From owner-freebsd-security  Thu Aug  2 21: 1:59 2001
Delivered-To: freebsd-security@freebsd.org
Received: from citusc17 (citusc17.usc.edu [128.125.38.177])
	by hub.freebsd.org (Postfix) with ESMTP
	id 761BB37B405; Thu,  2 Aug 2001 21:01:55 -0700 (PDT)
	(envelope-from kris@citusc17)
Received: (from kris@localhost)
	by citusc17 (8.11.4/8.11.4) id f7341bD10380;
	Thu, 2 Aug 2001 21:01:37 -0700 (PDT)
	(envelope-from kris)
Date: Thu, 2 Aug 2001 21:01:37 -0700
From: Kris Kennaway <kris@FreeBSD.ORG>
To: Hank Wethington <bsd@info-logix.com>
Cc: Kris Kennaway <kris@obsecurity.org>,
	security-officer@FreeBSD.ORG, security@FreeBSD.ORG
Subject: Re: OpenSSL patch applied and now locked out of machine.
Message-ID: <20010802210137.B10332@citusc17.usc.edu>
References: <20010730183039.A65218@xor.obsecurity.org> <KFEIIDCJNHBCGLAFNMJIAELBFBAA.bsd@info-logix.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="2B/JsCI69OhZNC5r"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <KFEIIDCJNHBCGLAFNMJIAELBFBAA.bsd@info-logix.com>; from bsd@info-logix.com on Thu, Aug 02, 2001 at 02:34:58PM -0700
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


--2B/JsCI69OhZNC5r
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Thu, Aug 02, 2001 at 02:34:58PM -0700, Hank Wethington wrote:

> After driving the 3 hours to get to the box, I found I could log in
> locally as root, but not as the admin user I have set up.

Presumably your root user has an MD5 password (something like
"$1$sdflj$khasjkldfh") which doesn't need DES libs present to
authenticate.

Kris


--2B/JsCI69OhZNC5r
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE7aiIgWry0BWjoQKURAhgQAJ9zIPqQGy0k8668Jnnt5zoLV0DvxACfb2g5
MXqlarfd7Dw6NNnsWN62iXA=
=scr5
-----END PGP SIGNATURE-----

--2B/JsCI69OhZNC5r--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message