From owner-freebsd-security Sat Feb 15 15:07:00 1997 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.5/8.8.5) id PAA21951 for security-outgoing; Sat, 15 Feb 1997 15:07:00 -0800 (PST) Received: from bofh.cybercity.dk (bofh.cybercity.dk [195.8.128.254]) by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id PAA21900 for ; Sat, 15 Feb 1997 15:06:53 -0800 (PST) Received: from critter.dk.tfs.com (phk.cybercity.dk [195.8.133.247]) by bofh.cybercity.dk (8.8.3/8.7.3) with ESMTP id AAA20419; Sun, 16 Feb 1997 00:09:29 +0100 (MET) Received: from critter.dk.tfs.com (localhost [127.0.0.1]) by critter.dk.tfs.com (8.8.2/8.8.2) with ESMTP id AAA14535; Sun, 16 Feb 1997 00:08:50 +0100 (MET) To: Snob Art Genre cc: security@FreeBSD.ORG Subject: Re: changing password... In-reply-to: Your message of "Sat, 15 Feb 1997 15:05:28 PST." Date: Sun, 16 Feb 1997 00:08:50 +0100 Message-ID: <14533.856048130@critter.dk.tfs.com> From: Poul-Henning Kamp Sender: owner-security@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk In message , Snob Art Genre writes: >On Sun, 16 Feb 1997, Poul-Henning Kamp wrote: > >> In message , Snob Art Genre writes: >> >On Sat, 15 Feb 1997, Poul-Henning Kamp wrote: >> > >> >> >> >> Why don't we have an option for /usr/bin/passwd to input a precoded >> >> password ? >> >> >> >> $ passwd -c phk >> >> Please enter encrypted password: $1$8cEEj84y$GCYmM39miP8Fc9K8iAHTI/ >> >> Please reenter: $1$8cEEj84y$GCYmM39miP8Fc9K8iAHTI/ >> >> $ >> >> >> >> I know that this is a good way to hose yourself, but it would also >> >> have some useful features I think. >> >> >> >> Comments ? >> > >> >Well, root can already do it with vipw, and why would anyone else need to? >> >> Across an unsecure network it beats typing your password in cleartext... > >Ah, that's very clever. How do you hash it in a way that the password >file would like? Is it just a matter of running the password through md5 >and prepending "$1$"? man 3 crypt -- Poul-Henning Kamp | phk@FreeBSD.ORG FreeBSD Core-team. http://www.freebsd.org/~phk | phk@login.dknet.dk Private mailbox. whois: [PHK] | phk@tfs.com TRW Financial Systems, Inc. Power and ignorance is a disgusting cocktail.