Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 28 Sep 2000 21:01:03 -0700 (PDT)
From:      Kris Kennaway <kris@FreeBSD.org>
To:        Jim Mercer <jim@reptiles.org>
Cc:        hackers@freebsd.org, Brian Feldman <green@FreeBSD.org>
Subject:   Re: stuck on MD5 passwd's, host to revert to DES
Message-ID:  <Pine.BSF.4.21.0009282059430.63209-100000@freefall.freebsd.org>
In-Reply-To: <20000928233326.N22260@reptiles.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 28 Sep 2000, Jim Mercer wrote:

> On Thu, Sep 28, 2000 at 06:14:07PM -0700, Kris Kennaway wrote:
> > Set the value of the passwd_format login capability to "des" in
> > /etc/login.conf.
> > 
> > Brian Feldman neglected to document or mention this in the release notes
> > at all, as far as I can tell. No cookie! Please fix this ASAP, Brian.
> 
> so, is the intention to have FreeBSD default to md5?

Yes. It's the more secure alternative and is quite suitable for most
users. All the rest of you need to do is add the 'des' login capability in
the default class.

> the reason i ask, is that if people cvsup without seeing or noticing this,
> they may not realize until too late that the new passwords are md5.
> 
> anyone using nis with non-freebsd systems might get really upset.

It should have been documented. It still can be :-)

Kris

--
In God we Trust -- all others must submit an X.509 certificate.
    -- Charles Forsythe <forsythe@alum.mit.edu>



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0009282059430.63209-100000>