<HTML ><HEAD ><TITLE >$B%f!<%6G'>Z$r0BA4$K9T$&J}K!(B</TITLE ><META NAME="GENERATOR" CONTENT="Modular DocBook HTML Stylesheet Version 1.54"><LINK REL="HOME" TITLE="User Authentication HOWTO" HREF="index.html"><LINK REL="PREVIOUS" TITLE="PAM (Pluggable Authentication Modules)" HREF="pam.html"><LINK REL="NEXT" TITLE="$B3hMQNc(B" HREF="apache.html"></HEAD ><BODY CLASS="SECT1" BGCOLOR="#FFFFFF" TEXT="#000000" ><DIV CLASS="NAVHEADER" ><TABLE WIDTH="100%" BORDER="0" CELLPADDING="0" CELLSPACING="0" ><TR ><TH COLSPAN="3" ALIGN="center" >User Authentication HOWTO</TH ></TR ><TR ><TD WIDTH="10%" ALIGN="left" VALIGN="bottom" ><A HREF="pam.html" >Prev</A ></TD ><TD WIDTH="80%" ALIGN="center" VALIGN="bottom" ></TD ><TD WIDTH="10%" ALIGN="right" VALIGN="bottom" ><A HREF="apache.html" >Next</A ></TD ></TR ></TABLE ><HR ALIGN="LEFT" WIDTH="100%"></DIV ><DIV CLASS="SECT1" ><H1 CLASS="SECT1" ><A NAME="SECURE" >4. $B%f!<%6G'>Z$r0BA4$K9T$&J}K!(B</A ></H1 ><P >$BB?$/$N%G%#%9%H%j%S%e!<%7%g%s$G$O!"%f!<%6G'>Z$K$D$$$F=<J,0BA4$J@_Dj$,$J$5$l(B $B$J$$$^$^=P2Y$5$l$F$$$^$9!#$3$N>O$G$O!"%7%9%F%`>e$G$N%f!<%6G'>Z$r0BA4$K$9$k(B $BJ}K!$r$$$/$D$+<h$j>e$2$^$9!#$?$@!"$=$l$i$r<B9T$9$l$P%7%9%F%`$O$h$j0BA4$J$b(B $B$N$K$J$j$^$9$,!"$=$l$G%;%-%e%j%F%#$,40`z$K$J$C$?$J$I$H$O7h$7$F;W$o$J$$$G$/(B $B$@$5$$!#(B</P ><DIV CLASS="SECT2" ><H2 CLASS="SECT2" ><A NAME="AEN293" >4.1. $B6/NO$J(B <TT CLASS="FILENAME" >/etc/pam.d/other</TT > $B%U%!%$%k(B</A ></H2 ><P ><TT CLASS="FILENAME" >/etc/pam.d</TT > $B$K$"$k%U%!%$%k$OA4$F!"FCDj$N(B $B%5!<%S%9$K4X$9$k@_Dj$r$9$k$?$a$N$b$N$G$9!#$3$N%k!<%k$KBP$9$kCmL\$9$Y$-Nc30$,!"(B <TT CLASS="FILENAME" >/etc/pam.d/other</TT > $B%U%!%$%k$G$9!#(B $B$3$N%U%!%$%k$O!"<+J,<+?H$N@_Dj%U%!%$%k$r;}$?$J$$%5!<%S%9A4It$N@_Dj$r$9$k(B $B$b$N$G$9!#Nc$($P!"(B($B<B:]$OB8:_$7$^$;$s$,(B) xyz $B$H$$$&%5!<%S%9$,%f!<%6(B $BG'>Z$r$7$h$&$H$7$?>l9g!"(BPAM $B$O(B <TT CLASS="FILENAME" >/etc/pam.d/xyz</TT > $B$H$$$&(B $B%U%!%$%k$rC5$7$^$9!#$=$l$,8+$D$+$i$J$$$H!"G'>Z$O(B <TT CLASS="FILENAME" >/etc/pam.d/other</TT > $B%U%!