o  OCÌftHgðÝè·éRtBO[Vt@C
     (/etc/login.defs)

  o  [UAJEgâO[vðÇÁAC³Aí·é½ßÌ[eB
     eB
  o  Ã¢pX[hÌ`FbNâúÀÝè

  o  AJEgÌúÀÝèÆbLO

  o  {·pX[h (16¶ÌpX[h) [§µÜ¹ñ]

  o  [UÌpX[hèð§äµâ·¢

  o  _CAAbvEpX[h

  o  2FØvO [§µÜ¹ñ]

  Shadow Suit ðCXg[·é±ÆÅVXeÌZLeBð»·é±
  ÆªÅ«Ü·ªALinux VXeÌZLeBðæè»·é½ßÉÍA¼
  Éàâé×«±ÆÍ½ èÜ·BZLeB»Ìû@ÆZLeB
  ÉÖW·ébèÉÂ¢Äðà·é Linux Security HOWTO V[Yª»Ì¤¿
  Å«é±ÆÅµå¤B

  ùmÌZLeBz[ÉÂ¢ÄÌxÈÇA Linux ÌZLeBÉÂ
  ¢ÄÌÅVÌîñð¾é½ßÉÍLinux Security z[y[W
  <http://bach.cis.temple.edu/linux/linux-security/> ðQÆµÄº³¢B

  2.1.  shadow pX[hðgíÈ¢Ù¤ªÇ¢ê

  Shadow SuiteðCXg[·é±Æª©Èç¸µàÇ¢±ÆÅÍÈ¢Â«â
  VXe\¬à èÜ·B

  o  VXeÉ[UAJEgªÈ¢êB

  o  Rs[^ª LAN ÉqªÁÄ¢ÄA[U¼âpX[hÍ NIS
     (Network Information Services) oRÅlbg[NãÌ¼Ì}V©ç
     ¾Ä¢éêB(±êÍ{¶ÌÍÍðOêÄ¢é_ÆA ÜèZL
     eBüãÍ]ßÈ¢ÌÅà¾µÜ¹ñ)

  o  VXeª NFS (Network File System)â NIS ÈÇðp¢Ä[UFØð
     ·é½ßÉ^[~iT[oÉæÁÄp³êéê

  o  [UFØÍ·éªAshadow pX[hÉÎµÄ¨ç¸A\[XR[h
     à³¢\tgEFAðgíÈ¯êÎÈçÈ¢ê

  2.2.  /etc/passwd t@CÌtH[}bg

  shadow »³êÄ¢È¢ /etc/passwd t@CÍÈºÌæ¤ÈtH[}bgÉ
  ÈÁÄ¢Ü·:

       username:passwd:UID:GID:full_name:directory:shell

  ±±ÅA

     username
        [UÌOCl[

     passwd
        GR[h³ê½pX[h

     UID
        [U ID (l)

     GID
        ftHgÌO[v ID (l)

     full_name
        [UÌ{¼BÀÛÉÍ±ÌtB[hÍ GECOS (General Electric
        Comprehensive Operating System) tB[hÆÄÎêA[UÌ{¼
        ÈOÌîñàÛÅ«Ü·BShadow Suite ÌR}h¨æÑIC
        }jAÅÍRgtB[hÆµÄLq³êÄ¢Ü·B

     directory
        [UÌz[fBNg

     shell
        [UÌOCVF(âÎpXLq)

  á¦ÎÌæ¤ÉÈèÜ·:

       username:Npge08pfz4wuk:503:100:Full Name:/home/username:/bin/sh

  ±±ÅAæ2tB[hÌ Np Í salt ÅAge08pfz4wuk ÍGR[h³ê½
  pX[hÅ·B¯¶pX[hÅàAsalt/pX[hÌgÝí¹Í kbe-
  MVnZM0oL7I Ìæ¤ÉÈéêà èÜ·B éêÂÌpX[hÉÖµÄG
  R[h³ê¾éÂ\«Í 4096ÊèÅ·B(±ÌáÅp¢½ 'password' Æ¢
  ¤pX[hÍjçêâ·¢_É¨¢ÄñíÉ«¢pX[hÅ·B)

  Shadow suite ªCXg[³êéÆA/etc/passwd t@CÍÈºÌæ¤
  ÉÈèÜ·:

       username:x:503:100:FullName:/home/username:/bin/sh

  ±ÌêÌ2ÔÚÌtB[hÌ 'x' ÍPÉêðßÄ¢é¾¯Å·BG
  R[h³ê½pX[hÍÜÜêÈÈèÜ·ªA /etc/passwd t@CÌ
  tH[}bg©ÌÍÏíèÜ¹ñB]ÁÄA /etc/passwd t@CðÇÞ¯
  êÇpX[hFØÍsíÈ¢vOÍÈOÌÊèÉ®ìµÜ·B

  pX[hÍ shadow t@C(Êí /etc/shadow) ÉÚ³êÜ·B

  2.3.  shadow t@CÌtH[}bg

  /etc/shadowt@CÉÍÈºÌæ¤ÈîñªLq³êÄ¢Ü·:

       username:passwd:last:may:must:warn:expire:disable:reserved

  àeÍÈºÌæ¤ÈÓ¡ð¿Ü·:

     username
        [U¼

     passwd
        GR[h³ê½pX[h

     last
        1970N11ú©çApX[hªÅãÉXV³ê½úÜÅÌú

     may
        ½úOÉpX[hªÏX³ê½Ævíêé©

     must
        pX[hðÏXµÈ¯êÎÈçÈ¢úÀ

     warn
        pX[hÌúÀØêÌ½úOÉ[UÉx·é©

     expire
        pX[húÀØêÌ½úãÉAJEgðÁ·é©

     disable
        1970N11ú©çAAJEgªÁ³ê½úÜÅÌú

     reserved
        \ñtB[h

  ³«ÙÇÆ¯¶áÅÍ /etc/shadow Í±Ìæ¤ÉÈèÜ·:

       username:Npge08pfz4wuk:9479:0:10000::::

  2.4.  crypt(3) ÌTv

  crypt(3) ÌIC}jAæè:

  "cryptÍpX[hÌÃ»ÖÅ éB±êÍ Data Encryption Standard
  (DES) ÌASYÉAÁÉL[õÌn[hEFAÀðµÉ·é±
  ÆðÁÉÓ}µ½Ï»ðÂ¯½àÌÉîÃ¢Ä¢éB

  L[Í[UÌüÍµ½pX[hÅ éB [GR[h³ê½¶ñÍ·×
  ÄNULLÅ éB]

  salt Í [a-zA-Z0-9./] Ì©ç2¶ðIñ¾¶ñÅ éB±Ì¶ñÍ
  ASYÌÅ4096ÊèÌÙÈéÊ©çêÂðKÉIÑo·½ßÉp
  ¢çêéB

  L[Ìe¶ÌºÊ7rbgðæèo·±ÆÅ 56rbgÌL[ª¾çêéB±
  Ì56rbgÌL[Íè¶ñ(ÊíÍSÄ0Ì¶ñðÜÞ)ðJèÔµÃ
  »·é½ßÉp¢çêéBßµlÍÃ»³ê½pX[hÖÌ|C^Å 
  èA±ÌpX[hÍ13¶Ì ASCII ¶Å é(ÅÌ2¶Ísalt»Ìà
  ÌÅ é)BßµlÌ|C^ªw·ÌæÍÄÑoµ²ÆÉã«³êéÃI
  Èf[^Å éB

  x:L[óÔÍ 2Ì56æ(=7.2e16)ÂÌlðæé±ÆªÅ«éB±ÌL[óÔ
  ÍåÊÌÀñvZ@ðp¢êÎSTõ·é±ÆªÂ\Å éBÜ½Acrack(1)
  Ìæ¤È\tgEFAÍlÔªpX[hÉp¢»¤ÈPêªìéL[óÔÌ
  ªóÔÉiÁÄõðs¤B]ÁÄApX[hÌIðÅÍ èÓê½Pê
  â¼OÌgpÍð¯é×«Å éBpX[hðßéÛÉÍjçêâ·¢p
  X[hÌ`FbNðs¤ passwd(1) vOðp·éÆÇ¢¾ë¤B

  DES ASY©ÌÉÍÈª éÌÅAcrypt(3)ÌC^tF[XÍpX
  [hFØÌ¼Ég¤×«ÅÍÈ¢Bcrypt(3)ÌC^tF[XðÃ»ÌàÌ
  ÉÖíévWFNgÉpµÄÍÈçÈ¢B±Ìæ¤ÈêÉÍAÃ»É
  Â¢Ä¢Ä éÇ¢{ÆLp·é±ÆªÅ«é DES Cuðüè
  ·é×«Å éB"

  ÙÆñÇÌ Shadow Suites pbP[WÉÍpX[hð16¶É{·»·é
  R[hªÜÜêÄ¢Ü·Bµ©µDESÌêåÆÍ±êð§µÄ¢Ü¹ñBp
  X[hÌ·³ª{ÅàAÅÉ¶¼ªðGR[hµÄAÉE¼ªðG
  R[hµÄ¢é¾¯¾©çÅ·B±êÍcryptÌ®ìÌ½ßÅ èAnß©ç
  {·pX[hªgíêÄ¢È©Á½êÆä×ÄàAæèÆãÈpX[h
  ðìÁÄµÜ¢Ü·BÜ½A[UÉ16 ¶ÌpX[hðo¦Äàç¤±
  ÆÍ¢ïÅ éÆ¢¤Rà èÜ·B

  cryptÉãéàÌÅAæèÀSÅ·¢pX[hðT|[gµ(ÁÉ MD5 A
  SY)A³çÉcryptÆÌÝ·«ðÛµÄ¢éæ¤ÈFØASYð
  Jµæ¤ÆµÄ¢évWFNgª èÜ·B

  àµAÇÒªÃ»ÉÂ¢ÄÌÇ¢{ðTµÄ¢éÈçAMÒÍÈºÌ{ð
  EµÄ¨«Ü·:

          "Applied Cryptography: Protocols, Algorithms, and Source Code in C"
          by Bruce Schneier <schneier@chinet.com>
          ISBN: 0-471-59756-2

