{"id":478970,"date":"2023-08-09T09:41:04","date_gmt":"2023-08-09T09:41:04","guid":{"rendered":""},"modified":"2023-09-05T11:17:55","modified_gmt":"2023-09-05T11:17:55","slug":"shadow-password-files","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/cn\/wiki\/shadow-password-files\/","title":{"rendered":"\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6"},"content":{"rendered":"<p>\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u662f\u73b0\u4ee3\u64cd\u4f5c\u7cfb\u7edf\u7684\u91cd\u8981\u7ec4\u6210\u90e8\u5206\uff0c\u5728\u4fdd\u62a4\u7528\u6237\u51ed\u636e\u65b9\u9762\u53d1\u6325\u7740\u81f3\u5173\u91cd\u8981\u7684\u4f5c\u7528\u3002\u8fd9\u4e9b\u6587\u4ef6\u4e0e\u4e3b\u5bc6\u7801\u6587\u4ef6\u5206\u5f00\u5b58\u50a8\u5bc6\u7801\u76f8\u5173\u4fe1\u606f\uff0c\u63d0\u4f9b\u989d\u5916\u7684\u4fdd\u62a4\u5c42\uff0c\u9632\u6b62\u672a\u7ecf\u6388\u6743\u7684\u8bbf\u95ee\u548c\u6f5c\u5728\u7684\u5b89\u5168\u6f0f\u6d1e\u3002\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u7684\u6982\u5ff5\u6e90\u4e8e\u589e\u5f3a\u7528\u6237\u5e10\u6237\u4fe1\u606f\u5b89\u5168\u6027\u7684\u9700\u8981\uff0c\u5e76\u5df2\u6210\u4e3a\u5404\u79cd\u57fa\u4e8e Unix \u7684\u64cd\u4f5c\u7cfb\u7edf\u7684\u6807\u51c6\u505a\u6cd5\u3002<\/p>\n<h2>\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u7684\u8d77\u6e90\u5386\u53f2\u53ca\u5176\u9996\u6b21\u63d0\u53ca<\/h2>\n<p>\u5c06\u5bc6\u7801\u4fe1\u606f\u4e0e\u4e3b\u5bc6\u7801\u6587\u4ef6\u5206\u79bb\u7684\u60f3\u6cd5\u53ef\u4ee5\u8ffd\u6eaf\u5230 20 \u4e16\u7eaa 70 \u5e74\u4ee3 Unix \u5f00\u53d1\u7684\u65e9\u671f\u3002\u968f\u7740 Unix \u7cfb\u7edf\u7684\u6d41\u884c\uff0c\u5728\u4e3b\u5bc6\u7801\u6587\u4ef6 (\/etc\/passwd) \u4e2d\u5b58\u50a8\u5bc6\u7801\u54c8\u5e0c\u503c\u663e\u7136\u4f1a\u5e26\u6765\u4e25\u91cd\u7684\u5b89\u5168\u9690\u60a3\u3002\u5982\u679c\u653b\u51fb\u8005\u83b7\u5f97\u4e86\u5bc6\u7801\u6587\u4ef6\u7684\u8bbf\u95ee\u6743\u9650\uff0c\u4ed6\u4eec\u5c31\u53ef\u4ee5\u8f7b\u677e\u8bbf\u95ee\u5e76\u5c1d\u8bd5\u7834\u89e3\u5bc6\u7801\uff0c\u4ece\u800c\u5371\u53ca\u7528\u6237\u5e10\u6237\u5e76\u53ef\u80fd\u9020\u6210\u4e25\u91cd\u635f\u5bb3\u3002<\/p>\n<p>\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u7684\u7b2c\u4e00\u4e2a\u5b9e\u73b0\u5f52\u529f\u4e8e Sun Microsystems\uff0c\u8be5\u516c\u53f8\u5728 1988 \u5e74\u53d1\u5e03\u7684 SunOS 4.1.1 \u64cd\u4f5c\u7cfb\u7edf\u4e2d\u5f15\u5165\u4e86\u8fd9\u4e00\u6982\u5ff5\u3002\u8fd9\u9879\u521b\u65b0\u6807\u5fd7\u7740\u57fa\u4e8e Unix \u7684\u7cfb\u7edf\u9886\u57df\u5411\u524d\u8fc8\u51fa\u4e86\u91cd\u8981\u4e00\u6b65\uff0c\u56e0\u4e3a\u5b83\u6709\u6548\u5730\u89e3\u8026\u4e86\u6765\u81ea\u7cfb\u7edf\u5176\u4f59\u90e8\u5206\u7684\u654f\u611f\u5bc6\u7801\u4fe1\u606f\u3002<\/p>\n<h2>\u6709\u5173\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u7684\u8be6\u7ec6\u4fe1\u606f\u3002\u5c55\u5f00\u4e3b\u9898\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u3002<\/h2>\n<p>\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u53ef\u5145\u5f53\u4e00\u9053\u4fdd\u62a4\u5c4f\u969c\uff0c\u4f7f\u5173\u952e\u7684\u7528\u6237\u8eab\u4efd\u9a8c\u8bc1\u4fe1\u606f\u65e0\u6cd5\u88ab\u6f5c\u5728\u653b\u51fb\u8005\u83b7\u53d6\u3002\u5f71\u5b50\u6587\u4ef6\u4e0d\u4f1a\u5c06\u5bc6\u7801\u54c8\u5e0c\u5b58\u50a8\u5728\u4e3b\u5bc6\u7801\u6587\u4ef6\u4e2d\uff0c\u800c\u662f\u5c06\u8fd9\u4e9b\u54c8\u5e0c\u5b58\u50a8\u5728\u5355\u72ec\u7684\u4f4d\u7f6e\uff0c\u5728\u57fa\u4e8e Unix \u7684\u7cfb\u7edf\u4e0a\u901a\u5e38\u662f\u201c\/etc\/shadow\u201d\u3002\u8fd9\u79cd\u5206\u79bb\u786e\u4fdd\u5373\u4f7f\u672a\u7ecf\u6388\u6743\u7684\u7528\u6237\u83b7\u5f97\u5bc6\u7801\u6587\u4ef6\u7684\u8bbf\u95ee\u6743\u9650\uff0c\u4ed6\u4eec\u4e5f\u65e0\u6cd5\u7acb\u5373\u8bbf\u95ee\u54c8\u5e0c\u5bc6\u7801\uff0c\u4ece\u800c\u5927\u5927\u589e\u52a0\u4e86\u7834\u89e3\u5bc6\u7801\u7684\u96be\u5ea6\u3002<\/p>\n<p>\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u4e2d\u901a\u5e38\u5305\u542b\u4ee5\u4e0b\u4fe1\u606f\uff1a<\/p>\n<ol>\n<li>\u7528\u6237\u540d\uff1a\u4e0e\u5e10\u6237\u5173\u8054\u7684\u7528\u6237\u540d\u3002<\/li>\n<li>\u54c8\u5e0c\u5bc6\u7801\uff1a\u7528