Problem with passwd and ssh

[geekmaster]

Originally Posted by knc1

True, but so what? Just as long as the user knows what the clear text password is.

So... converting from DES to MD5 will add to the fionaXXX vs. fionaXXXX confusion. But it is up to the user to KNOW (and remember) that he changed his password, in which case it is not a problem.

[aditya3098]

Tried the copy paste, and my linux box's (ubuntu) root password is the same as my kindle. It did NOT work.

[geekmaster]

Originally Posted by aditya3098

Tried the copy paste, and my linux box's (ubuntu) root password is the same as my kindle. It did NOT work.

Ubuntu might be using a password hash not compatible with the kindle. Although MD5 and crypt hashes are common, it *could* be stored as SHA-1. Does the hash start with $1$ (i.e. MD5)?

You can copy a hash from the /etc/shadow- backup, or from the shadow on the diags partition (but you need to mount it first).

[knc1]

Originally Posted by aditya3098

Tried the copy paste, and my linux box's (ubuntu) root password is the same as my kindle. It did NOT work.

Must be un-disclosed user error.

[aditya3098]

No user error, and the ubuntu hash for the password was three times the size of the kindle hash for the same password.

[geekmaster]

Originally Posted by aditya3098

No user error, and the ubuntu hash for the password was three times the size of the kindle hash for the same password.

Does it start with $1$ ???

If not, that hash algorithm may not be supported by kindles.

[aditya3098]

Originally Posted by geekmaster

Does it start with $1$ ???

If not, that hash algorithm may not be supported by kindles.

It does not. Any other way I could get the hash?

[geekmaster]

Originally Posted by aditya3098

It does not. Any other way I could get the hash?

Your hash may be SHA-256 or other "not kindle friendly" hash algorithm.

Here are the different has types:
http://openwall.info/wiki/john/sample-hashes

The kindle supports DES (the short hash) and MD5 (the $1$ hash).

This tells how to generate passwd hashes using various encryptions:
http://dietrichschroff.blogspot.com/...passwords.html

If MD5 is okay, just use the kindle "passwd" command...

[knc1]

Originally Posted by aditya3098

It does not. Any other way I could get the hash?

Ah, so - the undisclosed part - the type of password hash on your Ubuntu box that you copied.

[NiLuJe]

@aditya3098: What does the permissions look like on your new $HOME? OpenSSH can be pissy about perms with the default config, especially on the root account. (If I remember correctly, it musn't be world writeable, possibly world readable either. [EDIT: And possibly group rw either, my /root are usually chmod 700]).

Like hawhill said, the only way to be sure is to run the daemon in debug mode on the foreground (use a custom port to launch a second daemon), and a very verbose client.

You also might want to rip the dropbear or openssh binary from my K4 usbnet packages, it's patched the same way as on the K3 to accept wrong passwords and be a little less anal about perms.

[aditya3098]

Chmodded the home to 700. Still no luck. Trying the other methods.

[NiLuJe]

With a bit of luck, it's simply that it doesn't support a home directory on vfat for one reason or another...

EDIT: Except you're testing /home, and not the user store :-! I'm going to sleep, that'll probably help avoiding me saying stupid things :-D

[aditya3098]

Did anyone manage to get telnetd to run on this. If that does not use shadow, I don't really need the security behind my firewall, and what will anyone DO with my kindle anyway? It's not 3g.

[knc1]

Originally Posted by aditya3098

Did anyone manage to get telnetd to run on this. If that does not use shadow, I don't really need the security behind my firewall, and what will anyone DO with my kindle anyway? It's not 3g.

Was telnetd included in the Busybox build on your version of the firmware?
/bin/busybox
should return the list of enabled features.

[aditya3098]

No telnet