Blank Password (Solaris 10)

UNIX Solaris
1

Hello, I have a doubt about the accounts.

With a "grep" to file "shadow" get the accounts have no password:

The output is:

However, if I do a "su <bin, sys, etc>" request password.

What is the true state of accounts?

The file "shadow" are as follows:

I appreciate any response.

Greetings.

Musul.

2

They're not available to be logged into. The only thing that uses them would be system daemons, which switch to it from root with setuid/seteuid type system calls, bypassing the login step entirely.

su's not going to just tell you which accounts are unavailable though!

3

OK, thank for answer.
I dont have security risk with the state "NP" of the default accounts ?
Is recomended change state of the default accounts from "NP" to LK ?

(if is necesary, I make other thread)

Thanks!!

Musul.

4

You've seen for yourself. You can't login to them.

5

To be more precise: You can't login to them using a password.
What you still can is:

  • root can use su to change to that user
  • authorized users can use sudo (if installed) to change to that user
  • if configured, users can login to that user using ssh with a public/private key
  • the user can have cronjobs and run services

NP-users are best suited for running services.

LK-users can't have cronjobs and it is not possible to login to them with a public/private key.