\u6237\u5bc6\u7801\u7684\u52a0\u76d0\u54c8\u5e0c\uff0c\u786e\u4fdd\u539f\u59cb\u5bc6\u7801\u4fdd\u6301\u9690\u85cf\u3002<\/li>\n<li>\u5bc6\u7801\u65f6\u6548\uff1a\u6709\u5173\u5bc6\u7801\u8fc7\u671f\u3001\u6700\u77ed\u548c\u6700\u957f\u5bc6\u7801\u671f\u9650\u4ee5\u53ca\u8b66\u544a\u671f\u9650\u7684\u8be6\u7ec6\u4fe1\u606f\u3002<\/li>\n<li>\u5e10\u6237\u9501\u5b9a\uff1a\u6709\u5173\u5e10\u6237\u9501\u5b9a\u7684\u4fe1\u606f\uff0c\u4f8b\u5982\u8ddd\u79bb\u4e0a\u6b21\u66f4\u6539\u5bc6\u7801\u7684\u5929\u6570\u3001\u5e10\u6237\u88ab\u9501\u5b9a\u7684\u5929\u6570\u7b49\u3002<\/li>\n<li>\u5e10\u6237\u505c\u7528\uff1a\u6709\u5173\u5e10\u6237\u72b6\u6001\u7684\u4fe1\u606f\uff0c\u65e0\u8bba\u662f\u6d3b\u52a8\u8fd8\u662f\u975e\u6d3b\u52a8\u3002<\/li>\n<\/ol>\n<h2>\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u7684\u5185\u90e8\u7ed3\u6784\u3002\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u7684\u5de5\u4f5c\u539f\u7406\u3002<\/h2>\n<p>\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u901a\u5e38\u5177\u6709\u7ed3\u6784\u5316\u683c\u5f0f\uff0c\u4f46\u4e0d\u540c\u7684\u57fa\u4e8e Unix \u7684\u7cfb\u7edf\u4e4b\u95f4\u7684\u786e\u5207\u7ed3\u6784\u53ef\u80fd\u7565\u6709\u4e0d\u540c\u3002\u4e0b\u9762\u662f\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u5185\u90e8\u7ed3\u6784\u7684\u7b80\u5316\u8868\u793a\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th>\u573a\u5730<\/th>\n<th>\u63cf\u8ff0<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u7528\u6237\u540d<\/td>\n<td>\u7528\u6237\u5e10\u6237\u7684\u540d\u79f0\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u54c8\u5e0c\u5bc6\u7801<\/td>\n<td>\u7528\u6237\u5bc6\u7801\u7684\u52a0\u76d0\u54c8\u5e0c\u503c\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u4e0a\u6b21\u5bc6\u7801\u66f4\u6539<\/td>\n<td>\u81ea 1970 \u5e74 1 \u6708 1 \u65e5\u4ee5\u6765\u4e0a\u6b21\u66f4\u6539\u5bc6\u7801\u4ee5\u6765\u7684\u5929\u6570\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u6700\u77ed\u5bc6\u7801\u671f\u9650<\/td>\n<td>\u7528\u6237\u518d\u6b21\u66f4\u6539\u5bc6\u7801\u4e4b\u524d\u5fc5\u987b\u7ecf\u8fc7\u7684\u6700\u77ed\u5929\u6570\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5bc6\u7801\u6700\u957f\u671f\u9650<\/td>\n<td>\u7528\u6237\u5fc5\u987b\u66f4\u6539\u5bc6\u7801\u4e4b\u524d\u7684\u6700\u5927\u5929\u6570\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5bc6\u7801\u8fc7\u671f\u8b66\u544a<\/td>\n<td>\u5bc6\u7801\u8fc7\u671f\u4e4b\u524d\u8b66\u544a\u7528\u6237\u66f4\u6539\u5bc6\u7801\u7684\u5929\u6570\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5e10\u6237\u4e0d\u6d3b\u52a8\u671f<\/td>\n<td>\u5bc6\u7801\u8fc7\u671f\u540e\u5e10\u6237\u56e0\u4e0d\u6d3b\u52a8\u800c\u88ab\u9501\u5b9a\u4e4b\u524d\u7684\u5929\u6570\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u5e10\u6237\u5230\u671f\u65e5\u671f<\/td>\n<td>\u5e10\u6237\u88ab\u9501\u5b9a\u4e14\u65e0\u6cd5\u8bbf\u95ee\u7684\u65e5\u671f\uff08\u81ea 1970 \u5e74 1 \u6708 1 \u65e5\u4ee5\u6765\u7684\u5929\u6570\uff09\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u4fdd\u7559\u5b57\u6bb5<\/td>\n<td>\u8be5\u5b57\u6bb5\u4fdd\u7559\u4f9b\u5c06\u6765\u4f7f\u7528\uff0c\u5e76\u4e14\u5728\u5f53\u524d\u5b9e\u73b0\u4e2d\u901a\u5e38\u8bbe\u7f6e\u4e3a\u201c0\u201d\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u5f53\u7528\u6237\u5c1d\u8bd5\u767b\u5f55\u65f6\uff0c\u7cfb\u7edf\u4f1a\u68c0\u67e5\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u4ee5\u9a8c\u8bc1\u8f93\u5165\u7684\u5bc6\u7801\u3002\u7cfb\u7edf\u83b7\u53d6\u63d0\u4f9b\u7684\u5bc6\u7801\uff0c\u5e94\u7528\u4e0e\u521d\u59cb\u5bc6\u7801\u521b\u5efa\u671f\u95f4\u4f7f\u7528\u7684\u76f8\u540c\u7684\u54c8\u5e0c\u7b97\u6cd5\u548c\u76d0\uff0c\u7136\u540e\u5c06\u751f\u6210\u7684\u54c8\u5e0c\u503c\u4e0e\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u4e2d\u5b58\u50a8\u7684\u54c8\u5e0c\u503c\u8fdb\u884c\u6bd4\u8f83\u3002\u5982\u679c\u4e24\u4e2a\u54c8\u5e0c\u503c\u5339\u914d\uff0c\u5219\u6388\u4e88\u7528\u6237\u8bbf\u95ee\u6743\u9650\uff1b\u5426\u5219\uff0c\u767b\u5f55\u5c1d\u8bd5\u5931\u8d25\u3002<\/p>\n<h2>\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u7684\u5173\u952e\u7279\u5f81\u5206\u6790<\/h2>\n<p>\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u63d0\u4f9b\u4e86\u51e0\u4e2a\u5173\u952e\u529f\u80fd\uff0c\u53ef\u4ee5\u589e\u5f3a\u57fa\u4e8e