From owner-freebsd-stable  Thu Mar 19 14:24:53 1998
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id OAA16602
          for freebsd-stable-outgoing; Thu, 19 Mar 1998 14:24:53 -0800 (PST)
          (envelope-from owner-freebsd-stable@FreeBSD.ORG)
Received: from fledge.watson.org (root@FLEDGE.RES.CMU.EDU [128.2.91.116])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id OAA16590;
          Thu, 19 Mar 1998 14:24:42 -0800 (PST)
          (envelope-from robert@cyrus.watson.org)
Received: from fledge.watson.org (robert@fledge.pr.watson.org [192.0.2.3]) by fledge.watson.org (8.8.8/8.6.10) with SMTP id RAA23473; Thu, 19 Mar 1998 17:24:10 -0500 (EST)
Date: Thu, 19 Mar 1998 17:24:10 -0500 (EST)
From: Robert Watson <robert@cyrus.watson.org>
X-Sender: robert@fledge.watson.org
Reply-To: Robert Watson <robert@cyrus.watson.org>
To: Richard Stanaford <richard@cube3.erinet.com>
cc: "Randy A. Katz" <randyk@ccsales.com>, questions@FreeBSD.ORG,
        freebsd-stable@FreeBSD.ORG
Subject: Re: Password Characters Not Required???
In-Reply-To: <Pine.BSF.3.96.980319134217.4796A-100000@cube3.erinet.com>
Message-ID: <Pine.BSF.3.96.980319172128.23320A-100000@fledge.watson.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk

On Thu, 19 Mar 1998, Richard Stanaford wrote:

>   Indeed it is normal.  FreeBSD takes only the first 8 significant
> characters and then truncates the rest.  This is not FreeBSD specific. 
> BSDI is the same way, along with Solaris and other flavors of Unix, I
> believe.   

However, BSD/OS allows you to modify the max password length for
userclasses, up to 128 characters I think?  Similarly, the password
behavior here is a function of the crypt() used -- with Kerberos, you get
whatever the Kerberos behavior is -- it certainly has more significant
characters, however.  I would personally like to see change in behavior
here, perhaps as a login.conf option similar to BSD/OS.  I don't see one
in the -stable login.conf man page, however.


  Robert N Watson 

Carnegie Mellon University http://www.cmu.edu/
SafePort Network Services  http://www.safeport.com/
robert@fledge.watson.org   http://www.watson.org/~robert/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message