  3.  Shadow Suite Ìüè

  3.1.  Linux pÌ Shadow Suite Ìðj

  ZLeBãÌâèª éÌÅA±ÌßÅq×éÃ¢pbP[WðgÁÄÍ
  ¢¯Ü¹ñB

  IWiÌ Shadow Suite Í John F. Haugh IIÉæÁÄì¬³êÜµ
  ½B

  Linux VXeãÅp¢çêÄ«½o[WÍ¢Â© èÜ·:

  o  shadow-3.3.1 ÍIWiÅ·B

  o  shadow-3.3.1-2 Í Florian La Roche <flla@stud.uni-sb.de> ÉæÁÄ
     ©ê½ Linux êpÌpb`ÅAÆ©Ìg£àµÄ¢Ü·B

  o  shadow-mk Linux êpÌpbP[WÅ·B

  shadow-mkpbP[WÍ John F. Haugh II ªzzµÄ¢é shadow-3.3.1
  pbP[WÉ shadow-3.3.1-2 ÖÌpb`A Mohan Kokal
  <magnus@texas.net> ÉæÁÄÈ³ê½CXg[ðÈPÉ·é½ßÌC
  ³AJoseph R.M. Zbiciak Éæé /bin/login Ì -f, -h ÌIvVÌ
  ®ìÉÂ¢ÄÌZLeBz[ðÇ®½ßÌ login1.c (login.secure)
  ÉÎ·épb`yÑ»Ì¼¢Â©ÌÏXðÁ¦½àÌÅ·B

  shadow.mkpbP[WÍ ÈOÍ§³êÄ¢Üµ½ªA loginvOÌZ
  LeBãÌâèª éÌÅg¤×«ÅÍÈ¢Åµå¤B

  o[W 3.3.1, 3.3.1-2 Ì Shadow Æ shadow-mk ÅÍloginvOÉ
  ZLeBãÌâèª èÜ·B±Ìlogin ÌoOÍOC¼Ì·³ð
  `FbNµÈ¢Æ¢¤àÌÅ·B±êÉæèobt@ªI[o[t[µÄv
  OªÙí®ìµÄµÜ¢Ü·BVXeãÉAJEgðÁÄ¢él
  ÔÍA±ÌoOÆ¤LCuðgÁÄ root Ì ÀðèÉüêé±ÆªÅ
  «éÆ¢¤\ª¬êÜµ½BÍ±êÉÂ¢ÄÚµ¢bð·éÂàèÍ èÜ
  ¹ñBe¿ð¤¯é Linux VXeÍ½¢¯êÇA±êçÌShadow Suites
  ðCXg[µ½ Linux VXeâúo[WÌ ELF ÅpbP[WÌ
  VXeÅShadow SuitesðCXg[µÄ¢È¢àÌÍë¯É³ç³êé
  ©çÅ·B

  ±ÌbèâA»Ì¼Ì Linux ÌZLeBÉÂ¢ÄÌîñð¾é½ßÉ
  ÍA Linux Security z[y[W (¤LCuÆloginvO ÌÆ
  ã«) <http://bach.cis.temple.edu/linux/linux-security/Linux-Security-
  FAQ/Linux-telnetd.html> ð©éÆæ¢Åµå¤B

  3.2.  Shadow Suite Ìüè

  »Ý§³êéBêÌ Shadow Suite ÍÜ¾Ào[WÅ·ªAÅVÌàÌ
  ÍìÁÄ¢éÂ«ÅÍÀSÅ èAë¯È loginvOàÜñÅ¢Ü¹
  ñB

  pbP[WÍÈºÌ¼Ot¯ÌK¥ðgÁÄ¢Ü·:

       shadow-YYMMDD.tar.gz

  ÍAShadow Suite Ì YYNMMDDú öJµ½ÅÅ é±ÆðÓ¡µÜ·B

  ±Ìo[WÍ»ÝÀeXgÅ èAâªÄo[W 3.3.3 ÉÈéÅ
  µå¤B¡ÍMarek Michalkiewicz <marekm@i17linuxb.ists.pwr.wroc.pl> 
  ÉæÁÄeiX³êÄ¨èA shadow-current.tar.gz
  <ftp://i17linuxb.ists.pwr.wroc.pl/pub/linux/shadow/shadow-
  current.tar.gz> ©çüèÂ\Å·B

  Ü½AÈºÌ~[TCgà èÜ·:

  o  ftp://ftp.icm.edu.pl/pub/Linux/shadow/shadow-current.tar.gz

  o  ftp://iguana.hut.fi/pub/linux/shadow/shadow-current.tar.gz

  o  ftp://ftp.cin.net/usr/ggallag/shadow/shadow-current.tar.gz

  o  ftp://ftp.netural.com/pub/linux/shadow/shadow-current.tar.gz

  »ÝpÅ«éÅVÅðpµÜµå¤B

  shadow-960129æèÃ¢o[WÌàÌÍæöq×½æ¤É loginvO
  Éâèª éÌÅgÁÄÍ¢¯Ü¹ñB

  ±Ì¶Å Shadow Suite ÆÍA±ÌpbP[WÉÂ¢ÄLqµÄ¢
  éàÌÆµÜ·BÜ½A È½ªg¤pbP[Wà±êÅ éàÌÆ¼èµÜ
  ·B

  QlÌ½ßÉAshadow-960129 ÉîÃ¢ÄCXg[Ìèðì¬µÜµ
  ½B

  àµ È½ª»Ýshadow-mkðgÁÄ¢éÈçÎA·×ÄÄ\zµÄ±Ìo[
  WÉAbvO[h·é×«Åµå¤B

  3.3.  Shadow Suite ÉÍ½ªÜÜêÄ¢é©

  Shadow SuiteÍÈºÌR}hðu«·¦Ü·:

  su, login, passwd, newgrp, chfn, chsh, and id

  Ü½ApbP[WÉÍÈºÌVµ¢vOªÜÜêÄ¢Ü·:

  chage, newusers, dpasswd, gpasswd, useradd, userdel, usermod,
  groupadd, groupdel, groupmod, groups, pwck, grpck, lastlog, pwconv,
  and pwunconv

  Á¦ÄApX[hÉANZX·éKvª évOðìé½ßÌCu
   libshadow.a ªÜÜêÄ¢Ü·B

  »µÄAvOÌIC}jAàÜÜêÄ¢Ü·B

  /etc/login.defs ÆµÄCXg[³êéAlogin vOÌÝèt@C
  àÜÜêÄ¢Ü·B

  4.  vOÌRpC

  4.1.  A[JCuÌWJ

  pbP[Wðüèµ½ãÌÅÌìÆÍ±êðWJ·é±ÆÅ·BpbP[W
  Í tar (Tape ARchive) ÅÜÆß½ãÉ gzip Å³kµÄ éÌÅAÜ¸pb
  P[Wð /usr/src ÉÚ®³¹Ä©çÌæ¤ÉüÍµÄº³¢:

       tar -xzvf shadow-current.tar.gz

  ±ÌìÅpbP[WÍ /usr/src/shadow-YYMMDD Æ¢¤fBNgÉWJ
  ³êÜ·B

  4.2.  config.h ÉæéÝè

  Ü¸ÅÉsÈ¤±ÆÍMakefileÆconfig.hÌ2Âðã«Rs[·é±ÆÅ
  ·:
       cd /usr/src/shadow-YYMMDD
       cp Makefile.linux Makefile
       cp config.h.linux config.h

  Ü¸ config.h t@Cð©Ä¾³¢B±Ìt@CÉÍÝèIvVÌ
  è`ª©êÄ¢Ü·BàµA È½ª§³êÄ¢épbP[Wðp¢Ä¢
  éêÉÍAÜ¸O[vÌshadowT|[gðÜ¸³øÉµÜµå¤B

  WÅÍO[vÌpX[hÍLøÉÈÁÄ¢Ü·B±êð³øÉ·é½ß
  ÉÍconfig.hðÒWµA#define SHADOWGRP ð #undef SHADOWGRP ÉÏXµÜ
  ·BÆè ¦¸Í±êð³øÉµÄ¨«A ÆÅ{ÉO[vÌpX[h
  âO[vÌÇÒªKvÆÈÁ½É Shadow Suite ðÄRpC·é×
  «Åµå¤BàµLøÈÜÜÉµÄ¨ÌÈçÎA/etc/gshadow t@Cð
  ìçÈ¯êÎÈèÜ¹ñB

  {·pX[hðLøÉ·é±ÆÍOÉq×½RÌ½ßA§µÜ¹ñB

  #undef AUTOSHADOW ÌÝèÍâÎÉÏXµÄÍ¢¯Ü¹ñB

  AUTOSHADOW IvVÍ shadow ððÅ«È¢vOà@\·éæ¤
  É·é½ßÉÝv³ê½àÌÅ·B±êÍÇ¢±ÆÌæ¤Év¦Ü·ªA«¿
  ñÆ®«Ü¹ñB±ÌIvVðLøÉµAroot ÅvOðÀs·é
  ÆA getpwnam() ÖðÄÑo³ê½êÉÍÏX³ê½Gg[ð
  /etc/passwd t@CÉ«ßµÄµÜ¢Ü·B (àÍâshadow »³ê½p
  X[hÈÈÁÄµÜ¤) chfn â chsh ª±êÉY·évOÅ
  ·Bgetpwnam()ðÄÑo·OÉ^ÌUIDÆÀøUIDð¤ÜØÖ¦é±ÆÅñð
  ·éÆ¢¤û@Íg¦Ü¹ñB chfn â chsh Í root  ÀÅ®ì·é©çÅ
  ·B

  libc ÉÍ¯¶Ó¡ðÂ SHADOW_COMPAT IvVª èÜ·ªA¯¶Ó
  ª libc ðìéÛÉàÄÍÜèÜ·Bg¤×«ÅÍ èÜ¹ñI

  àµ/etc/passwdt@CÉGR[h³ê½pX[hª»íêéæ¤Èç
  ÎâèÅ·B

  àµ4.6.27 ÈOÌo[WÌlibcðgÁÄ¢éÈçA
  config.hÆMakefileð»ê¼êÏX·éKvª èÜ·B config.h ÍÈºÌ
  ªð:

       #define HAVE_BASENAME

  ±Ìæ¤ÉÏXµÄ¾³¢:

       #undef HAVE_BASENAME

  Makefile ÉÂ¢Äà¯lÅ·:

       SOBJS = smain.o env.o entry.o susetup.o shell.o \
               sub.o mail.o motd.o sulog.o age.o tz.o hushed.o

       SSRCS = smain.c env.c entry.c setup.c shell.c \
               pwent.c sub.c mail.c motd.c sulog.c shadow.c age.c pwpack.c rad64.c \
               tz.c hushed.c

       SOBJS = smain.o env.o entry.o susetup.o shell.o \
               sub.o mail.o motd.o sulog.o age.o tz.o hushed.o basename.o

       SSRCS = smain.c env.c entry.c setup.c shell.c \
               pwent.c sub.c mail.c motd.c sulog.c shadow.c age.c pwpack.c rad64.c \
               tz.c hushed.c basename.c

  libc 4.6.27 È~ÅÍ±êçÌÏXÍbasename.cÉÎµÄsíêÄ¢Ü·B

  4.3.  ³ÌvOÌobNAbvÌì¬

  Shadow Suite ªu«·¦ÄµÜ¤vOð ç©¶ßmFµÄ¨«A
  obNAbvðæÁÄ¨ÌÍÇ¢l¦Å·BSlackware 3.0 pbP[WÅÍ
  ÈºÌt@CªYµÜ·:

  o  /bin/su

  o  /bin/login

  o  /usr/bin/passwd

  o  /usr/bin/newgrp

  o  /usr/bin/chfn

  o  /usr/bin/chsh

  o  /usr/bin/id

  ÀÅpbP[WÉÍ Makefile Ésave Æ¢¤^[Qbgª èÜ·ªAR
  gAEg³êÄ¢Ü·BpbP[WªÙÈêÎvOÌu«êàÙ
  Èé©çÅ·B

  /etc/passwdt@CÌobNAbvàæÁÄ¨¢½Ù¤ªÇ¢Åµå
  ¤BpasswdR}hÆ¯¶fBNgÉu¢Äã«µÄµÜíÈ¢æ¤
  ÉA½©ÊÌ¼OÉµÜµå¤B