Unix \u7684\u7cfb\u7edf\u4e0a\u7528\u6237\u5e10\u6237\u7684\u5b89\u5168\u6027\u548c\u7ba1\u7406\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u589e\u5f3a\u5b89\u5168\u6027<\/strong>\uff1a\u901a\u8fc7\u5c06\u5bc6\u7801\u54c8\u5e0c\u5b58\u50a8\u5728\u5355\u72ec\u7684\u6587\u4ef6\u4e2d\uff0c\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u53ef\u4ee5\u6700\u5927\u9650\u5ea6\u5730\u964d\u4f4e\u672a\u7ecf\u6388\u6743\u8bbf\u95ee\u654f\u611f\u7528\u6237\u51ed\u636e\u7684\u98ce\u9669\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u52a0\u76d0\u5bc6\u7801\u54c8\u5e0c<\/strong>\uff1a\u4f7f\u7528\u52a0\u76d0\u5bc6\u7801\u54c8\u5e0c\u589e\u52a0\u4e86\u989d\u5916\u7684\u5b89\u5168\u5c42\uff0c\u4f7f\u653b\u51fb\u8005\u5f88\u96be\u4f7f\u7528\u9884\u5148\u8ba1\u7b97\u7684\u8868\uff08\u4f8b\u5982\u5f69\u8679\u8868\uff09\u6765\u7834\u89e3\u5bc6\u7801\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u5bc6\u7801\u65f6\u6548<\/strong>\uff1a\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u652f\u6301\u5bc6\u7801\u8001\u5316\uff0c\u5141\u8bb8\u7cfb\u7edf\u7ba1\u7406\u5458\u5f3a\u5236\u5b9a\u671f\u66f4\u6539\u5bc6\u7801\uff0c\u964d\u4f4e\u957f\u671f\u5bc6\u7801\u6cc4\u9732\u7684\u98ce\u9669\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u8d26\u6237\u9501\u5b9a<\/strong>\uff1a\u81ea\u52a8\u9501\u5b9a\u4e0d\u6d3b\u52a8\u5e10\u6237\u7684\u529f\u80fd\u6709\u52a9\u4e8e\u9632\u6b62\u5bf9\u4f11\u7720\u7528\u6237\u5e10\u6237\u7684\u672a\u7ecf\u6388\u6743\u7684\u8bbf\u95ee\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u7981\u6b62\u8fdb\u5165<\/strong>\uff1a\u5bf9\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u7684\u8bbf\u95ee\u901a\u5e38\u4ec5\u9650\u4e8e\u7279\u6743\u7528\u6237\uff0c\u4ece\u800c\u51cf\u5c11\u4e86\u610f\u5916\u6216\u6545\u610f\u7be1\u6539\u7684\u53ef\u80fd\u6027\u3002<\/p>\n<\/li>\n<\/ol>\n<p>\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u6709\u4e0d\u540c\u7684\u7c7b\u578b\uff0c\u5177\u4f53\u5b9e\u65bd\u7ec6\u8282\u53ca\u5176\u6240\u4f7f\u7528\u7684\u64cd\u4f5c\u7cfb\u7edf\u5404\u4e0d\u76f8\u540c\u3002\u4ee5\u4e0b\u662f\u4e0d\u540c\u7c7b\u578b\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u7684\u4e00\u4e9b\u793a\u4f8b\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th>\u7c7b\u578b<\/th>\n<th>\u63cf\u8ff0<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u4f20\u7edf Unix \u5f71\u5b50\u6587\u4ef6<\/td>\n<td>\u65e9\u671f Unix \u7cfb\u7edf\u4e2d\u4f7f\u7528\u7684\u539f\u59cb\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u683c\u5f0f\u3002<\/td>\n<\/tr>\n<tr>\n<td>BSD \u98ce\u683c\u7684\u5f71\u5b50\u6587\u4ef6<\/td>\n<td>\u8fd9\u79cd\u683c\u5f0f\u5728\u57fa\u4e8e BSD \u7684\u7cfb\u7edf\u4e2d\u5f15\u5165\uff0c\u901a\u8fc7\u9644\u52a0\u5b57\u6bb5\u6269\u5c55\u4e86\u4f20\u7edf\u7684 Unix Shadow \u6587\u4ef6\u3002<\/td>\n<\/tr>\n<tr>\n<td>Linux \u4e0a\u7684\u5f71\u5b50\u6587\u4ef6<\/td>\n<td>\u57fa\u4e8e Linux \u7684\u53d1\u884c\u7248\u4f7f\u7528\u7684\u683c\u5f0f\uff0c\u7c7b\u4f3c\u4e8e BSD \u98ce\u683c\u7684\u683c\u5f0f\uff0c\u4f46\u6709\u4e00\u4e9b\u53d8\u5316\u3002<\/td>\n<\/tr>\n<tr>\n<td>AIX \u4e0a\u7684\u5f71\u5b50\u6587\u4ef6<\/td>\n<td>AIX\uff08Advanced Interactive eXecutive\uff09\u64cd\u4f5c\u7cfb\u7edf\u5bf9\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u7684\u5b9e\u73b0\u3002<\/td>\n<\/tr>\n<tr>\n<td>Solaris \u4e0a\u7684\u5f71\u5b50\u6587\u4ef6<\/td>\n<td>Oracle Solaris \u64cd\u4f5c\u7cfb\u7edf\u4e2d\u4f7f\u7528\u7684\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u683c\u5f0f\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u6bcf\u79cd\u7c7b\u578b\u90fd\u6709\u5176\u7279\u5b9a\u7684\u7ea6\u5b9a\u548c\u6269\u5c55\uff0c\u4f46\u5b83\u4eec\u90fd\u5177\u6709\u76f8\u540c\u7684\u76ee\u7684\uff0c\u5373\u589e\u5f3a\u5404\u81ea\u7cfb\u7edf\u4e0a\u7684\u5bc6\u7801\u5b89\u5168\u6027\u3002<\/p>\n<h2>Shadow\u5bc6\u7801\u6587\u4ef6\u7684\u4f7f\u7528\u65b9\u6cd5\u3001\u4f7f\u7528\u4e2d\u51fa\u73b0\u7684\u95ee\u9898\u53ca\u89e3\u51b3\u65b9\u6cd5<\/h2>\n<p>\u4f7f\u7528\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u5e26\u6765\u4e86\u4e00\u4e9b\u597d\u5904\uff0c\u4f46\u4e5f\u5e26\u6765\u4e86\u4e00\u4e9b\u6311\u6218\u548c\u6f5c\u5728\u7684\u95ee\u9898\u3002\u8ba9\u6211\u4eec\u63a2\u8ba8\u4e00\u4e0b\u8fd9\u51e0\u4e2a\u65b9\u9762\uff1a<\/p>\n<h3>\u4f7f\u7528\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u7684\u597d\u5904\uff1a<\/h3>\n<ol>\n<li>\n<p><strong>\u589e\u5f3a\u5b89\u5168\u6027<\/strong>\uff1a\u4f7f\u7528\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u7684\u4e3b\u8981\u4f18\u70b9\u662f\u5b83\u4eec\u63d0\u4f9b\u7684\u6539\u8fdb\u7684\u5b89\u5168\u6027\u3002\u901a\u8fc7\u5c06\u5bc6\u7801\u6563\u5217\u4e0e\u4e3b\u5bc6\u7801\u6587\u4ef6\u5206\u79bb\uff0c\u53ef\u4ee5\u663e\u7740\u964d\u4f4e\u672a\u7ecf\u6388\u6743\u8bbf\u95ee\u654f\u611f\u51ed\u636e\u7684\u98ce\u9669\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u5bc6\u7801\u65f6\u6548\u7b56\u7565<\/strong>\uff1a\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u5141\u8bb8\u7ba1\u7406\u5458\u5f3a\u5236\u6267\u884c\u5bc6\u7801\u65f6\u6548\u7b56\u7565\uff0c\u786e\u4fdd\u7528\u6237\u5b9a\u671f\u66f4\u6539\u5bc6\u7801\u3002\u8fd9\u79cd\u505a\u6cd5\u6709\u52a9\u4e8e\u964d\u4f4e\u4e0e\u957f\u671f\u4f7f\u7528\u672a\u66f4\u6539\u7684\u5bc6\u7801\u76f8\u5173\u7684\u98ce\u9669\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u8d26\u6237\u9501\u5b9a<\/strong>\uff1a\u5728\u4e00\u5b9a\u65f6\u95f4\u4e0d\u6d3b\u52a8\u540e\u6216\u5728\u6307\u5b9a\u6b21\u6570\u7684\u767b\u5f55\u5c1d\u8bd5\u5931\u8d25\u540e\u9501\u5b9a\u5e10\u6237\u7684\u529f\u80fd\u53ef\u589e\u5f3a\u5b89\u5168\u6027\u5e76\u964d\u4f4e\u66b4\u529b\u653b\u51fb\u6210\u529f\u7684\u53ef\u80fd\u6027\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u8bbf\u95ee\u6743\u9650\u6709\u9650<\/strong>\uff1a\u5bf9\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u7684\u8bbf\u95ee\u901a\u5e38\u4ec5\u9650\u4e8e\u7279\u6743\u7528\u6237\uff0c\u4ee5\u9632\u6b62\u672a\u7ecf\u6388\u6743\u7684\u7be1\u6539\u5e76\u51cf\u5c11\u6f5c\u5728\u7684\u5b89\u5168\u6f0f\u6d1e\u3002<\/p>\n<\/li>\n<\/ol>\n<h3>\u6311\u6218\u548c\u89e3\u51b3\u65b9\u6848\uff1a<\/h3>\n<ol>\n<li>\n<p><strong>\u517c\u5bb9\u6027\u95ee\u9898<\/strong>\uff1a\u4e0d\u540c\u7684\u64cd\u4f5c\u7cfb\u7edf\u53ef\u80fd\u4f7f\u7528\u4e0d\u540c\u7684\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u683c\u5f0f\uff0c\u8fd9\u4f1a\u5bfc\u81f4\u5728\u7cfb\u7edf\u4e4b\u95f4\u8fc1\u79fb\u7528\u6237\u5e10\u6237\u65f6\u51fa\u73b0\u517c\u5bb9\u6027\u95ee\u9898\u3002\u53ef\u4ee5\u4f7f\u7528\u901a\u7528\u683c\u5f0f\u6216\u5f00\u53d1\u8fc1\u79fb\u671f\u95f4\u6570\u636e\u8f6c\u6362\u811a\u672c\u6765\u7f13\u89e3\u6b64\u95ee\u9898\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6587\u4ef6\u6743\u9650<\/strong>\uff1a\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u7684\u6587\u4ef6\u6743\u9650\u4e0d\u8db3\u53ef\u80fd\u4f1a\u5c06\u654f\u611f\u4fe1\u606f\u66b4\u9732\u7ed9\u672a\u7ecf\u6388\u6743\u7684\u7528\u6237\u3002\u7ba1\u7406\u5458\u5e94\u786e\u4fdd\u8bbe\u7f6e\u9002\u5f53\u7684\u6743\u9650\u6765\u9650\u5236\u8bbf\u95ee\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u7ef4\u62a4\u590d\u6742\u6027<\/strong>\uff1a\u5904\u7406\u5bc6\u7801\u65f6\u6548\u7b56\u7565\u548c\u7ba1\u7406\u5e10\u6237\u9501\u5b9a\u4f1a\u589e\u52a0\u7528\u6237\u7ba1\u7406\u7684\u590d\u6742\u6027\u3002\u901a\u8fc7\u7cfb\u7edf\u5de5\u5177\u6216\u811a\u672c\u81ea\u52a8\u5316\u8fd9\u4e9b\u8fc7\u7a0b\u53ef\u4ee5\u51cf\u8f7b\u7ba1\u7406\u4efb\u52a1\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u5b89\u5168\u6f0f\u6d1e<\/strong>\uff1a\u867d\u7136\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u63d0\u9ad8\u4e86\u5b89\u5168\u6027\uff0c\u4f46\u5b83\u4eec\u5e76\u975e\u4e07\u65e0\u4e00\u5931\u3002\u5177\u6709 root \u6743\u9650\u7684\u575a\u5b9a\u653b\u51fb\u8005\u4ecd\u7136\u53ef\u4ee5\u8bbf\u95ee\u5e76\u53ef\u80fd\u64cd\u7eb5\u8fd9\u4e9b\u6587\u4ef6\u3002\u4e3a\u4e86\u89e3\u51b3\u8fd9\u4e2a\u95ee\u9898\uff0c\u5e94\u8be5\u91c7\u53d6\u5f3a\u6709\u529b\u7684\u6574\u4f53\u7cfb\u7edf\u5b89\u5168\u63aa\u65bd\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u4ee5\u8868\u683c\u548c\u5217\u8868\u7684\u5f62\u5f0f\u5217\u51fa\u4e3b\u8981\u7279\u5f81\u4ee5\u53ca\u4e0e\u7c7b\u4f3c\u672f\u8bed\u7684\u5176\u4ed6\u6bd4\u8f83\u3002<\/h2>\n<p>\u4ee5\u4e0b\u662f\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u4e0e\u7528\u6237\u8eab\u4efd\u9a8c\u8bc1\u548c\u5bc6\u7801\u5b89\u5168\u76f8\u5173\u7684\u7c7b\u4f3c\u672f\u8bed\u548c\u6982\u5ff5\u7684\u6bd4\u8f83\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th>\u5b66\u671f<\/th>\n<th>\u63cf\u8ff0<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u5bc6\u7801\u54c8\u5e0c<\/td>\n<td>\u4f7f\u7528\u52a0\u5bc6\u7b97\u6cd5\u5c06\u660e\u6587\u5bc6\u7801\u8f6c\u6362\u4e3a\u4e0d\u53ef\u9006\u7684\u56fa\u5b9a\u957f\u5ea6\u5b57\u7b26\u4e32\uff08\u54c8\u5e0c\uff09\u7684\u8fc7\u7a0b\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u76d0<\/td>\n<td>\u5728\u6563\u5217\u4e4b\u524d\u5411\u5bc6\u7801\u6dfb\u52a0\u968f\u673a\u6570\u636e\uff08\u76d0\uff09\u7684\u505a\u6cd5\uff0c\u4ee5\u9632\u6b62\u4f7f\u7528\u9884\u5148\u8ba1\u7b97\u7684\u8868\u8fdb\u884c\u5bc6\u7801\u7834\u89e3\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u7eaf\u6587\u672c\u5bc6\u7801<\/td>\n<td>\u7528\u6237\u5bc6\u7801\u4ee5\u5176\u539f\u59cb\u3001\u53ef\u8bfb\u7684\u5f62\u5f0f\u5b58\u50a8\uff0c\u4e0d\u7ecf\u8fc7\u4efb\u4f55\u52a0\u5bc6\u6216\u6563\u5217\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u54c8\u5e0c\u5bc6\u7801<\/td>\n<td>\u4f7f\u7528\u52a0\u5bc6\u54c8\u5e0c\u51fd\u6570\u5c06\u5bc6\u7801\u8f6c\u6362\u4e3a\u56fa\u5b9a\u957f\u5ea6\u7684\u5b57\u7b26\u4e32\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u52a0\u5bc6\u5bc6\u7801<\/td>\n<td>\u4f7f\u7528\u52a0\u5bc6\u7b97\u6cd5\u8f6c\u6362\u4e3a\u5bc6\u6587\u7684\u5bc6\u7801\uff0c\u53ef\u4ee5\u4f7f\u7528\u6b63\u786e\u7684\u89e3\u5bc6\u5bc6\u94a5\u8fdb\u884c\u9006\u8f6c\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u6bd4\u8f83\u8fd9\u4e9b\u672f\u8bed\uff0c\u5f88\u660e\u663e\uff0c\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u7ed3\u5408\u4e86\u5bc6\u7801\u6563\u5217\u548c\u52a0\u76d0\u7684\u5143\u7d20\u6765\u5b89\u5168\u5730\u5b58\u50a8\u5bc6\u7801\u4fe1\u606f\uff0c\u786e\u4fdd\u660e\u6587\u5bc6\u7801\u4fdd\u6301\u9690\u85cf\u72b6\u6001\uff0c\u5e76\u9488\u5bf9\u6f5c\u5728\u7684\u5b89\u5168\u5a01\u80c1\u6dfb\u52a0\u989d\u5916\u7684\u4fdd\u62a4\u5c42\u3002<\/p>\n<h2>\u4e0e\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u76f8\u5173\u7684\u672a\u6765\u89c2\u70b9\u548c\u6280\u672f\u3002<\/h2>\n<p>\u968f\u7740\u6280\u672f\u7684\u4e0d\u65ad\u53d1\u5c55\uff0c\u7528\u4e8e\u4fdd\u62a4\u7528\u6237\u51ed\u8bc1\u7684\u65b9\u6cd5\u548c\u6280\u672f\u4e5f\u4f1a\u4e0d\u65ad\u53d1\u5c55\u3002\u867d\u7136\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u4e00\u76f4\u662f\u57fa\u4e8e Unix \u7684\u7cfb\u7edf\u7684\u6709\u6548\u89e3\u51b3\u65b9\u6848\uff0c\u4f46\u672a\u6765\u7684\u524d\u666f\u53ef\u80fd\u5305\u62ec\u4ee5\u4e0b\u8fdb\u6b65\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u751f\u7269\u8bc6\u522b\u8ba4\u8bc1<\/strong>\uff1a\u751f\u7269\u8bc6\u522b\u8eab\u4efd\u9a8c\u8bc1\uff08\u4f8b\u5982\u6307\u7eb9\u626b\u63cf\u548c\u9762\u90e8\u8bc6\u522b\uff09\u4f5c\u4e3a\u7528\u6237\u8eab\u4efd\u9a8c\u8bc1\u7684\u66ff\u4ee3\u6216\u8865\u5145\u65b9\u6cd5\u8d8a\u6765\u8d8a\u53d7\u6b22\u8fce\u3002\u5c06\u751f\u7269\u8bc6\u522b\u6280\u672f\u4e0e\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u96c6\u6210\u53ef\u4ee5\u63d0\u4f9b\u989d\u5916\u7684\u5b89\u5168\u5c42\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u591a\u91cd\u8eab\u4efd\u9a8c\u8bc1 (MFA)<\/strong>\uff1a MFA \u7ed3\u5408\u4e86\u591a\u79cd\u8eab\u4efd\u9a8c\u8bc1\u56e0\u7d20\uff08\u4f8b\u5982\uff0c\u60a8\u77e5\u9053\u7684\u4e1c\u897f\u3001\u60a8\u62e5\u6709\u7684\u4e1c\u897f\u4ee5\u53ca\u60a8\u662f\u4ec0\u4e48\uff09\uff0c\u6b63\u5728\u6210\u4e3a\u5404\u79cd\u5728\u7ebf\u670d\u52a1\u7684\u6807\u51c6\u3002\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u7684\u672a\u6765\u5b9e\u73b0\u53ef\u80fd\u4f1a\u5408\u5e76 