From owner-freebsd-questions@FreeBSD.ORG Fri Jun 15 02:02:24 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id C012D16A41F for ; Fri, 15 Jun 2007 02:02:24 +0000 (UTC) (envelope-from kris@obsecurity.org) Received: from elvis.mu.org (elvis.mu.org [192.203.228.196]) by mx1.freebsd.org (Postfix) with ESMTP id AD5EF13C4C6 for ; Fri, 15 Jun 2007 02:02:24 +0000 (UTC) (envelope-from kris@obsecurity.org) Received: from obsecurity.dyndns.org (elvis.mu.org [192.203.228.196]) by elvis.mu.org (Postfix) with ESMTP id A9BEB1A3C1A; Thu, 14 Jun 2007 19:01:54 -0700 (PDT) Received: from rot13.obsecurity.org (rot13.obsecurity.org [192.168.1.5]) by obsecurity.dyndns.org (Postfix) with ESMTP id 71EF5513BC; Thu, 14 Jun 2007 22:02:23 -0400 (EDT) Received: by rot13.obsecurity.org (Postfix, from userid 1001) id 67B91BE98; Thu, 14 Jun 2007 22:02:22 -0400 (EDT) Date: Thu, 14 Jun 2007 22:02:22 -0400 From: Kris Kennaway To: Mark Messier Message-ID: <20070615020222.GA96262@rot13.obsecurity.org> References: <10840247.post@talk.nabble.com> <11093482.post@talk.nabble.com> <7CDA68DA-A40D-4A6A-B9D7-1AFF589E9316@messier.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <7CDA68DA-A40D-4A6A-B9D7-1AFF589E9316@messier.com> User-Agent: Mutt/1.4.2.3i Cc: FreeBSD Mailing List Subject: Re: password file migration X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Jun 2007 02:02:24 -0000 On Thu, Jun 14, 2007 at 02:57:41PM -0700, Mark Messier wrote: > > I know this has been covered before, but the search mechanism > at the mailing list archive doesn't seem to work (zero matches for > the word: password). > > I've got a 5.3 system and a 6.2 system. I want to migrate the user > accounts from the 5.3 to the 6.2. They use different encryption > mechanisms for the password in master.password. > > Other that running a cracker, is there a way to upconvert the > old to the new? They are backwards compatible formats, so why do you want to change? If you are concerned that the old password hash is insecure (if it's an ancient DES password, this is true), then you will need to generate a new password for each affected account. One way to do this is by using password expiry to force a change on next user login (see e.g. pw(8)). Kris