How to check password with C2 Security.

From: Michael H. Martel <martelm_at_quark.vsc.edu>
Date: Wed, 14 Apr 1999 13:44:32 -0400

Hello!

I'm trying to modify the IMSPD package from CMU to work under DU 4.0D with
Enhanced Security. The problem is that imspd isn't getting the password
from the system properly. The section of code looks somewhat like this
(this is my modified version for testing) :

#include <stdio.h>
#include <stdlib.h>
#include <pwd.h>

int main( int argc, char **argv ){
        struct passwd *pwd;
        int res;

        pwd = getpwnam( argv[1]);
        if (!pwd) return 1;

        if( strcmp(pwd->pw_passwd, crypt(argv[2],pwd->pw_passwd)) != 0){
                printf("Wrong Password!\n");
                return(1);
        }
        return 0;
}

This appears to work, but returns * which is what is stored in etc/passwd.
I think I need to use sia to do this. Has anybody done this before or can
point me at a good reference ? I'll summarize for all interested.

Thanks!



Michael

-- 
  -------------------------------o--------------------------------
  Michael H. Martel              | Vermont State Colleges        
  mailto:martelm_at_quark.vsc.edu   | Technical Support Specialist
  http://probe.vsc.edu/~michael  | PH:802-241-2535 FX:802-241-3363

Received on Wed Apr 14 1999 - 21:03:37 NZST