From owner-freebsd-questions@FreeBSD.ORG Mon Jun 25 18:23:11 2012 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 151EA1065672 for ; Mon, 25 Jun 2012 18:23:11 +0000 (UTC) (envelope-from cjr@cruwe.de) Received: from cruwe.de (cruwe.de [188.40.164.98]) by mx1.freebsd.org (Postfix) with ESMTP id B9CB18FC1A for ; Mon, 25 Jun 2012 18:23:10 +0000 (UTC) Received: from cruwe.de (unknown [127.0.0.4]) by cruwe.de (Postfix) with ESMTP id 9F9DFD583 for ; Mon, 25 Jun 2012 20:23:03 +0200 (CEST) Received: by cruwe.de (Postfix, from userid 65534) id 819D1D582; Mon, 25 Jun 2012 20:23:03 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on mail.cruwe.de X-Spam-Level: X-Spam-Status: No, score=-1.0 required=4.0 tests=ALL_TRUSTED autolearn=unavailable version=3.3.2 Received: from dijkstra.cruwe.de (p57BDE469.dip.t-dialin.net [87.189.228.105]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by cruwe.de (Postfix) with ESMTPSA id 1536AD57F for ; Mon, 25 Jun 2012 20:23:01 +0200 (CEST) Date: Mon, 25 Jun 2012 20:22:49 +0200 From: "Christopher J. Ruwe" To: freebsd-questions@freebsd.org Message-ID: <20120625202249.1d872edf@dijkstra.cruwe.de> In-Reply-To: <444nq0mjjd.fsf@be-well.ilk.org> References: <20120623153710.36e7446f@dijkstra.cruwe.de> <444nq0mjjd.fsf@be-well.ilk.org> X-Mailer: Claws Mail 3.8.0 (GTK+ 2.24.6; amd64-portbld-freebsd9.0) Mime-Version: 1.0 Content-Type: multipart/signed; micalg=PGP-SHA1; boundary="Sig_/J2tPh7=N=DJvf7xeUd+anJL"; protocol="application/pgp-signature" X-Virus-Scanned: ClamAV on mail.cruwe.de using ClamSMTP Subject: Re: changing md5 hashed for sha X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Jun 2012 18:23:11 -0000 --Sig_/J2tPh7=N=DJvf7xeUd+anJL Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On Sun, 24 Jun 2012 18:28:38 -0400 Lowell Gilbert wrote: > "Christopher J. Ruwe" writes: >=20 > > For setting the dafault hash used to hash /etc/master.passwd, it has > > been recommended changing md5 for something more secure in the > > sense of being more expensive to crack. > > > > The handbook describes the procedure used in > > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/crypt.html. > > Allegedly, hashes which were hashed with one of the sha-functions > > begin with the character $6$. > > > > Afer having changed my /etc/login.conf accordingly and having reset > > the passwords, the given there is not md5 anymore (I have tried > > with md5), but does not begin with the character $6$, but, as md5, > > with $1$, which is supposed to be md5-hashed. >=20 > I'm not following. Are you saying that you are resetting the passwords > after setting login.conf, but new passwords aren't being created with > the new hash type?=20 > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" Yes, you are following correctly that the hash mechanism did not appear to have changed. It was OSI-8 error on my part, as Mike Tancsa (one message later) helped me to understand. Cheers, --=20 Christopher J. Ruwe TZ: GMT + 2h --Sig_/J2tPh7=N=DJvf7xeUd+anJL Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (FreeBSD) iQIcBAEBAgAGBQJP6KyCAAoJEJTIKW/o3iwUefcQAM6ZBjgmgXpoGCQww3dToFmb ZEdCDQ2jtmhdzPozR/pH5f5aGMJslVcXW3dT9oE2qxtqXdL57sLbmo1Dfj6DxIM1 6Ef3ZPXPK7lROmO10sGOsGHUrJK5vmkp++/AvkTD7Hv9zUUmWSopIQAgT4yqzF2p Kt6RmaO8i7ueJdV3v7hGdIE4l9ZI6HEJ3F8gEzFHzj9hCfoSpquZ4QxdWOnT5HmN oVeOx8DCr/MH5gElvtfiGqVPcZE7tQBblj/gWwrTXaYpmRKJfSggl1EpUnXEbUFK mOdNvCthYlz/6adnWDP0k4MVWy+kpNz0WClXJ4+I04amXooOb6PHGci7l0OkBXeC Wof5tf6T4A+BSz+cPxuLkFuGv2ylOpFtfuNMqwlnDHzEjUUsfmE8bOLFeigMPWhg HK73yYQ1NKtyX5m1+8vqrSOJ4Dyg2Ytr1u0ys8Y5H1k9Ylvf5ZzS2KgBjRJsm+Uo +bU4JJAbkaKZ6kxDlii6LolEHw45eh3wbNIx+bQpHhiy5xYK3tPddFlCi9g2TwZJ J6XQKR4rbF5f8ZOF/GyBWipq2InZ533s+MV99aW5fVG+dFjG/S74Ctr+Zgz7dNiq 80rmy2SKp9BdEvrR0thDcsQCU+yzepjx76bDyIHfcwFHEOaRIR8CHawzgpSyNvzZ I80oxVnvXA/HeFOkWi3Y =/MuW -----END PGP SIGNATURE----- --Sig_/J2tPh7=N=DJvf7xeUd+anJL--