Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 21 Aug 1996 15:20:04 -0700 (PDT)
From:      Julian Elischer <julian@whistle.com>
To:        freebsd-bugs
Subject:   Re: ports/1520: sudo misses certain passwords
Message-ID:  <199608212220.PAA05294@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help
The following reply was made to PR ports/1520; it has been noted by GNATS.

From: Julian Elischer <julian@whistle.com>
To: andrew@ugh.net.au
Cc: FreeBSD-gnats-submit@freebsd.org
Subject: Re: ports/1520: sudo misses certain passwords
Date: Wed, 21 Aug 1996 15:08:35 -0700

 Andrew Stevenson wrote:
 > 
 > >Number:         1520
 > >Category:       ports
 > >Synopsis:       sudo dosn't recognise certain passwords and thinks you mistyped them
 > >Confidential:   no
 > >Severity:       non-critical
 > >Priority:       low
 > >Responsible:    freebsd-bugs
 > >State:          open
 > >Class:          sw-bug
 > >Submitter-Id:   current-users
 > >Arrival-Date:   Wed Aug 21 03:00:02 PDT 1996
 > >Last-Modified:
 > >Originator:     Andrew Stevenson
 > >Organization:
 > >Release:        FreeBSD 2.1-STABLE i386
 > >Environment:
 > 
 > FreeBSD-2.1-RELEASE...
 > 
 > >Description:
 > 
 > If a user has one of a number of passwords and tries to use sudo sudo will not recognise their password. It continues as if you have got it wrong. Change the password and it works fine. The password works fine to log in with.
 > 
 > >How-To-Repeat:
 > 
 > One of the affected passwords is "martha:my". There are others but I can't rember them off hand...I will ask around our users if you need them.
 
 
 The standard password utility truncates th apassword at 8 chars
 sudo doesn't
 
 
 tell the user to only type  "martha:m" 
 or use a shorter passowrd..
 I patched it here, (it's trivial) but lost the patch exactly
 It's of the form
 
 passwd[8] = 0;  /* truncate password */
 
 
 
 
 
 > 
 > >Fix:
 > 
 > 
 > 
 > >Audit-Trail:
 > >Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199608212220.PAA05294>