3. Getting the Shadow Suite.

3.1 Where to get the Shadow Suite.

The original Shadow Suite was written by John F. Haugh II.

There are several versions that can be used on a Linux system:

• shadow-3.3.1 is the original
• shadow-3.3.1-2 is Linux specific patch made by Florian La Roche (flla@stud.uni-sb.de) and contains some further enhancements
• shadow-mk is specifically packaged for Linux and is the recommended package.

The shadow-mk package contains the shadow-3.3.1 package distributed by John F. Haugh II with the shadow-3.3.1-2 patch installed, a few fixes made by Mohan Kokal <magnus@texas.net> that make installation a lot easier, a patch by Joseph R.M. Zbiciak for login1.c (login.secure) that eliminates the -f, -h security holes in /bin/login, and some other miscellaneous patches.

The shadow.mk package may be obtained from: ftp://sunsite.unc.edu/pub/Linux/system/Admin/shadow-mk1.tar.gz

When this document refers to the Shadow Suite I am refering to the shadow-mk package. It is also assumed that this is the package used. The Shadow-3.3.1-2 can be used, but there are a lot more steps to correctly configure it for Linux.

3.2 What is included with the Shadow Suite.

The shadow package contains replacement programs for:

su, login, passwd, newgrp, chfn, chsh, and id

The package also contains the new programs:

chage, newusers, dpasswd, gpasswd, useradd, userdel, usermod, groupadd, groupdel, groupmod, groups, pwck, grpck, lastlog, pwconv, and pwunconv

Additionally, the library: libshadow.a is included for writing and/or compiling programs that need to access user passwords.

Also, manual pages for the programs are also included.