Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 19 Dec 2001 11:54:34 -0300 (ART)
From:      Fernando Gleiser <fgleiser@cactus.fi.uba.ar>
To:        Scott Aitken <scotta@whoever.com>
Cc:        <freebsd-questions@FreeBSD.ORG>
Subject:   Re: Accepting passwords of greater length than stored
Message-ID:  <20011219115222.G43096-100000@cactus.fi.uba.ar>
In-Reply-To: <001001c1889c$142417f0$0a01010a@merry>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 20 Dec 2001, Scott Aitken wrote:

> Hi all,
> Does any know why when SSHing to a FreeBSD 4.4-STABLE box succeeds when you
> enter a password LONGER than the password on the system?  The initial part
> must match the password, but it doesn't seem to matter if you just keep on
> typing.
> I assume it also has nothing to do SSH, as ProFTPd suffers from the safe
> symptom, but I am unable to test telnet at the moment.

I may be wrong, but I remember that in some favors of unix, DES passwords
are truncated to 8 chars. Maybe you are using DES for hashing passwords
ans this is the problem.


			Fer


> Thanks
> Scott
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011219115222.G43096-100000>