From owner-freebsd-security  Mon Aug 27  2: 9:57 2001
Delivered-To: freebsd-security@freebsd.org
Received: from obsecurity.dyndns.org (adsl-63-207-60-54.dsl.lsan03.pacbell.net [63.207.60.54])
	by hub.freebsd.org (Postfix) with ESMTP
	id 50ACF37B403; Mon, 27 Aug 2001 02:09:49 -0700 (PDT)
	(envelope-from kris@obsecurity.org)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id DEEE666DE9; Mon, 27 Aug 2001 02:09:47 -0700 (PDT)
Date: Mon, 27 Aug 2001 02:09:47 -0700
From: Kris Kennaway <kris@obsecurity.org>
To: default <default013subscriptions@hotmail.com>
Cc: freebsd-questions@FreeBSD.ORG, freebsd-security@FreeBSD.ORG
Subject: Re: Logins without full password!
Message-ID: <20010827020947.A36941@xor.obsecurity.org>
References: <OE46dVzDpubxcbz37cf000049f8@hotmail.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="BOKacYhQ+x31HxR3"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <OE46dVzDpubxcbz37cf000049f8@hotmail.com>; from default013subscriptions@hotmail.com on Mon, Aug 27, 2001 at 02:15:22AM -0500
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


--BOKacYhQ+x31HxR3
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Mon, Aug 27, 2001 at 02:15:22AM -0500, default wrote:

> Is this normal?

It's the expected behaviour for legacy DES passwords (only useful if
you need to share the same password file with other UNIX systems,
which isn't likely)

> How does one disable this?

There's a login capability for setting the default password format
(MD5 is the one you want) -- see login.conf(5).

Kris

--BOKacYhQ+x31HxR3
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE7ig5bWry0BWjoQKURAshlAKDeKvXYJY2WkUASFYqrP15wg0QisACgrXDH
pM1G2+UB4hhVDJ/gw8uFXyM=
=RjqH
-----END PGP SIGNATURE-----

--BOKacYhQ+x31HxR3--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message