  4.4.  Make ÌÀs

  CXg[ìÆÌÙÆñÇÍrootÆµÄs¤Kvª èÜ·B

  pbP[WÌÀst@CðRpC·é½ßÉ make ðÀsµÄº³¢:

  make all

  rcsid defined but not used Æ¢¤EH[jOªoé©àµêÜ¹ñªA
  ³µÄ\¢Ü¹ñB±êÍìÒªo[WÇc[ðgÁÄ¢é½ßÉ
  N±éàÌÅ·B

  5.  CXg[

  5.1.  VXejóÉõ¦ÄÌu[gfBXNì¬

  Å«ÌÔÉõ¦ÄAu[gfBXNðìÁÄ¨«Üµå¤BVXeðC
  Xg[µ½Ìu[gfBXNÆ[gfBXNª êÎ\ªÅ·B³¢ê
  ÉÍAu[gfBXNÌì¬ÉÂ¢ÄÌà¾ª©êÄ¢é Bootdisk-
  HOWTO <http://sunsite.unc.edu/mdw/HOWTO/Bootdisk-HOWTO.html> ðQÆµ
  Äº³¢B

  5.2.  d¡·éIC}jAÌí

  u«·¦çêéÃ¢}jAÍÇ±©ÉÚµÄ¨×«Å·BobNAbv
  ÈµÅ Shadow Suite ðCXg[·éêÅàAÃ¢}jAðÁµÄ
  µÜ¢½ÈéÅµå¤BÃ¢}jAÍ¨»ç³k³êÄ¢éÌÅAV
  µ¢}jAÍ¤Üã«³êÈ¢©çÅ·B

  man -aW Æ locate R}hðgÁÄÚ®(í)·×«}jAÌÊuð²
  ×é±ÆªÅ«Ü·BêÊIÉÍ make install ðÀsµ½ãæèàÀs·é
  OÌûªÃ¢}jAÌêð©Â¯éÌªeÕÅ·B

  Slackware 3.0 pbP[WÌêÉÍí·×«}jAÍÈºÌêÉ 
  èÜ·:

  o  /usr/man/man1/chfn.1.gz

  o  /usr/man/man1/chsh.1.gz

  o  /usr/man/man1/id.1.gz

  o  /usr/man/man1/login.1.gz

  o  /usr/man/man1/passwd.1.gz

  o  /usr/man/man1/su.1.gz

  o  /usr/man/man5/passwd.5.gz

  /var/man/cat[1-9] Éà¯¶¼OÌIC}jAª é©àmêÈ¢
  ÌÅA êÎí·éKvª èÜ·B

  5.3.  make install ÌÀs

  ÈºÌR}hðÀsµÜµå¤:(rootÉÈÁÄ©çÀsµÄº³¢)

       make install

  ±êÅAVµ¢vOyÑu«·¦çêévOªCXg[³
  êAt@CÌp[~bVªC³³êÜ·BÜ½AIC}jA
  àCXg[³êÜ·B

  Shadow Suite ÌCN[ht@Cª ³µ¢ê (/usr/include/shadow)
  ÉCXg[³ê½©Ç¤©mFµÄº³¢B

  ÀÅpbP[WðgÁÄ¢éêÉÍAlogin.defsðè®Å /etcÖRs[µ
  ÄAroot ¾¯µ©ÇÝ«Å«È¢æ¤ÉµÈ¯êÎÈèÜ¹ñB

       cp login.defs /etc
       chmod 700 /etc/login.defs

  ±Ìt@CÍloginvOÌÝèt@CÅ·B±Ìt@CÍ È½
  ÌVXeÉí¹ÄÏXµÄ¾³¢B±Ìt@CÅÍAÇÌ tty ©ç
  root ÌOCð·©ÈÇZLeBÉÖ·éÝè(pX[hÌúÀÝ
  èÈÇ)ªÅ«Ü·B

  5.4.  pwconv ÌÀs

  ÌXebvÍ pwconv ðÀs·é±ÆÅ·B±êàroot  ÀÅsíÈ¯ê
  ÎÈèÜ¹ñBÜ½A/etc fBNgÖÚ®µÄ©çÀsµÄº³¢:

       cd /etc
       /usr/sbin/pwconv

  pwconv Í /etc/passwd ÌetB[hðæèoµÄA /etc/npasswd Æ
  /etc/nshadow Ì2ÂÌt@CðìèÜ·B

  pwunconv Æ¢¤R}hà èAàµKvÈçÎ /etc/passwd Æ
  /etc/shadow ©çÊÌ /etc/passwd ð¶¬·é±ÆàÅ«Ü·B

  5.5.  npasswd Æ nshadow Ìl[

  pwconv ðÀsµ½±ÆÅ /etc/npasswd Æ /etc/nshadow ª¾çê½Í¸Å
  ·B±êçÌt@Cð»ê¼ê /etc/passwd Æ /etc/shadow Éã«µÄ
  ¾³¢Bã«ÌOÉÍ³Ì /etc/passwd ÌobNAbvðìèA±Ì
  obNAbvÍ root ÈOÌ[UÍÇßÈ¢æ¤ÉµÄ¨«Üµå¤Bob
  NAbvÍ root Ìz[fBNgÉìéÆÇ¢Åµå¤:

       cd /etc
       cp passwd ~passwd
       chmod 600 ~passwd
       mv npasswd passwd
       mv nshadow shadow

  ³çÉAt@CÌI[iÆp[~bVª³µ¢©Ç¤©mFµÜµå
  ¤B X-Window System ðgÁÄ¢éÈçÎAxlock â xdm Í shadow t@C
  ðÇßéæ¤ÉÈÁÄ¢È¯êÎÈèÜ¹ñ(«ÝªÅ«éKvÍ è
  Ü¹ñ)B

  ±êÉÍ2ÂÌû@ª èÜ·BêÂÍAxlockð root É SUID ·éû@Å
  ·B(xdm Í¢¸êÉ¹æ root ÆµÄ®ì·éÌÅÖW èÜ¹ñB) à¤
  êÂÍ shadow t@CÌLÒÍrootÉAO[vÍshadowÉ·éû@Å
  ·B±Ìæ¤ÈÝèÉ·éOÉÍA/etc/group t@Cð©ÄA shadow O
  [vª é©Ç¤©ðÜ¸mFµÄ¾³¢Bshadow O[vÉ®·é
  [UÍêlà¢ÄÍ¢¯Ü¹ñB

       chown root.root passwd
       chown root.shadow shadow
       chmod 0644 passwd
       chmod 0640 shadow

  ±êÅ È½ÌVXeÌpX[hÍ shadow »³êÜµ½B±±ÅAVµ
  ¼z[ðJ¢ÄOCªÅ«é©Ç¤©mFµÄÝÜµå¤B

  ³ AâÁÄÝÜµå¤I

  àµ¤Ü¢©È¢êÍAÇ±©ÅÔá¦Ä¢Ü·Bshadow »³êÄ¢È
  ¢óÔÉß·½ßÉÍÈºÌæ¤Èè±«ðsÁÄº³¢:

       cd /etc
       cp ~passwd passwd
       chmod 644 passwd

  ÅÉobNAbvðæÁ½¼Ìt@Cà³µ¢êÉßµÜµå¤B

  6.  AbvO[h·é©pb`ðÄéKvª évO

  Shadow Suite ÉÍpX[hÉANZX·évOÙÆñÇÌãÖið
  ÜñÅ¢Ü·ªAÙÆñÇÌVXeÅÍ¼Éà¢Â©ÌvOªKv
  ÆÈèÜ·B

  Debian pbP[WÅÍ(»¤ÅÈ¢êÅà\¢Ü¹ñª)AÈºÌê©ç
  VXeÌÄ\zÉKvÈvOÌ Debian pbP[WÌÌ\[Xðüè
  ·é±ÆªÅ«Ü·B ftp://ftp.debian.org/debian/stable/source/

  ±ÌßÌcèÍadduser, wu_ftpd, ftpd, pop3d, xlock, xdm and sudo ª
  Shadow Suite ðT|[gÅ«éæ¤É·é½ßs¤AbvO[hÉÂ¢Ä
  à¾µÜ·B

  ¼ÌvOà shadow T|[gÅ«éæ¤É·éû@Í ``CvOð
  Shadow Suite ÉÎ³¹éû@'' ÌÍðQÆµÄº³¢B(ÀÛÉ shadow
  t@CÉANZX·é½ßÉÍ root É SUID ·é© shadow É SGID ·é
  Kvª èÜ·B)

  6.1.  Slackware adduser program

  Slackware pbP[W(¨»ç¼ÌpbP[WÉà)ÉÍ /sbin/adduser Æ
  ¢¤ÎbIÉVµ¢[UðÇÁ·évOªÜÜêÄ¢Ü·B±Ìv
  OÌ shadow ÎÅÍ ftp://sunsite.unc.edu/pub/Linux/
  system/Admin/accounts/adduser.shadow-1.4.tar.gz ©çüèÅ«Ü·B

  MÒÍ slackware ÌadduserÌãèÉShadow SuiteÉÜÜêÄ¢évO
  (useradd, usermod, userdel)ðg¤±Æð©ßÜ·Bg¢ûÍV½Éo¦
  È¯êÎÈèÜ¹ñªA»ê¾¯Ì¿lÍ èÜ·Bæè×©¢§äªÅ«Ü
  ·µA (adduserÅÍsíÈ¢) /etc/passwd â /etc/shadowÌbLOà
  µÄêé©çÅ·B

  ÚµÍ ``Shadow Suite ðgÁÄÝé'' ÌÍð©Ä¾³¢B

  »êÅà adduser ðg¢½¢ÈçÎAÈºÌæ¤ÈèÅCXg[µÄ
  ¾³¢:

       tar -xzvf adduser.shadow-1.4.tar.gz
       cd adduser
       make clean
       make adduser
       chmod 700 adduser
       cp adduser /sbin

  6.2.  wu_ftpd T[o

  åªÌ Linux VXeÅÍ wu_ftpd T[oðgÁÄ¢Ü·BàµA È½
  ÌgÁÄ¢épbP[WÉ Shadow SuiteªCXg[³êÄ¢È¢ê
  Awu_ftpd à shadow ðT|[g·éæ¤ÉÍÈÁÄ¢È¢Åµå
  ¤Bwu_ftpd Í inetd/tcpd ©çrootÌvZXÆµÄN®³êÜ·BàµA
   È½ªÃ¢ wu_ftpd f[ðç¹Ä¢éÈçAo[Wðã°Ä
  ¾³¢BÃ¢o[WÍ rootÌAJEgðFßÄµÜ¤oOðÁÄ¢
  é±ÆÅmçêÄ¢é©çÅ·B(ÚµÍ Linux security z[y[W
  <http://bach.cis.temple.edu/linux/linux-security/Linux-Security-
  FAQ/Linux-wu.ftpd-2.4-Update.html>) ðQÆµÄº³¢B )

  K¢Ashadow ðLøÉ·é½ßÉÍ\[XR[hðüèµÄÄRpC·
  é¾¯Å·B

  ELF VXeÅÈ¢êÉÍAwu_ftpT[oÍ Sunsite É wu-
  ftp-2.4-fixed.tar.gz
  <ftp://sunsite.unc.edu/pub/Linux/system/Network/file-transfer/wu-
  ftpd-2.4-fixed.tar.gz> Ì¼OÅu¢Ä¢éàÌªpÅ«Ü·B

  t@Cðüèµ½çA±Ìt@Cð /usr/src Éu¢Ä©çAÈºÌæ¤
  ÈìðsÁÄ¾³¢:

  cd /usr/src
  tar -xzvf wu-ftpd-2.4-fixed.tar.gz
  cd wu-ftpd-2.4-fixed
  cp ./src/config/config.lnx.shadow ./src/config/config.lnx

