Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 3 Jul 1999 22:18:36 +0300
From:      Ruslan Ermilov <ru@ucb.crimea.ua>
To:        Jason McKay <jasonm@webace.com.au>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: master.passwd question
Message-ID:  <19990703221836.A10696@relay.ucb.crimea.ua>
In-Reply-To: <000501bec57f$59026440$70a019cb@webace.com.au>; from Jason McKay on Sun, Jul 04, 1999 at 02:10:35AM %2B0800
References:  <000501bec57f$59026440$70a019cb@webace.com.au>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Jul 04, 1999 at 02:10:35AM +0800, Jason McKay wrote:
> Hello,
> 
> I have two servers running FreeBSD, the first is running v2.2.5-RELEASE and
> the second is running v2.2.8-RELEASE.  I am trying to merge both user
> databases together on the second server.  I have done this before with out
> problems, but this time the master.passwd files appear to be different.
> 
> -- example from the 1st servers master.passwd:
> username:$1$cM5xQB8Y$9k1ZKitiFs6qCyfNlx5A2/:1007:
> 
> -- example from the 2nd servers master.passwd
> username:9JgmXHPM8PH0g:1007:
> 
> The passwords are a different length.  Why is this? ...
> 
There are two `crypt' versions available: MD5- and DES- based, and for
them there are two distinct libraries (libscrypt and libdescrypt).
Programs use `libcrypt' library, which is symlinked to one of them.
`libdescrypt' undestands both DES and MD5 passwords, while the *default*
`libscrypt' only MD5's.

`$1$' is a magic that indicates that the password was MD5-hashed.
So, your 1st server has libcrypt->libscrypt, and the 2nd one has
libcrypt->libdescrypt.

> how can I merge the two together without problems?
> 
In your situation you are OK to merge your passwords on the 2nd server.
It runs `libdescrypt', so it will understand MD5 passwords from the 1st
server as well.

Also make sure to read `Handbook -> Security -> DES, MD5, and Crypt'.


Cheers,
-- 
Ruslan Ermilov		Sysadmin and DBA of the
ru@ucb.crimea.ua	United Commercial Bank,
ru@FreeBSD.org		FreeBSD committer,
+380.652.247.647	Simferopol, Ukraine

http://www.FreeBSD.org	The Power To Serve
http://www.oracle.com	Enabling The Information Age


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990703221836.A10696>