OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: [MORE] Passwords database
From: Andrew Otwell (andrewnetworkcomputerz.com)
Date: Fri Feb 04 2000 - 12:55:37 CST


What if the user changes their password via "passwd "?

I understood that after you installed DES, then all passwords would be
DES upon the next user password change. I'd love to be incorrect on this
one. Please yank and put some dummy examples - before and after. Please
DO NOT use root's account and a passwd user as this will not apply to a
3000+ user system.

Alexander Leidinger wrote:
>
> On 4 Feb, Andrew Otwell wrote:
> > MD5 is stingy and does not understand DES.
> > If you're running in DES compat mode (i.e. libcrypt -> libdescrypt)
> > you will not be able to choose which passwords will be in MD5 format.
> > All passwords will be in DES format from DES inception onward.
>
> Sorry, but I have libcrypt -> libdescrypt and my root-password is hashed
> with MD5.
> I didn't know how to migrate automaticly at next login, but manualy you
> can use e.g. vipw, exchange the old passwd with "$1$*" (without the
> doublequotes) and execute as root "passwd user". The new password is now
> hashed with MD5.
>
> Bye,
> Alexander.
>
> --
> "'Faith' means not _wanting_ to know what is true." -- Nietzshe
>
> http://www.Leidinger.net Alexander+Home Leidinger.net
> Key fingerprint = 7423 F3E6 3A7E B334 A9CC B10A 1F5F 130A A638 6E7E

-- 
_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/
 Andrew T. Otwell, Network Administrator
 andrewnetworkcomputerz.com, 678.363.8491
 http://www.NetworkComputerz.com
 yank GPG DSS key from hkp://pgpkeys.mit.edu
_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/

To Unsubscribe: send mail to majordomoFreeBSD.org with "unsubscribe freebsd-security" in the body of the message