  É ./src/makefiles/Makefile.lnx t@CÌÈºÌªð:

       LIBES    = -lbsd -support

  Ìæ¤ÉÏXµÜ·:

       LIBES    = -lbsd -support -lshadow

  »µÄAÀst@C¶¬XNvgÌÀsyÑCXg[ðs¢Ü·:

       cd /usr/src/wu-ftpd-2.4-fixed
       /usr/src/wu-ftp-2.4.fixed/build lnx
       cp /usr/sbin/wu.ftpd /usr/sbin/wu.ftpd.old
       cp ./bin/ftpd /usr/sbin/wu.ftpd

  ±êÍALinux p shadow ÌÝèt@CðgÁÄT[oÌRpCyÑC
  Xg[ðs¢Ü·B

  MÒÌ Slackware 2.3 VXeÅÍÀst@C¶¬XNvgðÀs·é
  OÉÈºÌìðs¤Kvª èÜµ½:

       cd /usr/include/netinet
       ln -s in_systm.h in_system.h
       cd -

  ELF VXeãÅÍRpCª¤Ü¢©È¢±Æªñ³êÄ¢Ü·ªA
  Ì[XÌÀÅðg¦Î¤Ü¢æ¤Å·B±êÍAwu-
  ftp-2.4.2-beta-10.tar.gz <ftp://tscnet.com/pub/linux/network/ftp/wu-
  ftpd-2.4.2-beta-10.tar.gz> ÆµÄüèÅ«Ü·B

  t@Cðüèµ½çA±êð /usr/src Éu¢ÄAÈºÌìðsÁÄ¾
  ³¢:

  cd /usr/src
  tar -xzvf wu-ftpd-2.4.2-beta-9.tar.gz
  cd wu-ftpd-beta-9
  cd ./src/config

  É config.lnx t@CÌÈºÌªð

       #undef SHADOW.PASSWORD

  Ìæ¤ÉÏXµÜ·B

       #define SHADOW.PASSWORD

  »ê©çA

       cd ../Makefiles

  ðs¢AJgfBNgðÏXµÄ©ç Makefile.lnx t@CÌ

       LIBES = -lsupport -lbsd # -lshadow

  ÌªðÌæ¤ÉÏXµÜ·B

       LIBES = -lsupport -lbsd -lshadow

  »µÄÀst@C¶¬ÆCXg[ðs¢Ü·:

       cd ..
       build lnx
       cp /usr/sbin/wu.ftpd /usr/sbin/wu.ftpd.old
       cp ./bin/ftpd /usr/sbin/wu.ftpd

  /etc/inetd.conf t@CÉ wu_ftpd {ÌÌu«êª©êÄ¢é©Ç¤
  ©ðmF·éÌðYêÈ¢æ¤ÉµÜµå¤BpbP[WÉæÁÄÍT[of
  [Ìuêªá¢Awu_ftpd ªÊÌ¼OÉÈÁÄ¢éàÌà éÆ¢¤ñ
  ª èÜµ½B
  ó: Slackware 3.1 ÅÍ shadow pX[h»ðsÁ½êAwu-ftpd ÌR
  pCÉ¸s·éêª èÜ·BºLÌæ¤ÈG[ªoéêÉÍ
  src/makefiles/Makefile.lnx Ì CFLAGS É "-DDIRENT_ILLEGAL_ACCESS" ðÁ
  ¦ÄÝÄ¾³¢B (±ÌîñÍÎLd@å³ñæè¸«Üµ½B)

  ______________________________________________________________________
  gcc -O2 -fomit-frame-pointer -I.. -I../support -I/usr/include/bsd -L../suppors
   -c glob.c -o glob.o
  glob.c: In function `matchdir':
  glob.c:284: dereferencing pointer to incomplete type
  make: *** [glob.o] Error 1
  ______________________________________________________________________

  6.3.  WÌ ftpd

  WÌ ftpd T[oðgÁÄ¢éêÉÍ wu_ftpd T[oÉAbvO[h
  ·é±Æð©ßÜ·Bæöq×½oOð¯ÎAæèÀS¾Æ³êÄ¢é©ç
  Å·B

  Ç¤µÄàWÌàÌðg¢½¢êâANIS ðT|[g·éKvª éê
  ÉÍ Sunsite ©ç ftpd-shadow-nis.tgz
  <ftp://sunsite.unc.edu/pub/Linux/system/Network/file-transfer/ftpd-
  shadow-nis.tgz> ðüèµÄº³¢B

  6.4.  pop3d (Post Office Protocol 3)

  àµAPOP3(the third Post Office Protocol) ðT|[g·éKvª éê
  ÉÍ pop3d ðÄRpC·éKvª èÜ·B pop3d Í inet/tcpd ©
  çroot ÀÅÀs³êÜ·B

  Sunsite ©ç2ÂÌÙÈéo[WÌàÌðüèÅ«Ü·:
  pop3d-1.00.4.linux.shadow.tar.gz
  <ftp://sunsite.unc.edu/pub/Linux/system/Mail/pop/pop3d-1.00.4.linux.shadow.tar.gz>
  Æ pop3d+shadow+elf.tar.gz
  <ftp://sunsite.unc.edu/pub/Linux/system/Mail/pop/pop3d+shadow+elf.tar.gz>
  Å·B

  Ç¿çÌêàâèÈCXg[Å«éÅµå¤B

  6.5.  xlock

  Shadow Suite ðCXg[µAX Window VXeãÅ xlock ðAbvO
  [hµÈ¢ÜÜÅÀsµ½êÉÍA CNTL-ALT-Fx ÅÊÌR\[ÉØ
  Ö¦ÄOCµ xlock ÌvZXðE·( é¢Í CNTL-ALT-BS Å X T[
  oðE·)ÈOÉÇ¤µæ¤àÈ¢óÔÉÈÁÄµÜ¢Ü·BK¢È±ÆÉA
  xlock ðAbvO[h·éÌÍÆÄàÈPÅ·B

  àµAXFree86 Ìo[W 3.x.x ðpµÄ¢éêÉÍA xlockmore
  (lock @\ÉÁ¦ÄXN[Z[o@\ðÂ)ðgÁÄ¢éÆv¢Ü·B
  ±ÌpbP[WÍÄRpC·é±ÆÅ shadow ðT|[gÅ«Ü·BÃ¢
  xlock ðgÁÄ¢éêÉÍ xlockmore ÉAbvO[h·é±Æð©ßÜ
  ·B

  xlockmore-3.5.tgz ÍÈºÌêÅüèÅ«Ü·:
  <ftp://sunsite.unc.edu/pub/Linux/X11/xutils/screensavers/xlockmore-3.7.tgz>

  CXg[Íî{IÉÍÈºÌæ¤ÈìÅs¢Ü·:

  xlockmore-3.5.tgz ðüèµA/usr/src ÅWJµÜ·:

       tar -xzvf xlockmore-3.7.tgz

  /usr/X11R6/lib/X11/config/linux.cf ðÒWµA

       #define HasShadowPasswd    NO

       Ìsð

       #define HasShadowPasswd    YES

  Ìæ¤ÉÏXµÜ·B

  »µÄAÀst@Cðì¬µÜ·:

       cd /usr/src/xlockmore
       xmkmf
       make depend
       make

  t@CðÚ®µAI[iÆp[~bVðÝèµÜ·:

       cp xlock /usr/X11R6/bin/
       cp XLock /var/X11R6/lib/app-defaults/
       chown root.shadow /usr/X11R6/bin/xlock
       chmod 2755 /usr/X11R6/bin/xlock
       chown root.shadow /etc/shadow
       chmod 640 /etc/shadow

  ±êÅA¤Ü® xlock ªÅ«½Í¸Å·B

  6.6.  xdm

  xdmÍ X Window ÌOCæÊð\¦·évOÅ·BÁèÌ run
  level ÉÚsµ½Æ«ÉxdmªÀs³êéVXeà èÜ·B
  (/etc/inittabQÆ)
  Shadow SuiteÌCXg[ðsÈ¤ÆAxdmàXVµÈ¯êÎÈèÜ¹ñB
  µ©µxdmÌAbvO[hÍÈPÈÌÅâè èÜ¹ñB

  xdm.tar.gz ÍÈºÌURLÅüèÅ«Ü·:
  <ftp://sunsite.unc.edu/pub/Linux/X11/xutils/xdm.tar.gz>

  xdm.tar.gz t@CðüèµÄA/usr/srcÉu¢Ä©çÈºÌæ¤ÉµÄW
  JµÜ·:

       tar -xzvf xdm.tar.gz

  /usr/X11R6/lib/X11/config/linux.cf àÌ

       #define HasShadowPasswd    NO

       Ìªð

       #define HasShadowPasswd    YES

  Ìæ¤ÉÏXµÜ·B

  Àst@CðìèÜ·:

       cd /usr/src/xdm
       xmkmf
       make depend
       make

  t@CðCXg[µÜ·:

       cp xdm /usr/X11R6/bin/

  xdm Í root  ÀÅ®ì·éÌÅt@CÌp[~bVðÏ¦éKvÍ 
  èÜ¹ñB

  6.7.  sudo

  sudovOÍVXeÇÒªÊíroot ÀðKvÆ·évOð
  [UÉÀs³¹é½ßÉp¢Ü·BÇÒªrootÌAJEgÖÌANZXð
  §Àµ½ÜÜÅA[UÉfBXNÌ}EgÌìðÂ·éÆ«ÉÖ
  ÈvOÅ·B

  sudo ÍÀs³ê½É[UÌpX[hFØðs¤ÌÅApX[ht@
  CðÇßÈ¯êÎÈèÜ¹ñBsudo ÍÅ©çrootÉ SUID ³êÄ®ì·
  éÌÅA/etc/shadow ÖÌANZXÉÂ¢ÄÍâè èÜ¹ñB

  Shadow Suit ÎÌ sudo ÍÈºÌURLÅüèÅ«Ü·:
  <ftp://sunsite.unc.edu/pub/Linux/system/Admin/sudo-1.2-shadow.tgz>

  x: sudoðCXg[·éÛÉ /etc/sudoerst@CÍWÌàÌÆu
  «·¦çêÄµÜ¢Ü·BÅ·©çAWÌóÔ©çÏXª éêÉÍob
  NAbvðæÁÄ¨Kvª èÜ·B(Makefile ðÏXµÄWÌt@C
  ð/etcÉRs[·éªÌðí·éÆ¢¤û@à èÜ·B)

  ±ÌpbP[WÍùÉ shadow ÎÌÝèªÈ³êÄ¢éÌÅApbP[Wð
  ÄRpC·é¾¯ÅpÅ«Ü·(\[XÍ /usr/src ÉWJµÄº³
  ¢):

       cd /usr/src
       tar -xzvf sudo-1.2-shadow.tgz
       cd sudo-1.2-shadow
       make all
       make install

