Has anyone used JTR or CRACK to check if you have any weak passwords on your Red Hat Servers? If so can I ask some basic questions? Or would this question be better pitched in another area of the Forum, if so please suggest where, if anyone is willing to help me in this forum please let me know...
Is simple use John the Ripper to check.
You can download the program in John the Ripper password cracker
After of install, run the john as root:
#john /etc/shadow
The broken passwords are saves in /root/.john
You too can add word lists in the configuration file /etc/john/john.conf
Eduardo Novochadlo.