MFA \u529f\u80fd\u4ee5\u8fdb\u4e00\u6b65\u589e\u5f3a\u5b89\u5168\u6027\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u57fa\u4e8e\u533a\u5757\u94fe\u7684\u8eab\u4efd\u9a8c\u8bc1<\/strong>\uff1a\u533a\u5757\u94fe\u7b49\u5206\u5e03\u5f0f\u8d26\u672c\u6280\u672f\u4e3a\u5b89\u5168\u7684\u7528\u6237\u8eab\u4efd\u9a8c\u8bc1\u63d0\u4f9b\u4e86\u6f5c\u5728\u7684\u89e3\u51b3\u65b9\u6848\u3002\u5728\u53bb\u4e2d\u5fc3\u5316\u7f51\u7edc\u4e0a\u5b58\u50a8\u6563\u5217\u5bc6\u7801\u53ef\u4ee5\u63d0\u4f9b\u989d\u5916\u7684\u4fdd\u62a4\uff0c\u4ee5\u62b5\u5fa1\u4e2d\u5fc3\u5316\u653b\u51fb\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u91cf\u5b50\u5b89\u5168\u5bc6\u7801\u5b66<\/strong>\uff1a\u968f\u7740\u91cf\u5b50\u8ba1\u7b97\u7684\u53d1\u5c55\uff0c\u4f20\u7edf\u7684\u52a0\u5bc6\u7b97\u6cd5\u53ef\u80fd\u4f1a\u53d8\u5f97\u8106\u5f31\u3002\u672a\u6765\u7684\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u5b9e\u73b0\u53ef\u80fd\u4f1a\u91c7\u7528\u91cf\u5b50\u5b89\u5168\u52a0\u5bc6\u6280\u672f\u6765\u62b5\u5fa1\u57fa\u4e8e\u91cf\u5b50\u7684\u653b\u51fb\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u65e0\u5bc6\u7801\u8ba4\u8bc1<\/strong>\uff1a\u65e0\u5bc6\u7801\u8eab\u4efd\u9a8c\u8bc1\u65b9\u9762\u7684\u521b\u65b0\uff0c\u4f8b\u5982 WebAuthn\uff0c\u5141\u8bb8\u7528\u6237\u65e0\u9700\u4f20\u7edf\u5bc6\u7801\u5373\u53ef\u767b\u5f55\u3002\u672a\u6765\u7684\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u8bbe\u8ba1\u53ef\u80fd\u4f1a\u96c6\u6210\u5bf9\u65e0\u5bc6\u7801\u8eab\u4efd\u9a8c\u8bc1\u65b9\u6cd5\u7684\u652f\u6301\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u5982\u4f55\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6216\u5982\u4f55\u5c06\u4ee3\u7406\u670d\u52a1\u5668\u4e0e\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u5173\u8054\u3002<\/h2>\n<p>\u4ee3\u7406\u670d\u52a1\u5668\u5145\u5f53\u5ba2\u6237\u7aef\u548c\u4e92\u8054\u7f51\u4e4b\u95f4\u7684\u4e2d\u4ecb\uff0c\u63d0\u4f9b\u5404\u79cd\u529f\u80fd\uff0c\u4f8b\u5982\u533f\u540d\u3001\u5185\u5bb9\u8fc7\u6ee4\u548c\u6539\u8fdb\u7684\u6027\u80fd\u3002\u867d\u7136\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u76f4\u63a5\u4e0e\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u7684\u8eab\u4efd\u9a8c\u8bc1\u8fc7\u7a0b\u76f8\u5173\uff0c\u4f46\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u901a\u8fc7\u591a\u79cd\u65b9\u5f0f\u95f4\u63a5\u4ece\u4e2d\u53d7\u76ca\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u7528\u6237\u8ba4\u8bc1<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u901a\u5e38\u9700\u8981\u7528\u6237\u8eab\u4efd\u9a8c\u8bc1\u6765\u63a7\u5236\u5bf9\u7279\u5b9a\u8d44\u6e90\u7684\u8bbf\u95ee\u6216\u5b9e\u65bd\u5185\u5bb9\u8fc7\u6ee4\u7b56\u7565\u3002\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u5229\u7528\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u8fdb\u884c\u7528\u6237\u8eab\u4efd\u9a8c\u8bc1\uff0c\u786e\u4fdd\u53ea\u6709\u6388\u6743\u7528\u6237\u624d\u80fd\u8bbf\u95ee\u4ee3\u7406\u670d\u52a1\u5668\u7684\u529f\u80fd\u548c\u670d\u52a1\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u5b89\u5168\u8fdc\u7a0b\u8bbf\u95ee<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u7528\u4e8e\u63d0\u4f9b\u5bf9\u5185\u90e8\u8d44\u6e90\u7684\u5b89\u5168\u8fdc\u7a0b\u8bbf\u95ee\u3002\u901a\u8fc7\u4f7f\u7528\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\uff0c\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u589e\u5f3a\u8fdc\u7a0b\u8fde\u63a5\u7684\u5b89\u5168\u6027\uff0c\u9632\u6b62\u672a\u7ecf\u6388\u6743\u7684\u8bbf\u95ee\u5c1d\u8bd5\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u589e\u5f3a\u5b89\u5168\u6027<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u7528\u4e8e\u8fc7\u6ee4\u548c\u68c0\u67e5\u4f20\u5165\u7684\u7f51\u7edc\u6d41\u91cf\u3002\u901a\u8fc7\u5229\u7528\u5b58\u50a8\u5728\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u4e2d\u7684\u7528\u6237\u51ed\u636e\uff0c\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u5b9e\u65bd\u4e25\u683c\u7684\u8bbf\u95ee\u63a7\u5236\u7b56\u7565\u5e76\u964d\u4f4e\u6f5c\u5728\u5b89\u5168\u6f0f\u6d1e\u7684\u98ce\u9669\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u65e5\u5fd7\u8bb0\u5f55\u548c\u5ba1\u8ba1<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u901a\u5e38\u4f1a\u4fdd\u7559\u7528\u6237\u6d3b\u52a8\u7684\u65e5\u5fd7\u3002\u901a\u8fc7\u4e0e