  6.8.  imapd (E-Mail [pine pbP[W])

  imapd Í pop3d Ìæ¤È[T[oÅ·B imapd Í pine E-mail pbP
  [WÉt®µÄ¢Ü·BpbP[WÉt®·éhLgÉÍ Linux VX
  eÉÎ·éWÝèÅ shadow ðT|[gµÄ¢éÆ©êÄ¢Ü·Bµ©
  µA±êÍ³µÈ¢LqÅ·B³çÉA±ÌpbP[WÅÍÀst@C¶
  ¬XNvgÆ Makefile Ìg¹ªKvÅARpCÉlibshadow.að
  Á¦é±Æªªïµ¢ÌÅ·B»¤¢¤í¯ÅAÍÜ¾ imapd ª shadow
  T|[g·éæ¤ÉÍÅ«Ä¢Ü¹ñB

  àµ¬÷µ½lª¢Üµ½çAMÒÌÆ±ëÉ[Åmç¹Ä¾³¢B±
  ÌÚÉÁ¦½¢Æv¢Ü·B

  6.9.  pppd (PPP vgRT[o)

  pppd T[oÍFØÌû®ð¡pÅ«éæ¤ÉÝèÅ«Ü·B Password
  Authentication Protocol (PAP) Æ Cryptographic Handshake
  Authentication Protocol (CHAP)Å·Bpppd T[oÍÊpX[h¶ñ
  ð /etc/ppp/chap-secrets © /etc/ppp/pap-secrets ( é¢Í¼û)©ç¾
  Ü·Bpppd ÉWÌ®ìð³¹Ä¢éêÉÍ pppd ðÄCXg[·é
  KvÍ èÜ¹ñB

  pppd Íloginp[^ðg¤æ¤É·é±ÆàÅ«Ü·(R}hC
  ©AÝèt@CÅwè·é© options t@CàÅwè)Bàµlogin Iv
  Vªwè³êéÆ pppd Í PAP Å /etc/passwd t@CÌ[Ul[
  ÆpX[hðg¢Ü·BpX[hð shadow »·éÆà¿ëñA±êÍ®
  ìµÈÈèÜ·B pppd-1.2.1d ÅÍ shadow ðT|[g·é½ßÉÍv
  OðÏXµÈ¯êÎÈèÜ¹ñB

  ÌÍÅÌáèÍ pppd-1.2.1d(o[WªÃ¢ pppd)É shadow T|[g
  ðÁ¦éÆ¢¤àÌÅ·B

  pppd-2.2.0 ÅÍùÉ shadow ÎªsíêÄ¢Ü·B

  7.  Shadow Suite ðgÁÄÝé

  ±ÌÍÅÍVXeÉShadow SuiteðCXg[µ½ãÉmÁÄ¨×«¾
  Ævíêé±Æðà¾µÜ·BæèÚµ¢à¾ÍeR}hÌIC}
  jAðQÆµÄ¾³¢B

  7.1.  [UÌÇÁAÏXAí

  Shadow Suite ÉÍ[UðÇÁAÏXAí·é½ßÌvOªÜÜê
  Ä¢Ü·BùÉadduservOàÁÄ¢é©àµêÜ¹ñB

  7.1.1.  useradd

  useraddR}hÍVXeÉ[UðÇÁ·é½ßÉp¢Ü·BWÌÝè
  ðÏ¦éÆ«Éà±ÌR}hðÀsµÜ·B

  ÅÉsÈ¤×«±ÆÍWÝèðmFµÄ È½ÌVXeÉí¹ÄÏX
  ðÁ¦é±ÆÅ·:

       useradd -D

  ______________________________________________________________________
  GROUP=1
  HOME=/home
  INACTIVE=0
  EXPIRE=0
  SHELL=
  SKEL=/etc/skel
  ______________________________________________________________________

  WÝèÍ¨»çCÉüçÈ¢Åµå¤©çA[UðÁ¦éÆ«Ée[
  UÉÎµÄSÄÌÚð¢¿¢¿wè·éæèàAWÌÝèðÏ¦ÄµÜ¢
  Üµå¤B

  MÒÌVXeÅÍÈºÌæ¤ÈÝèÉÏ¦Ä¢Ü·:

  o  WÌO[v ID ð 100 É

  o  pX[hÌúÀð 60 úÉ

  o  pX[hÌúÀØêÉæéAJEgÌbNÍsÈíÈ¢

  o  WÌVFð/bin/bash É

     ±Ìæ¤ÈÏXðsÈ¤ÉÍÌR}hðÀsµÜ·:
       useradd -D -g100 -e60 -f0 -s/bin/bash

  ±ÌóÔÅ useradd -D ðÀs·éÆÈºÌÊð¾Ü·:

  ______________________________________________________________________
  GROUP=100
  HOME=/home
  INACTIVE=0
  EXPIRE=60
  SHELL=/bin/bash
  SKEL=/etc/skel
  ______________________________________________________________________

  àµmè½¯êÎA±êçÌWÝèÍ/etc/default/useradd t@CÅm
  FÅ«Ü·B

  ±êÅ[UÌÇÁÉ useradd ðg¦éæ¤ÉÈèÜµ½Bá¦ÎAWÌ
  ÝèðgÁÄ[U fred ðÇÁ·é½ßÉÍÈºÌæ¤ÈìðsÈ¢Ü
  ·:

       useradd -m -c "Fred Flintstone" fred

  ±ÌR}hÍ/etc/passwd t@CàÉÈºÌæ¤ÈGg[ðìèÜ
  ·:

       fred:*:505:100:Fred Flintstone:/home/fred:/bin/bash

  Ü½A/etc/shadowt@CàÉÈºÌGg[ðìèÜ·:

       fred:!:0:0:60:0:0:0:0

  -mIvVªÂ¢Ä¢éÌÅA[Ufred Ìz[fBNgà¶¬³
  êA/etc/skelfBNgÌàeªRs[³êÜ·B

  UID ÍwèµÄ¢ÈÄàKÉßÄêÜ·B

  ±êÅfredÌAJEgªÅ«Üµ½ªAAJEgÌbNððµÈ¢À
  èfredÍOC·é±ÆÍÅ«Ü¹ñBbNÌðÍpX[hðÏ¦é
  ±ÆÉæÁÄsÈ¢Ü·B

       passwd fred

  ______________________________________________________________________
  Changing password for fred
  Enter the new password (minimum of 5 characters)
  Please use a combination of upper and lower case letters and numbers.
  New Password: *******
  Re-enter new password: *******
  ______________________________________________________________________

  ±êÅ /etc/shadowÍÈºÌæ¤ÈàeÉÈèÜ·:

       fred:J0C.WDR1amIt6:9559:0:60:0:0:0:0

  »µÄAfredÍVXeÉOCÅ«éæ¤ÉÈèÜ·B¼ÌvOÅ
  È useradd ðg¤_Í/etc/passwd Æ/etc/shadowÌÏXªsÂªÉsÈ
  íêé±ÆÅ·BÂÜèA È½ª[Uðo^·éÌÆ¯É¼Ì[Uª
  pX[hðÏXµ½ÆµÄàA¼ûÆà³µÀs³êÜ·B

  ¼Ú /etc/passwd â /etc/shadow ðÒW·éÌÍâßÄApÓ³ê½R}
  hðp·é×«Å·B È½ª /etc/passwd ðÒWµÄ¢éÔÉA é
  [UªpX[hðÏXµ½Æ·éÆA»Ì[UÌpX[hÏXÍ È½
  ªt@CðZ[uµ½É¸íêÄµÜ¢Ü·B

  ÈºÉ¦·ÌÍuseraddÆpasswdðgÁ½ÈPÈÎbI[UÇÁXNvg
  Å·B

  ______________________________________________________________________
  #!/bin/bash
  #
  # /sbin/newuser - A script to add users to the system using the Shadow
  #                 Suite's useradd and passwd commands.
  #
  # Written my Mike Jackson <mhjack@tscnet.com> as an example for the Linux
  # Shadow Password Howto.  Permission to use and modify is expressly granted.
  #
  # This could be modified to show the defaults and allow modification similar
  # to the Slackware Adduser program.  It could also be modified to disallow
  # stupid entries.  (i.e. better error checking).
  #
  ##
  #  Defaults for the useradd command
  ##
  GROUP=100        # Default Group
  HOME=/home       # Home directory location (/home/username)
  SKEL=/etc/skel   # Skeleton Directory
  INACTIVE=0       # Days after password expires to disable account (0=never)
  EXPIRE=60        # Days that a passwords lasts
  SHELL=/bin/bash  # Default Shell (full path)
  ##
  #  Defaults for the passwd command
  ##
  PASSMIN=0        # Days between password changes
  PASSWARN=14      # Days before password expires that a warning is given
  ##
  #  Ensure that root is running the script.
  ##
  WHOAMI=`/usr/bin/whoami`
  if [ $WHOAMI != "root" ]; then
          echo "You must be root to add news users!"
          exit 1
  fi
  ##
  #  Ask for username and fullname.
  ##
  echo ""
  echo -n "Username: "
  read USERNAME
  echo -n "Full name: "
  read FULLNAME
  #
  echo "Adding user: $USERNAME."
  #
  # Note that the "" around $FULLNAME is required because this field is
  # almost always going to contain at least on space, and without the "'s
  # the useradd command would think that you we moving on to the next
  # parameter when it reached the SPACE character.
  #
  /usr/sbin/useradd -c"$FULLNAME" -d$HOME/$USERNAME -e$EXPIRE \
          -f$INACTIVE -g$GROUP -m -k$SKEL -s$SHELL $USERNAME
  ##
  #  Set password defaults
  ##
  /bin/passwd -n $PASSMIN -w $PASSWARN $USERNAME >/dev/null 2>&1
  ##
  #  Let the passwd command actually ask for password (twice)
  ##
  /bin/passwd $USERNAME
  ##
  #  Show what was done.
  ##
  echo ""
  echo "Entry from /etc/passwd:"
  echo -n "   "
  grep "$USERNAME:" /etc/passwd
  echo "Entry from /etc/shadow:"
  echo -n "   "
  grep "$USERNAME:" /etc/shadow
  echo "Summary output of the passwd command:"
  echo -n "   "
  passwd -S $USERNAME
  echo ""
  ______________________________________________________________________

  [UÌÇÁÉXNvgðp·é±ÆÍ¼Ú/etc/passwdâ
  /etc/shadowðÒWµ½èASlackware Ì adduservOðp·éæè
  à]Üµ¢Å·B±ÌXNvgð È½ÌVXeÉí¹ÄÏXµÄgÁ
  Ä¾³¢B

  useraddÉÂ¢ÄÌæèÚµ¢à¾ÍIC}jAðQÆµÄ¾³
  ¢B

  7.1.2.  usermod

  usermodvOÍ[UÉÂ¢ÄÌîñðÏX·é½ßÌàÌÅ·BIv
  VÍuseraddÆÙÆñÇ¯¶Å·B

  fredÌVFðÏ¦æ¤ÆvÁ½çAÈºÌæ¤ÈìðµÜ·:

       usermod -s /bin/tcsh fred

  ±êÉæÁÄA/etc/passwdÌfredÌGg[ÍÌæ¤ÉÏX³êÜ·:

       fred:*:505:100:Fred Flintstone:/home/fred:/bin/tcsh

  ÉAfredÌAJEgÌúÀð 1997N915úÉÝèµÄÝÜµå¤:

       usermod -e 09/15/97 fred

  ±êÅ/etc/shadowÌfredÌGg[ÍÌæ¤ÉÏX³êÜ·:

       fred:J0C.WDR1amIt6:9559:0:60:0:0:10119:0

  usermodÉÂ¢ÄÌæèÚµ¢à¾ÍIC}jAðQÆµÄ¾³
  ¢B
  7.1.3.  userdel

  userdelÍ¼OÌÊèA[UÌAJEgðÁµÜ·Bg¢ûÍPÉ

       userdel -r username

  ÆüÍ·é¾¯Å·B -rIvVðÂ¯éÆ[UÌz[fBNg
  ð(z[fBNg»ÌàÌàÜßÄ)ÁµÜ·BÙÈét@CVXe
  ãÉ ét@CÍèìÆÅÁµÈ¯êÎÈèÜ¹ñB