%$%k$K=>$C$F$J$5$l$^$9!#(B<TT CLASS="FILENAME" >/etc/pam.d/other</TT > $B%U%!%$%k$O(B PAM $B%5!<%S%9$N:G8e$N5r$j=j$H$J$C$F$$$k$N$G!"$=$N0BA4@-$O=EMW$J0UL#(B $B$r;}$A$^$9!#$3$3$G$O(B <TT CLASS="FILENAME" >/etc/pam.d/other</TT > $B%U%!%$%k$r0BA4$K@_Dj(B $B$9$kFs<oN`$NJ}K!$K$D$$$F=R$Y$^$9!#$R$H$D$O!"$[$H$s$IJP<9E*$J$b$N$G!"$b$&$R$H$D(B $B$O$b$C$H0lHLE*$J$b$N$G$9!#(B</P ><DIV CLASS="SECT3" ><H3 CLASS="SECT3" ><A NAME="AEN303" >4.1.1. $BJP<968$N@_Dj(B</A ></H3 ><P ><TT CLASS="FILENAME" >/etc/pam.d/other</TT > $B$NJP<9E*$J@_Dj$O0J2<$N$h$&$K$J$j(B $B$^$9!#(B</P ><TABLE BORDER="0" BGCOLOR="#E0E0E0" WIDTH="100%" ><TR ><TD ><PRE CLASS="PROGRAMLISTING" > auth required pam_deny.so auth required pam_warn.so account required pam_deny.so account required pam_warn.so password required pam_deny.so password required pam_warn.so session required pam_deny.so session required pam_warn.so </PRE ></TD ></TR ></TABLE ><P >$B>e5-$N@_Dj$K$7$F$*$1$P!"ITL@$J%5!<%S%9$,@_Dj%U%!%$%k$N(B 4 $B$D$N7?$N$$$:$l$K%"%/(B $B%;%9$7$h$&$H$9$k>l9g$G$b!"(BPAM $B$O(B(<TT CLASS="FILENAME" >pam_deny.so</TT > $B%b%8%e!<%k$r(B $B2p$7$F(B)$BG'>Z$r5q@d$7!"(B(<TT CLASS="FILENAME" >pam_warn.so</TT > $B%b%8%e!<%k$r2p$7$F(B)$B%7%9(B $B%F%`%m%0$K7Y9p$r;D$7$^$9!#(B PAM $B$K$O%P%0$,$[$H$s$I$J$$$N$G!"$3$N@_Dj$ONd9s$H$b8@$($k0BA4@-$rH/4x$7$^$9!#(B $B$3$NNd9s$5$NLdBjE@$O!"$b$7$?$^$?$^B>$N%5!<%S%9$N@_Dj$r:o=|$7$F$7$^$C$?>l9g$K(B $BLdBj$,5/$-$k$+$b$7$l$J$$$H$$$&$3$H$G$9!#(B<TT CLASS="FILENAME" >/etc/pam.d/login</TT > $B%U%!%$%k$r4V0c$C$F:o=|$7$F$7$^$&$H!"C/$b%m%0%$%s$G$-$J$/$J$C$F$7$^$$$^$9!#(B</P ></DIV ><DIV CLASS="SECT3" ><H3 CLASS="SECT3" ><A NAME="AEN312" >4.1.2. $B$b$&>/$7?F@Z$J@_Dj(B</A ></H3 ><P >$B0J2<$N@_Dj$O!"$b$&>/$7$*$*$i$+$J$b$N$G$9!#(B</P ><TABLE BORDER="0" BGCOLOR="#E0E0E0" WIDTH="100%" ><TR ><TD ><PRE CLASS="PROGRAMLISTING" > auth required pam_unix.so auth required pam_warn.so account required pam_unix.so account required pam_warn.so password required pam_deny.so password required pam_warn.so session required pam_unix.so session required pam_warn.so </PRE ></TD ></TR ></TABLE ><P >$B$3$N@_Dj$G$O!"ITL@$J%5!<%S%9$KBP$7$F$b(B(<TT CLASS="FILENAME" >pam_unix.so</TT > $B%b%8%e!<%k$r2p$7$F(B)$BG'>Z$r5v$7$^$9$,!"%f!<%6%Q%9%o!<%I$rJQ99$9$k$3$H$O5v2D(B $B$7$^$;$s!#$=$NG'>Z$O5v$9$o$1$G$9$,!"$=$&$7$?%5!<%S%9$,G'>Z$r$7$h$&$H$7$?:]$K(B $BI,$:%7%9%F%`%m%0$K7Y9p$r;D$7$^$9!#(B</P ></DIV ><DIV CLASS="SECT3" ><H3 CLASS="SECT3" ><A NAME="AEN318" >4.1.3. <TT CLASS="FILENAME" >/etc/pam.d/other</TT > $B$N=EMW@-(B</A ></H3 ><P >$BFCJL$JM}M3$,$J$$8B$j!"(B<TT CLASS="FILENAME" >/etc/pam.d/other</TT > $B$OA4$F$K@hN)$C$F<B(B $BAu$9$k$3$H$r6/$/$*A&$a$7$^$9!#!V%G%U%)%k%H$G0BA44s$j$K?6$k!W$3$H$O!"$I$s$J>l9g(B $B$G$bNI$$$3$H$G$9!#?7$?$J%5!<%S%9$KG'>Z$N8"8B$rM?$($kI,MW$,$G$-$?$H$7$F$b!"$=$N(B $B%5!<%S%9$K$D$$$F(B PAM $B$N@_Dj%U%!%$%k$r?7$?$K:n$l$P$$$$$@$1$G$9!#(B</P ></DIV ></DIV ><DIV CLASS="SECT2" ><H2 CLASS="SECT2" ><A NAME="AEN323" >4.2. $B%Q%9%o!<%IL5$7%f!<%6$N%m%0%$%s$r6X;_$9$k(B</A ></H2 ><P >$BBgItJ,$N(B Linux $B%7%9%F%`$G$O!"(Bftp $B$d(B webserver, mail $B%2!<%H%&%'%$$J$I$"$k<o$N(B $B%7%9%F%`%5!<%S%9$K8"8B$rM?$($k$?$a$K!"!V%@%_!<!W$N%f!<%6%"%+%&%s%H$,$$$/$D$+(B $BB8:_$7$^$9!#3N$+$K!"%"%+%&%s%H$,>h$C<h$i$l$F$b!"%"%?%C%+!<$O%k!<%H8"8B$G<B9T$5(B $B$l$F$$$k%5!<%S%9$G$O$J$/%@%_!<%"%+%&%s%H$KIUM?$5$l$?8BDjE*$J8"8B$7$+F~<j$G$-(B $B$J$$$N$G$9$+$i!"$3$&$7$?%"%+%&%s%H$,$"$k$H%7%9%F%`$O$h$j0BA4$K$J$k$H8@$($J$/$b(B $B$"$j$^$;$s!#$7$+$7!"$3$&$7$?%@%_!<%"%+%&%s%H$O%Q%9%o!<%I$J$7(B(null)$B$G%m%0%$%s(B $B$G$-$F$7$^$&>l9g$,IaDL$J$N$G!"$=$&$7$?%m%0%$%s$N8"8B$rM?$($k$3$H$O!"$R$H$D$N(B $B%;%-%e%j%F%#!<%j%9%/$H$J$j$^$9!#%Q%9%o!<%I$J$7$G%m%0%$%s$r5v$9@_Dj%*%W%7%g%s(B $B$O!"(B"nullok" $B$H$$$&%b%8%e!<%k0z?t(B(module-argument)$B$G$9!#%m%0%$%s(B $B$r5v2D$9$k%5!<%S%9$K$D$$$F$O!"$=$N(B "<SPAN CLASS="TOKEN" >auth</SPAN >" $B%?%$%W$N(B $BA4$F$N%b%8%e!<%k$+$i$3$N0z?t$r:o=|$9$k$h$&$K$9$Y$-$G$7$g$&!#(B $B$=$&$7$?%5!<%S%9$H$O!"DL>o(B <B CLASS="COMMAND" >login</B > $B%5!<%S%9$N$3$H$G$9$,!"(B <B CLASS="COMMAND" >rlogin</B > $B$d(B <B CLASS="COMMAND" >ssh</B > $B$J$I$b4^$^$l$k$+$b$7$l$^$;(B $B$s!