Uniform password management method for server

Abstract

The invention provides a uniform password management method for a server. The uniform password management method comprises the following steps of storing a password of an operation system under a / etc / shadow route; utilizing dec_setpent(void) to read files under the / etc / shadow route, storing into a buffer, reading the id (identification) number of cpu (central processing unit) under the current operating environment, and judging whether the file in the buffer is a ciphered file or not; when the file in the buffer is the ciphered file, using the obtained id number of the cpu as a key to decrypt, and outputting the decrypted content into the buffer; utilizing getspnam(char*usernam) to read the data of the designated administration; judging whether the content in the buffer is an open file or not; when the content in the buffer is the open file, reading the id number of the hardware cpu under the current operating environment, utilizing the obtained id number of the cpu as a key to encrypt the open file, outputting the encrypted content into the buffer, and writing under the / etc / shadow route. The uniform password management method has the advantage that on the basis of no change ofexisting process, no influence to use and no influence to version upgrading, the whole content of the file is encrypted by a symmetric encrypting method, so that the security storage class is improved, and the stealing of the password is prevented.

Description

technical field [0001] The invention relates to the technical field of server management, in particular to a unified password management method for servers. Background technique [0002] There are operating system users and passwords in the existing server, and other independently developed services such as: users and passwords of license management, users and passwords of application programs, users and passwords of UI interface, and a unified password management system using the operating system At the same time, there is a problem that the password is stolen and cracked. [0003] like figure 1 As shown, the existing password management methods are as follows: [0004] First, manage the operating system password and store the password under / etc / shadow. Among them, the password storage location / etc / shadow [0005] The format is as follows: [0006] webuser: [0007] $6$X9iEgIhv$wGtrUhjiNRp72LgCTzC1qdi.myfSU9S5nqsfr.m1KInUFoeOUBN73AmMy5sTe91biJLdHgsoimZQzeD9EvGlv1:16...

AI Technical Summary

Problems solved by technology

Since the content of this file is in plain text, the second area {encrypted password and password} is fixed by the algorithm, and the attacker can forcibly crack it after obtaining it, thus causing password leakage

Images