  AJEgðÁ·ÌÅÍÈAPÉbN·é¾¯ÌêÉÍ passwdR}
  hðg¢Ü·B

  7.2.  passwd R}hÆpX[hÌúÀÝè

  passwdR}hÍÊÌpX[hÏXÌ@\ðÁÄ¢Ü·B±êÉÁ¦
  ÄA[UrootÅÀsµ½êÉÍAÈºÌ±ÆªÅ«Ü·B

  o  AJEgÌbNyÑ»Ìð (-l Æ -u)

  o  pX[hÌÅZLøúÔÌÝè (-x)

  o  pX[hÏXÜÅÌÅZúÌÝè(-n)

  o  úÀÌØêépX[hÉÎµÄ½úO©çx·é©ÌÝè (-w)

  o  pX[hÌúÀØê©çAJEgÌbNÜÅÌúÌÝè is
     locked (-i)

  o  AJEgîñð´µÄ\¦(-S)

  áÆµÄAÄÑ[Ufredð©ÄÝÜµå¤B

       passwd -S fred
       fred P 03/04/96 0 60 0 0

  ±êÍAfredÌpX[hÍLøÅ é±ÆAOñÌÏXÍ1996N3 4úÅ
   Á½±ÆA¢ÂÅàÏXÂ\Å é±ÆA60úãÉúÀØêÉÈé±
  ÆAfred ÉÍxÍÈ³êÈ¢±ÆApX[hªúÀØêÉÈÁÄàAJ
  EgÍ³øÆÈçÈ¢±ÆðÓ¡µÄ¢Ü·B

  ±êÍApX[hªúÀØêÉÈÁÄ©çfredªOC·éÆVµ¢pX
  [hðv·évvgªoÄéÆ¢¤±ÆÅ·B

  àµAfredÌpX[hªúÀØêÉÈé14úOÉxðoµAúÀØê
  Ì14úãÉÍAJEgªâ~ÆÈéæ¤É·é½ßÉÍÌæ¤È½ßð^
  ¦Ü·B

       passwd -w14 -i14 fred

  ±ÌÆ«AfredÌîñÍÌæ¤ÉÈèÜ·B

       fred P 03/04/96 0 60 14 14

  Ú×ÉÂ¢ÄÍpasswdÌIC}jAðQÆµÄ¾³¢B

  7.3.  login.defs t@C

  /etc/logint@CÍloginvOÆShadow SuiteSÌÌÝèt@CÅ
  ·B

  /etc/login t@CÍvvg\¦©çA[UªpX[hÏXðµ½
  ÉWÌpX[húÀÍÇ¤Èé©ÜÅÌL¢ÝèðÁÄ¢Ü·B

  /etc/login.defs àÉÚµ¢Rgª èÜ·ªA¢Â©Ó·×«_ª
   èÜ·B

  o  ¶µ½MOÌÊðè·étO(on  é¢Í off ÉÅ«é)ðÜ
     Þ

  o  ¼ÌÝèt@CÖÌ|C^ðÜÞ

  o  pX[hÌ aging ÈÇÉÂ¢ÄÌWÌÝèðÜÞ

  ±êçÌ±Æ©çdvÈt@CÅ é±Æªí©éÆv¢Ü·BÅ·©çA
  t@Cª»ÌàÌª¶Ý·é±ÆÆ³µ¢ÝèÉÈÁÄ¢é©Ç¤©ðK¸
  mFµÄ¾³¢B

  7.4.  O[vÌpX[h

  /etc/groupst@CÍÁèÌO[vÌoÉÈé½ßÌpX[hðÜ
  Þ±Æª èÜ·B±Ì@\ÍRpCÉ /usr/src/shadow-
  YYMMDD/config.h t@CàÅèSHADOWGRP ðè`µÄ¢êÎLøÉÈÁÄ
  ¢Ü·B

  ±Ìèðè`µÄRpCðsÈÁ½ÈçÎA/etc/gshadowt@Cðì
  èAO[vÌpX[hyÑO[vÇÒÉÂ¢ÄÌîñðÛ³¹È¯
  êÎÈèÜ¹ñB

  /etc/shadow t@CðìÁ½ÉÍ pwconvÆÄÎêévOðg¢Ü
  µ½ªA/etc/gshadowÉÎµÄÍ±êÉ·éàÌÍ èÜ¹ñBµ©µA
  ±Ìt@CÍÁÉÒW·éKvÍÈ¢ÌÅâèÉÍÈèÜ¹ñB

  ÅÉ /etc/gshadow t@Cðìé½ßÉÍÈºÌìðsÈ¢Ü·B

       touch /etc/gshadow
       chown root.root /etc/gshadow
       chmod 700 /etc/gshadow

  Vµ¢O[vðìéÆ©®IÉ/etc/groupyÑ /etc/gshadowt@CÉÇ
  Á³êÜ·B[UÌÇÁâíAO[vÌpX[hÌÏXÈÇÌC³ª
  sÈíê½êÉÍ /etc/gshadowt@CàÏX³êÜ·B

  Shadow Suite ÉÜÜêéO[vðÏX·é½ßÌvOÆµÄgroups,
  groupadd, groupmod, groupdelª èÜ·B

  /etc/group t@CÌtH[}bgÍÌæ¤ÉÈÁÄ¢Ü·B

       groupname:!:GID:member,member,...

  etB[hÌàeÍÌæ¤ÉÈÁÄ¢Ü·:

     groupname
        O[v¼

     !  ÊíÍpX[hðÛ·étB[hÅ éªA Shadow Suite ÅÍ
        pX[hÍ/etc/gshadow t@CÉi[³êé

     GID
        O[vID(l)

     member
        O[vÌoÌXg

  /etc/gshadow t@CÌtH[}bgÍÌæ¤ÉÈèÜ·B

       groupname:password:admin,admin,...:member,member,...

  etB[hÌàeÍÍÈºÌæ¤ÉÈÁÄ¢Ü·:

     groupname
        O[vÌ¼O

     password
        GR[h³ê½pX[h

     admin
        O[vÌÇÒÌXg

     member
        O[vÌoÌXg

  gpasswdR}hÍO[vÉÎµÄÇÒâ[UÌÇÁyÑíðsÈ¤
  É¾¯g¢Ü·BrootâO[vÌÇÒXgÉüÁÄ¢é[UÍO
  [vÌoÌÇÁâíðsÈ¤±ÆªÅ«Ü·B

  O[vÌpX[hÍ root ©O[vÌÇÒXgÉüÁÄ¢é[U
  ªpasswdR}hðgp·é±ÆÅÏXÅ«Ü·B

  »ÝÌÆ±ëAgpasswdR}hÌIC}jAÍ èÜ¹ñªAp
  [^ÈµÄgpasswdðÀs·é±ÆÅIvVêðmF·é±ÆªÅ
  «Ü·Bt@CÌtH[}bgÆÓ¡ððµÄ¢êÎR}hªÇÌæ¤
  É®ì·éÌ©ðc¬·é±ÆÍÈPÅ·B

  7.5.  êÑ«ð`FbN·évO

  7.5.1.  pwck

  vOpwckÍ/etc/passwdÆ/etc/shadow ÌàeÉêÑ«ª é©Ç¤©
  ð²×é½ßÌàÌÅ·B±ÌvOÍ»ê¼êÌ[U¼ÉÂ¢ÄÈº
  ÌÚð²×Ü·:

  o  tB[hÌª³µ¢©

  o  ¯¶¼OÌ[U¼ª¢È¢©

  o  [UIDAO[vIDª³µ¢©

  o  primary O[vª³µ¢©

  o  z[fBNgª³µ¢©

  o  OCVFª³µ¢©

  Ü½ApX[h³µÌAJEgª êÎxµÜ·B

  Shadow SuiteðCXg[µ½çApwckðÀs·éÆ¢¤ÌÍÇ¢l¦Å
  ·BèúI(½Æ¦ÎAT)ÉÀs·éÌà¢¢Åµå¤B-rIvV
  ðg¦ÎAcronðgÁÄèúIÉÀs³¹AÊð[Åñ³¹é±Æª
  Å«Ü·B

  7.5.2.  grpck

  grpck Í/etc/group Æ /etc/gshadow ÌêÑ«ðmF·évOÅ·B
  ±ÌvOÍÈºÌ`FbNðsÈ¢Ü·:

  o  tB[hÌª³µ¢©

  o  O[v¼Ìd¡ªÈ¢©

  o  o[ÆÇÒÌXgª³µ¢©

  pwckR}h¯lÉA-r IvVðgÁÄ©®IÉÊñð³¹é±Æ
  ªÅ«Ü·B

  7.6.  _CAAbvEpX[h

  _CAAbvEpX[hÍ_CACÌANZXðÂµÄ¢éVXe
  ÌAÊíÌpX[hFØÆÍÊÌhqüÅ·B[J é¢Ílbg
  [NoRÅÚ±Å«é[UÍ½¢é¯êÇ_CACÅÚ±Å«é[
  UÍ§Àµ½¢êÉÍA_CAAbvEpX[hªðÉ§¿Ü·B_C
  AAbvEpX[hðLøÉ·éÉÍA/etc/login.defsðÒWµA
  DIALUPS_CHECK_ENAB ð yes ÉµÜ·B

  _CAAbvÉÂ¢ÄÌÝèÍ2ÂÌt@CÅs¢Ü·BêÂÍ
  /etc/dialupsÅAtty ÌÝèðLqµÜ·B(ñüêÂÉÎµÄês«Af
  oCX¼ÌÅÌ"/dev/"ðæè¢½àÌðLqµÜ·B) tty ª©êÄ
  ¢êÎA_CAAbvÌÚ±ÉÎ·é`FbNªsíêÜ·B

  à¤êÂÌt@CÍ /etc/d_passwd Å·B±Ìt@CÉÍKØÈVF
  ÌpX¼ÆÇÁÌpX[hðLqµÜ·B

  àµA/etc/dialupsÉ©êÄ¢éñü©ç[UªOCµA
  /etc/d_passwd É±Ì[UÌOCVFª©êÄ¢éÈçÎA³µ¢
  pX[hðüÍ·é±ÆÅANZXÂð¾é±ÆªÅ«Ü·B

  _CAAbvEpX[hÍñüÉÁèÌ^Cv(PPPâUUCPÈÇ)ÌÚ±¾
  ¯ð·êÉàLøÉpÅ«Ü·B[Uª¼Ì^CvÌÚ±(á¦Î
  XgÉÚÁÄ¢éVFðg¤)ðs¤êÉÍ±ÌñüÌpX[hðmÁ
  Ä¢éKvª èÜ·B

