Date: Wed, 13 Dec 2000 18:35:52 -0800 (PST) From: akenaton@club-internet.fr To: freebsd-gnats-submit@FreeBSD.org Subject: conf/23537: Post 4.2 RELEASE errata problem about password_format problem and libdescrypt Message-ID: <200012140235.eBE2Zq794782@freefall.freebsd.org> Resent-Message-ID: <200012140240.eBE2e0D95163@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 23537 >Category: conf >Synopsis: Post 4.2 RELEASE errata problem about password_format problem and libdescrypt >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Wed Dec 13 18:40:00 PST 2000 >Closed-Date: >Last-Modified: >Originator: Fabrice Aneche >Release: 4.2-RELEASE >Organization: nunix >Environment: FreeBSD kephren.in.nunix.net 4.2-RELEASE FreeBSD 4.2-RELEASE #1: Fri Nov 24 15:45:24 CET 2000 akh@kephren.in.nunix.net:/usr/src/sys/compile/KEPHREN i386 >Description: crypt_get_format() return des everytime ... and it's the same if I put :passwd_format=md5:\ in login.conf. So it seems I have the inverse problem of the errata for 4.2. (Using crypt_set_format("md5"); works so I can generate md5 password ...) but doesn't seems to be my default. , Something strange if I run ls /usr/lib/libcrypt.so lrwxrwxrwx 1 root wheel - 14 Nov 23 20:02 /usr/lib/libcrypt.so@ -> libdescrypt.so Why is this file is linked to des, if 4.2 is md5 enable by default ?? Handbooks says: If you have installed the DES-capable crypt library libdescrypt (e.g. by installing the "crypto" distribution), then which password format will be used for new passwords is controlled by the ``passwd_format'' login capability in /etc/login.conf, which takes values of either ``des'' or ``md5''. See the login.conf(5) manpage for more information about login capabilities. This doesn't works. >How-To-Repeat: Just install with crypto to have ssh... This bug seems to be a problem in installation, choosing crypto at install seems to link libdescrypt by default (this was normal in old freebsd installation but shouldn't now) , which is not said when installing, and breaks all the mechanism gived by login.conf to switch to another crypt mode. >Fix: none except manually link to the others libraries . >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200012140235.eBE2Zq794782>