Re: [ilug-goa] md5 Uncertainity in GRUB

[Andrew Suares]

hi Ashutosh,

This is not a bug...Have u locked an entry in grub.conf? Once the entry
is locked, u need to input the pass which is the hash from MD5-crypt. The pass 
goes through a one way hash & wont be used for integrity checks....


---------------begin--------------

timeout=2
--> password --md5 $1$toZsA0$1QEtDIPIF2qBxe.SbW7jn0 //input hash here
splashimage=(hd0,4)/boot/grub/splash.xpm.gz

title Red Hat GNU/Linux 9.0 (2.4.20-8)
        root (hd0,4)
        kernel /boot/vmlinuz-2.4.20-8 ro root=LABEL=/ hdb=ide-scsi
        initrd /boot/initrd-2.4.20-8.img
-->     lock                                     //lock an OS entry

---------------end-----------------



rgds,
@ndrew









On Sun, 2004-01-11 at 13:56, Ashutosh Naik wrote:
> Hi,
> 
> I am running GNU GRUB ver 0.92 on Red Hat 8.0
> 
> When I use the md5crypt command to encrypt a password,
> I get different strings everytime.
> 
> grub> md5crypt
> 
> Password: ********
> Encrypted: $1$GDrrA0$w2I13OL9zS4h5bLqX05vY1
> 
> grub> md5crypt
> 
> Password: ********
> Encrypted: $1$VGrrA0$qAsIzN.0w/L1oJzMfJZdY/
> 
> The password string in both cases was entered
> 'ashutosh'
> 
> Its obivious that now, when I insert the following 
> line in the grub configuration file, /etc/grub.conf
> 
> password --md5 $1$GDrrA0$w2I13OL9zS4h5bLqX05vY1
> 
> It wont(and doesnt) work.. As the password I enter
> hashes to a different string every time.
> 
> Whats the use of entering a md5 hash in the
> configuration file anyway then ?
> And how do I get over this problem, in case I have
> overlooked anything ?
> 
> Regards and Thanks
> 
> Ashutosh
> 
> 
> 
> __________________________________
> Do you Yahoo!?
> Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
> http://hotjobs.sweepstakes.yahoo.com/signingbonus
> 
> To Post a message, send it to:   address@hidden
> To Unsubscribe, send a blank message to: address@hidden 
> 
> ------------------------ Yahoo! Groups Sponsor ---------------------~-->
> Upgrade to 128-bit SSL Security!
> http://us.click.yahoo.com/qZ0LdD/yjVHAA/TtwFAA/0XFolB/TM
> ---------------------------------------------------------------------~->
> 
> Yahoo! Groups Links
> 
> To visit your group on the web, go to:
>  http://groups.yahoo.com/group/ilug-goa/
> 
> To unsubscribe from this group, send an email to:
>  address@hidden
> 
> Your use of Yahoo! Groups is subject to:
>  http://docs.yahoo.com/info/terms/


www.ilug-margao.org -- Margao
Gnu/Linux Users Group

signature.asc
Description: This is a digitally signed message part