Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 6 Aug 1998 08:40:22 -0700 (PDT)
From:      David Wolfskill <dhw@whistle.com>
To:        freebsd-questions@FreeBSD.ORG, freebsd-root@i-zone.demon.co.uk
Subject:   Re: password length limit?
Message-ID:  <199808061540.IAA24271@pau-amma.whistle.com>
In-Reply-To: <WWfobGAoEXy1EwPK@i-zone.demon.co.uk>

next in thread | previous in thread | raw e-mail | index | archive | help
>Date: Thu, 6 Aug 1998 10:02:32 +0100
>From: John <freebsd-root@i-zone.demon.co.uk>

>In article <35C5F93B.2412D6F8@acm.org>, Klaus A. Brunner
><k.brunner@acm.org> writes
>>On my FreeBSD 2.2.6 system, I created a user "test1" and assigned it the
>>password "asdfgjkl99" (10 characters). However, I can log in using the
>>passwords "asdfgjkl" (8 chars) or "asdfgjkl33" (first 8 chars
>>identical). It seems that only the first 8 characters of the password
>>are significant.

>Only the first 8 chars are significant. As to whether this is a bug or a
>feature, I guess it depends on your point of view!

How about "artifact"?  :-}

>(As an aside, ssh also behaves in this way)

I expect you'll find it common to things that use DES encryption, but
not to things that use (say) MD5 encryption.

david
-- 
David Wolfskill		UNIX System Administrator
dhw@whistle.com		voice: (650) 577-7158	pager: (650) 371-4621

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199808061540.IAA24271>