  _CAAbvEpX[hðg¤OÉÍAOqÌÝèt@Cðì¬·éK
  vª èÜ·B

  R}h dpasswd ðgÁÄ /etc/d_passwdt@CÌVFÉÎ·épX
  [hðÝè·é±ÆªÅ«Ü·BÚµÍIC}jAðQÆµÄ
  ¾³¢B

  8.  CvOð Shadow Suite ÉÎ³¹éû@

  vOÉ shadow T|[gðÁ¦éÌÍÀÛÉÍÆÄàÈPÅ·BâèÍ
  /etc/shadow t@CÉANZX·é½ßÉvOÍroot ÀÅÀs·é
  ©ArootÉ SUID µÄÀsµÈ¯êÎÈçÈ¢±ÆÅ·B

  ±êÍdåÈâèÅ·BSUID ·évOðìéÉÍñíÉTdÉv
  O·éKvª èÜ·Bá¦ÎAVFÉGXP[vÅ«évOÍ
  vOªrootÉ SUID ³êÄ¢ÄàrootÆµÄÀsµÄÍÈèÜ¹ñB

  pX[hÌ`FbNÍ·éªA»êÈOÉÍrootÆµÄ®ì·éKvªÈ¢
  æ¤ÈêÅ shadow T|[gðvOÉÇÁ·éÍ shadow O[v
  É SGID ·éûª¸ÁÆÀSÅ·Bxlock vOÍ±Ìæ¤ÈáÌT^Å
  ·B

  ÈºÅ¦·áÌ pppd-1.2.1d ÍùÉrootÉ SUID ³êÄ¢éÌÅAshadow T
  |[gðÁ¦é±ÆÅAvOªZLeBIÉæèÆãÉÈé±ÆÍ
  àÍâ èÜ¹ñB

  8.1.  wb_t@C

  wb_t@CÍ /usr/include/shadow fBNgàÉ é×«Å
  ·B/usr/include/shadow.h àKvÅ·ªA±êÍ
  /usr/include/shadow/shadow.h ÖÌV{bNNÉÈèÜ·B

  vOÉ shadow T|[gðÁ¦é½ßÉÍÌwb_t@CðCN
  [h·éKvª èÜ·:

  #include <shadow/shadow.h>
  #include <shadow/pwauth.h>

  shadow pÌR[hððRpCÅpÅ«éæ¤ÉRpC½ßðp
  ¢éÌÍÇ¢l¦Å·B(ÈºÌáÅà»¤µÄ¢Ü·B)

  8.2.  libshadow.a Cu

  Shadow Suite ðCXg[·éÉÍ libshadow.a àì¬³êA/usr/lib
  ÉCXg[³êÜ·B

  vOÅ shadow T|[g·é½ßÉÍAJÉ libshadow.a ð
  N·éæ¤Éw¦·éKvª èÜ·B

  ±êÍÈºÌæ¤És¢Ü·:

       gcc program.c -o program -lshadow

  µ©µAÈºÌáÅí©éæ¤ÉåKÍÈvOÅÍåï Makefile ðg
  ¢Ü·©çAÊÍ LIBS ÏðÏXµÜ·B

  8.3.  Shadow \¢Ì

  libshadow.a CuÍ spwd ÆÄÎêé\¢ÌÉ /etc/shadow t@C
  ©çæèoµ½îñði[µÜ·B±êÍ wb_t@C
  /usr/include/shadow/shadow.h É¨¯é spwd Ìè`Å·:

  ______________________________________________________________________
  struct spwd
  {
    char *sp_namp;                /* login name */
    char *sp_pwdp;                /* encrypted password */
    sptime sp_lstchg;             /* date of last change */
    sptime sp_min;                /* minimum number of days between changes */
    sptime sp_max;                /* maximum number of days between changes */
    sptime sp_warn;               /* number of days of warning before password
                                     expires */
    sptime sp_inact;              /* number of days after password expires
                                     until the account becomes unusable. */
    sptime sp_expire;             /* days since 1/1/70 until account expires
  */
    unsigned long sp_flag;        /* reserved for future use */
  };
  ______________________________________________________________________

  Shadow Suite ÅÍ sp_pwdp ÉPÈéGR[h³ê½pX[h¾¯ÅÈ
  A»êÈOÌîñà½¹é±ÆªÅ«Ü·Bá¦ÎApX[htB[
  hªÈºÌæ¤ÈsðÜñÅ¢éêÅ·:

       username:Npge08pfz4wuk;@/sbin/extra:9479:0:10000::::

  ±êÅApX[hÉÁ¦Ä/sbin/extra vOð³çÈéFØÉp¢é
  ±Æðw¦µÄ¢Ü·BÄÑo³ê½vOÍA[U¼ÆÈºÄÑo³
  ê½©ð¦·XCb`ðn³êÜ·BæèÚµ¢îñð¾é½ßÉÍ
  /usr/include/shadow/pwauth.h Æ\[XR[hÉÜÜêé pwauth.c ðÇñ
  Å¾³¢B

  ±êªÓ¡·éÆ±ëÍA2FØÉÓ·é±ÆÆAÀÛÌFØðs¤É
  ÍÖ pwauth ðp¢é×«¾Æ¢¤±ÆÅ·BÈºÌáèÅÍ±êðÀsµ
  Ä¢Ü·B

  »Ý¶ÝµÄ¢évOÌÙÆñÇª±êðsÁÄ¢È¢½ßA Shadow
  SuiteÌìÒÍ«Ìo[WÅÍ±Ì@\ð³·©dlðÏX·é±Æ
  ð¾ÁÄ¢Ü·B

  8.4.  Shadow T|[gÌ½ßÌÖ

  shadow.h t@CÉÍ libshadow.a CuªÜñÅ¢éÖÌÖv
  g^Cvà©êÄ¢Ü·:

  ______________________________________________________________________
  extern void setspent __P ((void));
  extern void endspent __P ((void));
  extern struct spwd *sgetspent __P ((__const char *__string));
  extern struct spwd *fgetspent __P ((FILE *__fp));
  extern struct spwd *getspent __P ((void));
  extern struct spwd *getspnam __P ((__const char *__name));
  extern int putspent __P ((__const struct spwd *__sp, FILE *__fp));
  ______________________________________________________________________

  ±ê©çáèÅp¢éÖÍ getspnam (^¦çê½¼OÉÎ·é spwd \
  ¢Ìð^¦é)Å·B

  8.5.  áè

  ±êÍftHgÅ shadow T|[gðµÄ¢È¢vOð shadow Î
  ³¹éáÅ·B

  ±ÌáÅÍ Point-to-Point vgRT[o(pppd-1.2.1d) ðp¢Ä¢Ü
  ·B±ÌvOÍ PAP â CHAP t@CÅÈ /etc/passwd t@C©
  ç¾½[U¼ÆpX[hðp¢Ä PAP FØðs¤[hðÁÄ¢Ü
  ·BùÉ pppd-2.2.0 Å shadow T|[gªsíêÄ¢éÌÅApppd-2.2.0
  ÉÎµÄáèÌR[hðÇÁ·éKvÍ èÜ¹ñB

  pppd Ì±Ì@\Í ÜègíÈ¢àÌÅ·ªAShadow Suite ðCXg[
  ·éÆpX[hª /etc/passwd ÉÛ³êÈÈé½ßÉA±Ì@\ÍS
  g¦ÈÈÁÄµÜ¢Ü·B

  pppd-1.2.1d Ì[UFØÌªÌR[hÍ
  /usr/src/pppd-1.2.1d/pppd/auth.c t@CÉ èÜ·B

  ÈºÌR[hÍR[hàÌ¼Ì #include ½ßæèàOÉÁ¦éKvª èÜ
  ·Bð½ßÅ #include ðÍñÅ¢Ü·(µ½ªÁÄ shadow T|[g è
  ÅRpC·é¾¯CN[h³êÜ·)B
  ______________________________________________________________________
  #ifdef HAS_SHADOW
  #include <shadow.h>
  #include <shadow/pwauth.h>
  #endif
  ______________________________________________________________________

  ÌªÍÀÛÌR[hÉÎ·éÏX_Å·Bauth.c t@CÉXÉÏXð
  Á¦Ü·B

  ÏXOÌ auth.c:

  ______________________________________________________________________
  /*
   * login - Check the user name and password against the system
   * password database, and login the user if OK.
   *
   * returns:
   *      UPAP_AUTHNAK: Login failed.
   *      UPAP_AUTHACK: Login succeeded.
   * In either case, msg points to an appropriate message.
   */
  static int
  login(user, passwd, msg, msglen)
      char *user;
      char *passwd;
      char **msg;
      int *msglen;
  {
      struct passwd *pw;
      char *epasswd;
      char *tty;

      if ((pw = getpwnam(user)) == NULL) {
          return (UPAP_AUTHNAK);
      }
       /*
       * XXX If no passwd, let them login without one.
       */
      if (pw->pw_passwd == '\0') {
          return (UPAP_AUTHACK);
      }

      epasswd = crypt(passwd, pw->pw_passwd);
      if (strcmp(epasswd, pw->pw_passwd)) {
          return (UPAP_AUTHNAK);
      }

      syslog(LOG_INFO, "user %s logged in", user);

      /*
       * Write a wtmp entry for this user.
       */
      tty = strrchr(devname, '/');
      if (tty == NULL)
          tty = devname;
      else
          tty++;
      logwtmp(tty, user, "");             /* Add wtmp login entry */
      logged_in = TRUE;

      return (UPAP_AUTHACK);
  }
  ______________________________________________________________________

  [UÌpX[hÍ pw->pw_passwd Éãü³êÄ¢éÌÅA±±Ås¤K
  vª éÌÍÖ getspnam ðÇÁ·é±ÆÅ·B±ÌÖÍpX[hð
  spwd->sp_pwdp ÉãüµÜ·B

  ÉAÀÛÌFØðs¤½ßÉÖ pwauth ðÁ¦Ü·B±ÌÖÍ shadow
  t@Cª2FØð·éæ¤ÉÝè³êÄ¢éêÉÍA©®IÉ2FØð
  ÀsµÜ·B

  shadow ðT|[g·éæ¤ÉÏXµ½ãÌauth.c:

  ______________________________________________________________________
  /*
   * login - Check the user name and password against the system
   * password database, and login the user if OK.
   *
   * This function has been modified to support the Linux Shadow Password
   * Suite if USE_SHADOW is defined.
   *
   * returns:
   *      UPAP_AUTHNAK: Login failed.
   *      UPAP_AUTHACK: Login succeeded.
   * In either case, msg points to an appropriate message.
   */
  static int
  login(user, passwd, msg, msglen)
      char *user;
      char *passwd;
      char **msg;
      int *msglen;
  {
      struct passwd *pw;
      char *epasswd;
      char *tty;

  #ifdef USE_SHADOW
      struct spwd *spwd;
      struct spwd *getspnam();
  #endif

      if ((pw = getpwnam(user)) == NULL) {
          return (UPAP_AUTHNAK);
      }

  #ifdef USE_SHADOW
          spwd = getspnam(user);
          if (spwd)
                  pw->pw_passwd = spwd->sp-pwdp;
  #endif

