From owner-freebsd-security  Fri Oct 12 11:17:20 2001
Delivered-To: freebsd-security@freebsd.org
Received: from webs1.accretive-networks.net (webs1.accretive-networks.net [207.246.154.13])
	by hub.freebsd.org (Postfix) with ESMTP id C6A6537B40A
	for <freebsd-security@FreeBSD.ORG>; Fri, 12 Oct 2001 11:17:16 -0700 (PDT)
Received: from localhost (davidk@localhost)
	by webs1.accretive-networks.net (8.11.1/8.11.3) with ESMTP id f9CHDeQ85587;
	Fri, 12 Oct 2001 10:13:40 -0700 (PDT)
Date: Fri, 12 Oct 2001 10:13:40 -0700 (PDT)
From: David Kirchner <davidk@accretivetg.com>
X-X-Sender:  <davidk@localhost>
To: "Haapanen, Tom" <tomh@metrics.com>
Cc: <freebsd-security@FreeBSD.ORG>
Subject: Re: FreeBSD 4.4 and DES
In-Reply-To: <20011012100315.A85958-100000@localhost>
Message-ID: <20011012101215.J85958-100000@localhost>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

On Fri, 12 Oct 2001, David Kirchner wrote:

> This would be a hack, but you could leave your MD5 libraries where they
> are and then create the DES crypt manually (either by using 'htpasswd' or
> crypt() itself) and then insert it in to your password file via vipw.
> FreeBSD's crypt, as I understand it, automatically recognizes MD5 and DES
> crypts.

Another hack solution would be to leave your user as-is, with the MD5
password, and then create another user only for Frontpage that shares
tomh's UID and GID, but has a DES crypted password. This


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message