#$=$&$9$k$H!"(B<TT CLASS="FILENAME" >/etc/pam.d/login</TT > $B$N<!$N9T$O!"(B</P ><TABLE BORDER="0" BGCOLOR="#E0E0E0" WIDTH="100%" ><TR ><TD ><PRE CLASS="PROGRAMLISTING" > auth required pam_unix.so nullok </PRE ></TD ></TR ></TABLE ><P >$B0J2<$N$h$&$KJQ99$5$l$k$Y$-$G$9!#(B</P ><TABLE BORDER="0" BGCOLOR="#E0E0E0" WIDTH="100%" ><TR ><TD ><PRE CLASS="PROGRAMLISTING" > auth required pam_unix.so </PRE ></TD ></TR ></TABLE ></DIV ><DIV CLASS="SECT2" ><H2 CLASS="SECT2" ><A NAME="AEN334" >4.3. $BITMW$J%5!<%S%9$rL58z$K$9$k(B</A ></H2 ><P ><TT CLASS="FILENAME" >/etc/pam.d</TT > $B$K$"$k%U%!%$%k$r8+$k$H!"$$$/(B $B$D$+$N;H$o$J$$%W%m%0%i%`MQ$N@_Dj%U%!%$%k$d!"$"$k$$$OJ9$$$?$3$H$b$J$$%W%m%0%i%`(B $BMQ$N%U%!%$%k$J$I$,$"$k$H;W$$$^$9!#(B $B$3$&$7$?%5!<%S%9$X$NG'>Z$r5v$7$?$H$7$F$b$*$=$i$/Bg$-$J%;%-%e%j%F%#%[!<%k$K$O(B $B$J$i$J$$$G$7$g$&$,!"$d$O$j$=$l$i$O6X;_$7$?$[$&$,$$$$$G$7$g$&!#$=$&$7$?%W%m%0(B $B%i%`$KBP$7$F(B PAM $B$,G'>Z$G$-$J$$$h$&$K$9$k:GNI$NJ}K!$O!"$=$&$7$?%U%!%$%k$N(B $B%U%!%$%kL>$rJQ99$9$k$3$H$G$9!#G'>Z$rMW5a$9$k%W%m%0%i%`$HF1$8%U%!%$%kL>$N@_Dj(B $B%U%!%$%k$,8+$D$+$i$J$$$N$G!"(BPAM $B$O(B <TT CLASS="FILENAME" >/etc/pam.d/other</TT > $B$H$$$&(B ($B$*$=$i$/(B)$BHs>o$K0BA4$J@_Dj%U%!%$%k$r:G=*E*$K;HMQ$7$^$9!#8e$[$I$=$&$7$?%W%m%0%i(B $B%`$,I,MW$K$J$C$?>l9g$O!"%U%!%$%kL>$r85$KLa$9$@$1$G$9$Y$F$,0U?^$7$?DL$j$KF0$/$o(B $B$1$G$9!#(B</P ></DIV ><DIV CLASS="SECT2" ><H2 CLASS="SECT2" ><A NAME="AEN339" >4.4. $B%Q%9%o!<%I%/%i%C%-%s%0%D!<%k(B</A ></H2 ><P >$B%Q%9%o!<%I%/%i%C%-%s%0%D!<%k$O!"%"%?%C%+!<$K$H$C$F$O%7%9%F%`$r<eBN2=$5$;$k(B $BL\E*$G;HMQ$5$l$^$9$,!"%7%9%F%`4IM}<T$K$H$C$F$O!"%7%9%F%`$N%Q%9%o!<%I$N6/$5$r(B $B3NG'$9$k$?$a$N@Q6KL\E*$NF;6q$H$7$FMxMQ$9$k$3$H$b2DG=$G$9!#:G$b9-$/;HMQ$5$l$F(B $B$$$k%Q%9%o!<%I%/%i%C%-%s%0%D!<%k$O$U$?$D$"$j!"$=$l$>$l(B "crack" $B$H(B "John the Ripper" $B$G$9!#(B crack $B$O$*$=$i$/FI<T$N9%$-$J%G%#%9%H%j%S%e!<%7%g%s$K$9$G$K(B $BF1:-$5$l$F$$$k$G$7$g$&!#(BJohn the Ripper $B$O!"