Shadow Password Files \u96c6\u6210\uff0c\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u786e\u4fdd\u65e5\u5fd7\u6587\u4ef6\u4e2d\u7684\u7528\u6237\u6807\u8bc6\u4e00\u81f4\u4e14\u51c6\u786e\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u5bc6\u7801\u7ba1\u7406<\/strong>\uff1a\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u53ef\u4ee5\u5f3a\u5236\u6267\u884c\u5bc6\u7801\u8001\u5316\u7b56\u7565\uff0c\u8fd9\u5bf9\u4ee3\u7406\u670d\u52a1\u5668\u7528\u6237\u6765\u8bf4\u662f\u6709\u76ca\u7684\u3002\u5b9a\u671f\u66f4\u6539\u5bc6\u7801\u53ef\u589e\u5f3a\u5b89\u5168\u6027\u5e76\u9632\u6b62\u672a\u7ecf\u6388\u6743\u7684\u8bbf\u95ee\u3002<\/p>\n<\/li>\n<\/ol>\n<p>\u901a\u8fc7\u4e0e\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u5173\u8054\uff0c\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u589e\u5f3a\u5176\u5b89\u5168\u6027\uff0c\u5e76\u4e3a\u8bbf\u95ee\u5176\u670d\u52a1\u7684\u7528\u6237\u63d0\u4f9b\u66f4\u5f3a\u5927\u3001\u66f4\u53ef\u9760\u7684\u8eab\u4efd\u9a8c\u8bc1\u673a\u5236\u3002<\/p>\n<h2>\u76f8\u5173\u94fe\u63a5<\/h2>\n<p>\u6709\u5173\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u548c\u76f8\u5173\u4e3b\u9898\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u8003\u8651\u63a2\u7d22\u4ee5\u4e0b\u8d44\u6e90\uff1a<\/p>\n<ol>\n<li>\n<p><a href=\"https:\/\/www.tldp.org\/LDP\/lame\/LAME\/linux-admin-made-easy\/shadow-file-formats.html\" target=\"_new\" rel=\"noopener nofollow\">Linux \u6587\u6863\u9879\u76ee<\/a>\uff1a\u6709\u5173\u57fa\u4e8e Linux \u7684\u7cfb\u7edf\u4e2d\u4f7f\u7528\u7684\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u683c\u5f0f\u7684\u7efc\u5408\u6587\u6863\u3002<\/p>\n<\/li>\n<li>\n<p><a href=\"https:\/\/www.openssl.org\/docs\/manmaster\/man3\/\" target=\"_new\" rel=\"noopener nofollow\">OpenSSL \u2013 \u52a0\u5bc6\u51fd\u6570<\/a>\uff1a\u6709\u5173 OpenSSL \u63d0\u4f9b\u7684\u52a0\u5bc6\u51fd\u6570\uff08\u5305\u62ec\u6563\u5217\u548c\u52a0\u76d0\uff09\u7684\u8be6\u7ec6\u4fe1\u606f\u3002<\/p>\n<\/li>\n<li>\n<p><a href=\"https:\/\/www.w3.org\/TR\/webauthn\/\" target=\"_new\" rel=\"noopener nofollow\">WebAuthn \u2013 W3C \u89c4\u8303<\/a>\uff1a\u6709\u5173 Web \u8eab\u4efd\u9a8c\u8bc1 (WebAuthn)\uff08\u4e00\u79cd\u65e0\u5bc6\u7801\u8eab\u4efd\u9a8c\u8bc1\u6807\u51c6\uff09\u7684\u4fe1\u606f\u3002<\/p>\n<\/li>\n<li>\n<p><a href=\"https:\/\/csrc.nist.gov\/publications\/detail\/sp\/800-63\/4\/final\" target=\"_new\" rel=\"noopener nofollow\">NIST \u2013 \u6570\u5b57\u8eab\u4efd\u6307\u5357<\/a>\uff1aNIST \u5173\u4e8e\u6570\u5b57\u8eab\u4efd\u7684\u6307\u5357\uff0c\u5305\u62ec\u5bc6\u7801\u5b89\u5168\u6700\u4f73\u5b9e\u8df5\u3002<\/p>\n<\/li>\n<li>\n<p><a href=\"https:\/\/www.techradar.com\/news\/biometric-authentication\" target=\"_new\" rel=\"noopener nofollow\">\u751f\u7269\u8bc6\u522b\u8ba4\u8bc1 \u2013 TechRadar<\/a>\uff1a\u751f\u7269\u7279\u5f81\u8ba4\u8bc1\u65b9\u6cd5\u53ca\u5176\u5e94\u7528\u7684\u6982\u8ff0\u3002<\/p>\n<\/li>\n<\/ol>\n<p>\u901a\u8fc7\u63a2\u7d22\u8fd9\u4e9b\u8d44\u6e90\uff0c\u60a8\u53ef\u4ee5\u66f4\u6df1\u5165\u5730\u4e86\u89e3\u5f71\u5b50\u5bc6\u7801\u6587\u4ef6\u3001\u5176\u5b9e\u73b0\u53ca\u5176\u5728\u73b0\u4ee3\u7f51\u7edc\u5b89\u5168\u5b9e\u8df5\u4e2d\u7684\u610f\u4e49\u3002<\/p>","protected":false},"featured_media":478971,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-478970","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Shadow Password Files: Securing User Credentials on Proxy Servers<\/mark>","faq_items":[{"question":"What are Shadow Password Files and why are they important for proxy servers?","answer":"<p>Shadow Password Files are a critical component of modern operating systems that store password-related information separately from the main password file. They enhance password security by storing hashed passwords and other user account information, reducing the risk of unauthorized access to sensitive credentials. For proxy servers, Shadow Password Files play a crucial role in user authentication, ensuring that only authorized users can access proxy services and enhancing overall security.