Skip site navigation (1)Skip section navigation (2)
Date:      04 Oct 1999 23:22:22 +0200
From:      Dag-Erling Smorgrav <des@flood.ping.uio.no>
To:        A.Leidinger@WJPServer.CS.Uni-SB.de
Cc:        Vitaly V Belekhov <bsdl@h2o.riss-telecom.ru>, "Rashid N. Achilov" <shelton@sentry.granch.ru>, freebsd-security@FreeBSD.ORG
Subject:   Re: Long username/password
Message-ID:  <xzp3dvq95yp.fsf@flood.ping.uio.no>
In-Reply-To: A.Leidinger@WJPServer.CS.Uni-SB.de's message of "Mon, 4 Oct 1999 20:16:48 %2B0200 (CEST)"
References:  <199910041816.UAA01028@work.net.local>

next in thread | previous in thread | raw e-mail | index | archive | help
A.Leidinger@WJPServer.CS.Uni-SB.de writes:
> If there hasn't something changed since I've checked it, it didn't use
> long passwords as default (it accepts long passwords as input but only
> uses the first eight characters, at least this is my experience with
> 3.2).

It *does* support 128-character passwords unless you install the DES
libraries. The only reason you'd want to do that is compatibility with
other Unices (especially when running NIS).

> You have to use e.g. vipw(8), clear the password field and insert "$1$".
> After this you have to change the (now empty) password. If I remember
> correctly it uses SHA1 after this change (but I could be wrong with
> this).

MD5.

DES
-- 
Dag-Erling Smorgrav - des@flood.ping.uio.no


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzp3dvq95yp.fsf>