(B<A HREF="http://www.false.com/security/john/index.html" TARGET="_top" >http://www.false.com/security/john/index.html</A >$B$GF~<j$G$-$^$9!#$=$N(B $B%D!<%k$r%Q%9%o!<%I%G!<%?%Y!<%9$KBP$7$F<B9T$9$l$P!"I=<($5$l$?7k2L$r8+$F(B $B$*$=$i$/6C$$$F$7$^$&$G$7$g$&!#(B</P ><P >$B2C$($F!"%f!<%6%Q%9%o!<%I$rJQ99$9$k$?$S$K$=$N6/EY$r(B crack $B$N%i%$%V%i%j$r;H$C$F(B $B8!>Z$9$k(B PAM $B$N%b%8%e!<%k$b$"$j$^$9!#$3$N%b%8%e!<%k$r%$%s%9%H!<%k$9$k$H!"(B $B%f!<%6$O!":GDc8BEY$N6/EY$r;}$D%Q%9%o!<%I$X$NJQ99$G$J$$8B$j4{B8$N%Q%9%o!<%I$r(B $BJQ99$G$-$J$/$J$j$^$9!#(B</P ></DIV ><DIV CLASS="SECT2" ><H2 CLASS="SECT2" ><A NAME="AEN344" >4.5. $B%7%c%I%&%Q%9%o!<%I$H(B MD5 $B%Q%9%o!<%I(B</A ></H2 ><P >$B$3$NJ8=q$NBhFs>O$G<h$j>e$2$?$h$&$K!"%7%c%I%&%Q%9%o!<%I$H(B MD5 $B%Q%9%o!<%I$r(B $B;H$&$H%7%9%F%`$r$b$C$H0BA4$K$9$k$3$H$,$G$-$^$9!#:G6a$N%G%#%9%H%j%S%e!<%7%g%s(B $B$G$O!"%$%s%9%H!<%k$N2aDx$G(B MD5 $B$d(B $B%7%c%I%&%Q%9%o!<%I$r%$%s%9%H!<%k$9$k$+$I$&(B $B$+?R$M$k$h$&$K$J$C$F$$$^$9!#5qH]$9$Y$-FCJL$NM}M3$,$J$$8B$j!"$=$l$i$rM-8z$K(B $B$9$k$Y$-$G$9!#%7%c%I%&$d(B MD5 $B$r;H$o$J$$%Q%9%o!<%I$+$i$=$l$i$X$NJQ49$N<jB3$-$O(B $BHs>o$K9~$_F~$C$F$$$k$N$G!"$3$NJ8=q$NHOaF$r1[$($^$9!#<!$NJ8=q$O?7$7$/$O$J$$(B $B$G$9$,!"B?>/$OLr$KN)$D$+$b$7$l$^$;$s!#(B <A HREF="http://www.linuxdoc.org/HOWTO/Shadow-Password-HOWTO.html" TARGET="_top" >Shadow Password HOWTO</A >(<A HREF="http://www.linux.or.jp/JF/JFdocs/Shadow-Password-HOWTO.html" TARGET="_top" >$BF|K\8lLu(B</A >)</P ></DIV ></DIV ><DIV CLASS="NAVFOOTER" ><HR ALIGN="LEFT" WIDTH="100%"><TABLE WIDTH="100%" BORDER="0" CELLPADDING="0" CELLSPACING="0" ><TR ><TD WIDTH="33%" ALIGN="left" VALIGN="top" ><A HREF="pam.html" >Prev</A ></TD ><TD WIDTH="34%" ALIGN="center" VALIGN="top" ><A HREF="index.html" >Home</A ></TD ><TD WIDTH="33%" ALIGN="right" VALIGN="top" ><A HREF="apache.html" >Next</A ></TD ></TR ><TR ><TD WIDTH="33%" ALIGN="left" VALIGN="top" >PAM (Pluggable Authentication Modules)</TD ><TD WIDTH="34%" ALIGN="center" VALIGN="top" > </TD ><TD WIDTH="33%" ALIGN="right" VALIGN="top" >$B3hMQNc(B</TD ></TR ></TABLE ></DIV ></BODY ></HTML >