<\/p>"},{"question":"How did the concept of Shadow Password Files originate?","answer":"<p>The concept of Shadow Password Files originated in the Unix world in the 1970s. The need to enhance the security of user account information led to the separation of password hashes from the main password file. The first implementation of Shadow Password Files was introduced by Sun Microsystems in the SunOS 4.1.1 operating system in 1988.<\/p>"},{"question":"What information is stored in a Shadow Password File?","answer":"<p>A Shadow Password File typically contains the following information for each user account: username, hashed password, password aging details (minimum and maximum age, warning periods), account locking information, and account deactivation status. This separation of data ensures that even if unauthorized users gain access to the password file, they cannot easily access the hashed passwords.<\/p>"},{"question":"How do Shadow Password Files work?","answer":"<p>When a user attempts to log in, the system checks the Shadow Password File to validate the entered password. The system takes the provided password, applies the same hashing algorithm and salt used during the initial password creation, and then compares the resulting hash with the stored hash in the Shadow Password File. If the two hashes match, the user is granted access; otherwise, the login attempt fails.<\/p>"},{"question":"What are the key features of Shadow Password Files?","answer":"<p>Shadow Password Files offer several key features that enhance security and user management. These features include enhanced security by storing hashed passwords separately, password aging policies, account locking, limited access (typically restricted to privileged users), and the use of salted password hashes.<\/p>"},{"question":"What types of Shadow Password Files exist?","answer":"<p>Different types of Shadow Password Files exist, varying based on the operating system they are used on and their specific implementation details. Some examples include the traditional Unix Shadow File, BSD-style Shadow File, Linux-based Shadow File, AIX Shadow File, and Solaris Shadow File.<\/p>"},{"question":"How can proxy servers benefit from using Shadow Password Files?","answer":"<p>Proxy servers can benefit from Shadow Password Files in several ways. They can use these files for user authentication, enforcing secure remote access, enhancing overall security through filtering and inspection of network traffic, maintaining accurate user identification in logs, and enforcing password management policies.<\/p>"},{"question":"What are some future perspectives and technologies related to Shadow Password Files?","answer":"<p>Future advancements in Shadow Password Files might include integration with biometric authentication, multi-factor authentication (MFA), quantum-safe cryptography, passwordless authentication methods, and even blockchain-based authentication. These developments would further enhance the security and robustness of user authentication mechanisms.<\/p>"},{"question":"Where can I find more information about Shadow Password Files?","answer":"<p>For more in-depth information about Shadow Password Files and related topics, you can explore resources such as The Linux Documentation Project, OpenSSL documentation on cryptographic functions, the W3C specification on Web Authentication (WebAuthn), NIST's digital identity guidelines, and resources on biometric authentication.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/478970","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/478970\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media\/478971"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media?parent=478970"}],"curies":[{"name":"\u53ef\u6e7f\u6027\u7c89\u5242","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}