       /*
       * XXX If no passwd, let NOT them login without one.
       */
      if (pw->pw_passwd == '\0') {
          return (UPAP_AUTHNAK);
      }
  #ifdef HAS_SHADOW
      if ((pw->pw_passwd && pw->pw_passwd[0] == '@'
           && pw_auth (pw->pw_passwd+1, pw->pw_name, PW_LOGIN, NULL))
          || !valid (passwd, pw)) {
          return (UPAP_AUTHNAK);
      }
  #else
      epasswd = crypt(passwd, pw->pw_passwd);
      if (strcmp(epasswd, pw->pw_passwd)) {
          return (UPAP_AUTHNAK);
      }
  #endif

      syslog(LOG_INFO, "user %s logged in", user);

      /*
       * Write a wtmp entry for this user.
       */
      tty = strrchr(devname, '/');
      if (tty == NULL)
          tty = devname;
      else
          tty++;
      logwtmp(tty, user, "");             /* Add wtmp login entry */
      logged_in = TRUE;

      return (UPAP_AUTHACK);
  }
  ______________________________________________________________________

  Ó[²×êÎA¼ÉàÏX_ª é±Æªí©èÜ·BIWiÌo[
  WÅÍ/etc/passwdt@CàÉpX[hªÈ¢êÉÍANZXð
  µÜ·B(UPAP_AUTHACK ðßµlÉ·éB)±êÍ ÜèÇÈ¢±ÆÅ·B
  ÊÌOCÅÍ PPP vZXÖÌANZXð·ÉêÂÌAJEg
  ðp¢A»ê©ç /etc/passwd t@CÌ[U¼Æ /etc/shadowt@C
  ÌpX[hðpµÄAüÍ³ê½[U¼ÆpX[hÉÎµÄ PAP F
  Øðs¤©çÅ·B

  ¾©çAàµ³Ìo[Wð[U(á¦Î ppp)ÌVFÆµÄç¹é
  ÆA[U ppp ÅópX[hÉµÄ PAP ðÝèµÄàNà PPP Ú±ð¾
  é±ÆªÅ«ÈÈèÜ·B

  pX[hªóÌÉÍ UPAP_AUTHNAK ÅÈ UPAP_AUTHACKðßµlÆ·é
  æ¤É·é±ÆÅàC³Å«Ü·B

  Ê¢±ÆÉApppd-2.2.0 Éà¯¶âèª èÜ·B

  ÉAÈºÌ2_ÉÂ¢Ä Makefile ðC³·éKvª èÜ·: USE_SHADOW
  ðè`·é±ÆÆAlibshadow.a ðN·éæ¤É·é±ÆÅ·B

  Makefile ðÒWµÄAÌsðÁ¦Ä¾³¢:

       LIBS = -lshadow

  »ê©çAÌsð©Â¯Ä:

       COMPILE_FLAGS = -I.. -D_linux_=1 -DGIDSET_TYPE=gid_t

  ÈºÌæ¤ÉÏXµÄ¾³¢:

       COMPILE_FLAGS = -I.. -D_linux_=1 -DGIDSET_TYPE=gid_t -DUSE_SHADOW

  ÅãÉARpCyÑCXg[ðÀsµÜµå¤B

  9.  æ·©êé¿â(Frequently Asked Questions).

  Q: /etc/securettys t@CðgÁÄ rootªOCÅ«é tty ð§äµ
  æ¤ÆµÄ¢éÌÅ·ªA¤Ü¢«Ü¹ñB

  A: /etc/securettys Í Shadow SuiteªCXg[³ê½ãÉÍSÓ¡ð
  ¿Ü¹ñBrootªpÅ«é tty ðLq·éÝèt@CÍ
  /etc/login.defsÉÈèÜ·B±Ìt@CàÅ¼Ìt@Cðwè·é±Æ
  à èÜ·B

  Q: Shadow SuiteðCXg[µ½ÌÅ·ªAOCªÅ«ÈÈÁÄµ
  Ü¢Üµ½B½ª«¢ÌÅµå¤H

  A: ¨»çShadow SuiteÌvOÍCXg[µ½¯êÇApwconvð
  ÀsµÄ¢È¢©A/etc/npasswdð
  /etc/passwdÉA/etc/nshadowð/etc/shadowÉ»ê¼êRs[·éÌðYêé
  ©µ½ÌÅµå¤Blogin.defsð /etcÉRs[µÄ¢È¢Ì©àµêÜ¹
  ñB

  Q:xlock ÌÍÅ /etc/shadowt@CÌLO[vð shadowÉ¹æÆ è
  Üµ½ªA»Ìæ¤ÈO[vÍ èÜ¹ñBÇ¤µ½çÇ¢ÌÅµå¤©H

  A:O[vðÇÁµÜµå¤BPÉ/etc/groupt@CðÒWµÄAshadow
  O[vÉÂ¢ÄÌLqðÁ¦é¾¯Å·BO[vIDª¼Æd¡µÈ¢æ¤
  É·é_ÆAnogroupÌGg[æèOÉÇÁ·é_ÉÍÓµÄ¾³
  ¢BPÉ xlockð root É SUID ·éÆ¢¤û@à èÜ·B

  Q: Linux Å Shadow Suite ÉÂ¢ÄÌ[OXgÍ èÜ·©H

  A:  èÜ·Bµ©µA±êÍÌo[WÌ LinuxÅShadow Suite ÌJ
  ÆÀeXgÌ½ßÌàÌÅ·B shadow-list-request@neptune.cin.net¶ÉT
  uWFNgª subscribeÅ é[ðé±ÆÅ[OXgÉQÁÅ
  «Ü·B±Ì[OXgÍ LinuxÅshadow-YYMMSSÉÂ¢ÄÌc_ðs
  ¤êÅ·BJÉÁíè½¢© Shadow Suite ðCXg[µ½ÌÅVµ
  ¢[XÉÂ¢ÄÌîñð¾½¢êÉÍQÁ·éÆÇ¢Åµå¤B

  Q:Shadow SuiteðCXg[µÜµ½ªA userdelR}hðÀs·é
  Æ"userdel: cannot open shadow group file"Æ¢¤G[ªoÜ·B½ª¨
  ©µ¢ÌÅµå¤H

  A: Shadow Suite ðSHADOWGRPIvVðLøÉµÄRpCµ½Ì
  ÉA/etc/gshadowt@CªÈ¢ÌÅµå¤Bconfig.hðC³µÄÄRpC
  ·é©A/etc/group t@CðìèÜµå¤Bshadow O[vÌà¾ÌÍ
  àmFµÜµå¤B

  Q: Shadow SuiteðCXg[µÜµ½ªA /etc/passwdÉÃ»³ê½p
  X[hª©êÄµÜ¢Ü·BÇ¤µÄÅ·©H

  A:¨»çconfig.ht@CàÌAUTOSHADOWIvVðLøÉµÄRpC
  µ½©A È½ÌgÁÄ¢élibc ªSAHDOW_COMPATIvVðLøÉµÄ
  RpC³êÄ¢é©Å·BÇ¿çª´ö©mFµÄY·éûðÄRp
  CµÜµå¤B

  10.  Copyright Message(ì \¦)

  The Linux Shadow Password HOWTO is Copyright (c) 1996 Michael H.
  Jackson.

  Permission is granted to make and distribute verbatim copies of this
  document provided the copyright notice and this permission notice are
  preserved on all copies.

  Permission is granted to copy and distribute modified versions of this
  document under the conditions for verbatim copies above, provided a
  notice clearly stating that the document is a modified version is also
  included in the modified document.

  Permission is granted to copy and distribute translations of this
  document into another language, under the conditions specified above
  for modified versions.

  Permission is granted to convert this document into another media
  under the conditions specified above for modified versions provided
  the requirement to acknowledge the source document is fulfilled by
  inclusion of an obvious reference to the source document in the new
  media. Where there is any doubt as to what defines 'obvious' the
  copyright owner reserves the right to decide.

  Ó: ÈºÌaóÍ ÜÅQlÅ·Bì ÉÂ¢ÄÍ´¶Ì\¦É]ÁÄ
  ¾³¢B

  The Linux Shadow Password HOWTO Í Michael H. Jackson Ìì¨Å·B
  (Copyright (c) 1996 Michael H. Jackson)

  ì \¦yÑ±Ìø\¦ðSÄÌRs[Éc·±ÆððÉA±Ì¶ð
  üÏ¹¸É¡ÊyÑzz·é±ÆªÂ\Å·B

  ãLÌððüÏµÈ¢±ÆyÑ¶ªüÏ³êÄ¢é±Æ¾L·é±Æðð
  ÉA±Ì¶ðüÏµ½àÌð¡ÊyÑzz·é±ÆªÂ\Å·B

  ãqÌüÏ³ê½¶ÉÎ·éðÆ¯¶ðÅA±Ì¶ð¼Ì¾êÉ|ó
  µ½àÌð¡ÊyÑzz·é±ÆªÂ\Å·B

  ãqÌüÏ³ê½¶ÉÎ·éðÉÁ¦AVµ¢fBAàÉ³Ì¶ÖÌ
  ¾ÈQÆªÜÜêé±ÆÅ³Ì¶Å é±Æðå£·évªÊ½³êé
  ±ÆððÉA±Ì¶ð¼ÌfBAÅzz·é±ÆªÂ\Å·Bu¾
  ÉvÌè`ªÍÁ«èµÈ¢êÉÍì Òªè·é ðÛ¯µÄ¢é
  àÌÆµÜ·B

  11.  »Ì¼ / Ó«

  áèÌ auth.c ÉÎµÄÌR[hÍ pppd-1.2.1d Æ ppp-2.1.0e ©çøpµ
  Üµ½B±êçÌ\tgEFAÍ Australian National University yÑ
  Carnegie Mellon University Ìì¨Å·B (Copyright (c) 1993 and The
  Australian National University and Copyright (c) 1989 Carnegie Mellon
  University)

  Thanks to Marek Michalkiewicz <marekm@i17linuxb.ists.pwr.wroc.pl> for
  writing and maintaining the Shadow Suite for Linux, and for his review
  and comments on this document.

  Shadow SuiteÌìÒ/ÇÒÅ èAÜ½A±Ì¶ð©ÄRgðº³Á
  ½ Marek Michalkiewicz  <marekm@i17linuxb.ists.pwr.wroc.pl> É´Óµ
  Ü·B

  ±Ì¶Ìá]yÑeXgðsÁÄº³Á½ Ron Tidd <rtidd@tscnet.com>
  É´ÓµÜ·B

  MÒÉtB[hobNðèA±Ì¶ÌüÇÉ¦ÍµÄ¾³Á½FlÉ´
  ÓµÜ·B

  RgâñÄª êÎÇ¤©MÒÉ[Åmç¹Ä¾³¢B

  Michael H. Jackson <mhjack@tscnet.com>

  12.  óÒæè

  |óÌzzðÍ´¶É]¤àÌÆµÜ·BÜ½|óÌàeÉÂ¢ÄÍóÒÍ
  êØÌÓCðÄÜ¹ñÌÅAF³ñÌÓCÅpµÄ¾³¢B

  ëóÈÇÌwEâóÉÎ·éRgð¨Ò¿µÄ¢Ü·B¨CyÉ[
  ¾³¢B

  ¡´PÃ <fujiwara@linux.or.jp>