From owner-freebsd-bugs  Wed Aug 21 15:20:12 1996
Return-Path: owner-bugs
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id PAA05329
          for bugs-outgoing; Wed, 21 Aug 1996 15:20:12 -0700 (PDT)
Received: (from gnats@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id PAA05294;
          Wed, 21 Aug 1996 15:20:04 -0700 (PDT)
Date: Wed, 21 Aug 1996 15:20:04 -0700 (PDT)
Message-Id: <199608212220.PAA05294@freefall.freebsd.org>
To: freebsd-bugs
Cc: 
From: Julian Elischer <julian@whistle.com>
Subject: Re: ports/1520: sudo misses certain passwords
Reply-To: Julian Elischer <julian@whistle.com>
Sender: owner-bugs@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

The following reply was made to PR ports/1520; it has been noted by GNATS.

From: Julian Elischer <julian@whistle.com>
To: andrew@ugh.net.au
Cc: FreeBSD-gnats-submit@freebsd.org
Subject: Re: ports/1520: sudo misses certain passwords
Date: Wed, 21 Aug 1996 15:08:35 -0700

 Andrew Stevenson wrote:
 > 
 > >Number:         1520
 > >Category:       ports
 > >Synopsis:       sudo dosn't recognise certain passwords and thinks you mistyped them
 > >Confidential:   no
 > >Severity:       non-critical
 > >Priority:       low
 > >Responsible:    freebsd-bugs
 > >State:          open
 > >Class:          sw-bug
 > >Submitter-Id:   current-users
 > >Arrival-Date:   Wed Aug 21 03:00:02 PDT 1996
 > >Last-Modified:
 > >Originator:     Andrew Stevenson
 > >Organization:
 > >Release:        FreeBSD 2.1-STABLE i386
 > >Environment:
 > 
 > FreeBSD-2.1-RELEASE...
 > 
 > >Description:
 > 
 > If a user has one of a number of passwords and tries to use sudo sudo will not recognise their password. It continues as if you have got it wrong. Change the password and it works fine. The password works fine to log in with.
 > 
 > >How-To-Repeat:
 > 
 > One of the affected passwords is "martha:my". There are others but I can't rember them off hand...I will ask around our users if you need them.
 
 
 The standard password utility truncates th apassword at 8 chars
 sudo doesn't
 
 
 tell the user to only type  "martha:m" 
 or use a shorter passowrd..
 I patched it here, (it's trivial) but lost the patch exactly
 It's of the form
 
 passwd[8] = 0;  /* truncate password */
 
 
 
 
 
 > 
 > >Fix:
 > 
 > 
 > 
 > >Audit-Trail:
 > >Unformatted: