From: chort (chortamaunetsgothique.com)
Date: Wed Sep 24 2003 - 19:33:53 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Wed, 2003-09-24 at 02:53, Mark Watts wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> I have a bunch (~200) user accounts on an OpenBSD server, using blowfish
> encryption, which I need to convert to Linux (mdk 9.1) format.
>
> Is there a way of making linux use blowfish for passwords?
>
> I'm guessing that actually converting the password hashes is going to be
> almost impossible...
>
> Cheers,
>
> Mark.
>
> - --
> Mark Watts
> Senior Systems Engineer
> QinetiQ TIM
> St Andrews Road, Malvern
> GPG Public Key ID: 455420ED

Sorry for the semi-troll, but I just have to ask: why in the world
would you down-grade from OpenBSD to Linux? That makes about as much
sense as migrating from Linux to Win2K (at least in terms of security).

By the way, I don't see how it would be possible to convert the hashes
into anything useful. As you know, authentication is done by hashing
what the user enters for the password and comparing it with what is
hashed already... As for Linux being able to use blowfish, sadly I do
not know. Perhaps there is support under PAM?

--
Brian Keefer

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]