From owner-freebsd-questions@FreeBSD.ORG  Sat Sep  8 15:06:42 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 082B716A41B
	for <questions@freebsd.org>; Sat,  8 Sep 2007 15:06:42 +0000 (UTC)
	(envelope-from freebsd-questions-local@be-well.ilk.org)
Received: from be-well.ilk.org (dsl092-078-145.bos1.dsl.speakeasy.net
	[66.92.78.145])
	by mx1.freebsd.org (Postfix) with ESMTP id C270C13C4A3
	for <questions@freebsd.org>; Sat,  8 Sep 2007 15:06:41 +0000 (UTC)
	(envelope-from freebsd-questions-local@be-well.ilk.org)
Received: from Lowell-Desk.lan (Lowell-Desk.lan [172.30.250.6])
	by be-well.ilk.org (Postfix) with ESMTP id 9F64A28426;
	Sat,  8 Sep 2007 10:48:34 -0400 (EDT)
Received: by Lowell-Desk.lan (Postfix, from userid 1147)
	id B0C681CDB2; Sat,  8 Sep 2007 10:48:33 -0400 (EDT)
To: =?iso-8859-1?Q?Jo=E3o?= Carlos Mendes =?iso-8859-1?Q?Lu=EDs?=
	<jonny@jonny.eng.br>
References: <46E0A950.8010502@jonny.eng.br>
From: Lowell Gilbert <freebsd-questions-local@be-well.ilk.org>
Date: Sat, 08 Sep 2007 10:48:33 -0400
In-Reply-To: <46E0A950.8010502@jonny.eng.br> (=?iso-8859-1?Q?=22Jo=E3o?=
	Carlos Mendes =?iso-8859-1?Q?Lu=EDs=22's?= message of "Thu\, 06 Sep 2007
	22\:28\:48 -0300")
Message-ID: <44zlzxnrge.fsf@Lowell-Desk.lan>
User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.0.99 (berkeley-unix)
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: questions@freebsd.org
Subject: Re: Dumb question about DES/MD5 in /etc/master.passwd
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 08 Sep 2007 15:06:42 -0000

Jo=E3o Carlos Mendes Lu=EDs <jonny@jonny.eng.br> writes:

>    This question must be really dumb, but I cannot find its answer.
>
>    In a somewhat recently updated RELENG_6 FreeBSD, whenever I run the
> program /usr/bin/passwd to change an users password, it encrypts the
> password using DES.  I have already configured /etc/login.conf for
> MD5, but it still goes with DES:
>
> *$ grep passwd /etc/login.conf
>        :passwd_format=3Dmd5:\
> #       :passwd_format=3Ddes:\
> $*
>
>    What could I be doing wrong?
>
>    If that matters, this system has been receiving system and /etc
> upgrades since Sep/2003.  Maybe some old configuration has been left
> around...

I'm a little too lazy to confirm if this is still the case with the
openpam libraries, but it used to be the case that the passwd_format
variable was not consulted for changing passwords on existing
accounts; the same format was always used.  passwd_format would be
obeyed if there were *no* password on the account (in particular, the
first time a password was assigned).