Part of Slepp's Projects — Pastebin — TURL — Imagebin — Filebin
Feedback -- English French German Japanese
Create Upload Newest Tools Donate

Paste Actions

Download Raw
Embed
Post to Twitter
Remove Paste

Paste Details

Raw format, 9 years 10 months old.

Advertising

Anonym
Tuesday, March 4th, 2008 at 11:26:02am UTC 

  1. -- SSH LOGIN - ENTER USERNAME --
  2. Mar  4 13:11:26 PDC slapd[4206]: conn=12 op=1 SRCH base="dc=example,dc=net" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=spiekey))"
  3. Mar  4 13:11:26 PDC slapd[4206]: conn=12 op=1 SRCH attr=uid userPassword uidNumber gidNumber cn homeDirectory loginShell gecos description objectClass
  4.  
  5. -> Look in base="dc=example,dc=net" for a Object that matches the filter="(&(objectClass=posixAccount)(uid=spiekey))
  6. => Now we have uid, userPassword (Hash), uidNumber, gidNumber, etc... from the OpenLDAP Database
  7.  
  8. -- SSH LOGIN - ASK FOR PASSWORD --
  9. Mar  4 13:11:32 PDC slapd[4206]: conn=13 op=1 SRCH base="dc=example,dc=net" scope=2 deref=0 filter="(uid=spiekey)"
  10. Mar  4 13:11:32 PDC slapd[4206]: conn=12 op=2 SRCH base="dc=example,dc=net" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=spiekey))"
  11. Mar  4 13:11:32 PDC slapd[4206]: conn=12 op=3 SRCH base="dc=example,dc=net" scope=2 deref=0 filter="(&(objectClass=posixGroup)(|(memberUid=spiekey)(uniqueMember=uid=spiekey,ou=users,dc=example,dc=net)))"
  12. Mar  4 13:11:32 PDC slapd[4206]: conn=12 op=3 SRCH attr=gidNumber
  13. Mar  4 13:11:32 PDC slapd[4206]: conn=12 op=4 SRCH base="dc=example,dc=net" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=spiekey))"
  14. Mar  4 13:11:32 PDC slapd[4206]: conn=12 op=4 SRCH attr=uid userPassword uidNumber gidNumber cn homeDirectory loginShell gecos description objectClass
  15. Mar  4 13:11:32 PDC slapd[4206]: conn=12 op=5 SRCH base="dc=example,dc=net" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uidNumber=10000))"
  16. Mar  4 13:11:32 PDC slapd[4206]: conn=12 op=5 SRCH attr=uid userPassword uidNumber gidNumber cn homeDirectory loginShell gecos description objectClass
  17. Mar  4 13:11:32 PDC slapd[4206]: conn=12 op=6 SRCH base="dc=example,dc=net" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=spiekey))"
  18. Mar  4 13:11:32 PDC slapd[4206]: conn=12 op=6 SRCH attr=uid userPassword uidNumber gidNumber cn homeDirectory loginShell gecos description objectClass
  19. Mar  4 13:11:32 PDC slapd[4206]: conn=14 op=1 SRCH base="dc=example,dc=net" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uidNumber=10000))"
  20. Mar  4 13:11:32 PDC slapd[4206]: conn=14 op=1 SRCH attr=uid userPassword uidNumber gidNumber cn homeDirectory loginShell gecos description objectClass
  21. Mar  4 13:11:32 PDC slapd[4206]: conn=15 op=1 SRCH base="dc=example,dc=net" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uidNumber=10000))"
  22. Mar  4 13:11:32 PDC slapd[4206]: conn=15 op=1 SRCH attr=uid userPassword uidNumber gidNumber cn homeDirectory loginShell gecos description objectClass
  23. Mar  4 13:11:32 PDC slapd[4206]: conn=15 op=2 SRCH base="dc=example,dc=net" scope=2 deref=0 filter="(&(objectClass=posixGroup)(gidNumber=513))"
  24. Mar  4 13:11:32 PDC slapd[4206]: conn=15 op=2 SRCH attr=cn userPassword memberUid uniqueMember gidNumber
  25. => Now we have the GroupID, Groupname, etc... from the OpenLDAP Database
  26.  
  27. Compare <Entered Userpassword-Hash> with <userPassword (Hash)> from OpenLDAP Database
  28.  
  29. If it matches we are in!

advertising

Update the Post

Either update this post and resubmit it with changes, or make a new post.

You may also comment on this post.

update paste below
details of the post (optional)

Note: Only the paste content is required, though the following information can be useful to others.

Save name / title?

(space separated, optional)



Please note that information posted here will not expire by default. If you do not want it to expire, please set the expiry time above. If it is set to expire, web search engines will not be allowed to index it prior to it expiring. Items that are not marked to expire will be indexable by search engines. Be careful with your passwords. All illegal activities will be reported and any information will be handed over to the authorities, so be good.

comments powered by Disqus
worth-right
worth-right