Re: Logging usernames/passwords

Andre Fortin writes:
 > Hello,
 > 
 > I'm looking at a way to log usernames/passwords in plain text.  The reason
 > for this is that we are moving away from a local passwd database, and have
 > no way to copy this DB to the planned format.  If anyone has any better
 > suggestions, I'm up for it, but i think the best, plainest way would be to
 > log successful logins(with usernames/passwords before crypt()) and dump the
 > info into a file on the local machine, which we could then parse and use to
 > enter data into our new db.  Thanks in advance,

Yup.  Probably the easiest way to do is is create a checkpassword
which logs and then fails, and also use Andreas's multichkpwds:

<LI><img src="new.gif" alt="new" width=31 height=12
date="200205250"><a name="200205250">Andreas Aardal Hanssen has a way
to run <a
href="http://andreas.hanssen.name/software/multichkpwds.c">multiple
checkpasswords</a></a> and authenticate against one, and if that
fails, then the other.  If none succeed, it returns failure.



-- 
-russ nelson              http://russnelson.com | I don't want to give up
Crynwr sells support for free software  | PGPok | essential liberty to obtain
521 Pleasant Valley Rd. | +1 315 268 1925 voice | a little temporary safety.
Potsdam, NY 13676-3213  | +1 315 268 9201 FAX   | Is anyone listening to me?