Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20120217210904.GD11326@openwall.com>
Date: Sat, 18 Feb 2012 01:09:04 +0400
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Cc: Salazar Aleman Pablo Cesar <pablo.salazar@...o.com>
Subject: Re: Run john on HP-UX 11i v2 Trusted System

Hi,

On Wed, Feb 15, 2012 at 10:55:10AM -0600, Salazar Aleman Pablo Cesar wrote:
> I need to run John on a System HP-Ux 11i v2 on Trusted.
> 
> What is the command line?

Please note that you don't actually have to run John on HP-UX - you may
instead take the password hashes from your HP-UX system and run John on
them on another machine (easier to use and/or faster).  Of course, this
may be a security risk (if that other machine is compromised).

To compile John on HP-UX, use one of these commands (in the "src"
directory):

make clean hpux-pa-risc-gcc
make clean hpux-pa-risc-cc
make clean generic

Normally, the first or/and the second one of these should work,
depending on which C compiler you have installed (yes, you'll need to
install one if you want to run John on HP-UX - which you don't have to
as I explained above).  "generic" is an alternative in case the above
commands fail; it uses gcc.  Please report any failures in here in case
there's a portability issue for us to fix.

These hpux* targets have been tested on much older HP-UX systems,
though (e.g., I only have 10.20 on a 712/80, and I haven't powered that
machine on in some years now).  They're 32-bit only (better performance
may be achieved with 64-bit, but someone will need to define a proper
make target; I don't have access to a 64-bit PA-RISC machine).

Since your system is "trusted", it probably keeps password hashes in
separate files.  I have the following commands written down:

umask 077
cat /tcb/files/auth/?/* > shadow

Then you'll need to run JtR's "unshadow" program on /etc/passwd and the
shadow file obtained above.  "unshadow" is HP-UX aware, it contains
these checks:

	/* DU / Tru64 C2, HP-UX tcb */
	if (!strncmp(passwd, "u_name=", 7)) {
		if ((passwd = strstr(passwd, ":u_pwd=")))
			passwd += 7;
	} else
	/* HP-UX tcb */
	if (!strncmp(passwd, "u_pwd=", 6) && entry) {
		passwd += 6;
		if ((tail = strchr(passwd, ':')))
			*tail = 0;
		(*entry)->passwd = str_alloc_copy(passwd);
		return;
	}

which I hope is still right for recent HP-UX systems.

Note that you don't have to run "unshadow" right on the HP-UX system.
You may as well run it e.g. on a Linux system where you'll be running
John itself.  This will avoid the need for having a C compiler installed
on HP-UX.

Please let us (the john-users list) know of your results.  BTW, you
don't appear to be subscribed, and on john-users replies are normally
sent to the list only - so you might miss some.

I hope this helps.

Alexander

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.