Date: Thu, 21 Dec 2000 02:18:23 -0800 (PST) From: dschultz@uclink.berkeley.edu To: freebsd-gnats-submit@FreeBSD.org Subject: misc/23709: Changing from DES to MD5 passwords does not work properly Message-ID: <200012211018.eBLAINs35421@freefall.freebsd.org> Resent-Message-ID: <200012211020.eBLAK1r35693@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 23709 >Category: misc >Synopsis: Changing from DES to MD5 passwords does not work properly >Confidential: no >Severity: non-critical >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Dec 21 02:20:01 PST 2000 >Closed-Date: >Last-Modified: >Originator: David Schultz >Release: 4.1-RELEASE >Organization: >Environment: N/A >Description: When passwd-format=md5 is added to the login.conf file of a system that uses DES passwords, DES passwords are still used for all accounts, even if users attempt to change their passwords with passwd. Evidently, once it's DES, it's always DES, regardless of what login.conf says. There is a workaround below, but it would be nice if the docs reflected the true nature of this beast. >How-To-Repeat: -Install FreeBSD with libdescrypt -Create an account -Add passwd_format=md5 to login.conf under default -Login to the account that was created and use passwd to change the password -Login as root and cat master.passwd--- note that DES is still used. >Fix: Login as root and use vipw to set the user's encrypted password to $1$. Use passwd _username_ to set the password for that user again. >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200012211018.eBLAINs35421>