From owner-freebsd-bugs  Thu Dec 21  2:20: 6 2000
From owner-freebsd-bugs@FreeBSD.ORG  Thu Dec 21 02:20:01 2000
Return-Path: <owner-freebsd-bugs@FreeBSD.ORG>
Delivered-To: freebsd-bugs@hub.freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP id 6013337B400
	for <freebsd-bugs@hub.freebsd.org>; Thu, 21 Dec 2000 02:20:01 -0800 (PST)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.11.1/8.11.1) id eBLAK1r35693;
	Thu, 21 Dec 2000 02:20:01 -0800 (PST)
	(envelope-from gnats)
Resent-Date: Thu, 21 Dec 2000 02:20:01 -0800 (PST)
Resent-Message-Id: <200012211020.eBLAK1r35693@freefall.freebsd.org>
Resent-From: gnats-admin@FreeBSD.org (GNATS Management)
Resent-To: freebsd-bugs@FreeBSD.org
Resent-Reply-To: gnats-admin@FreeBSD.org,
	dschultz@uclink.berkeley.edu
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP id 3B5D037B400
	for <freebsd-gnats-submit@FreeBSD.org>; Thu, 21 Dec 2000 02:18:23 -0800 (PST)
Received: (from nobody@localhost)
	by freefall.freebsd.org (8.11.1/8.11.1) id eBLAINs35421;
	Thu, 21 Dec 2000 02:18:23 -0800 (PST)
	(envelope-from nobody)
Message-Id: <200012211018.eBLAINs35421@freefall.freebsd.org>
Date: Thu, 21 Dec 2000 02:18:23 -0800 (PST)
From: dschultz@uclink.berkeley.edu
Sender: nobody@FreeBSD.org
To: freebsd-gnats-submit@FreeBSD.org
X-Send-Pr-Version: www-1.0
Subject: misc/23709: Changing from DES to MD5 passwords does not work properly
Resent-Sender: gnats@FreeBSD.org
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


>Number:         23709
>Category:       misc
>Synopsis:       Changing from DES to MD5 passwords does not work properly
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Dec 21 02:20:01 PST 2000
>Closed-Date:
>Last-Modified:
>Originator:     David Schultz
>Release:        4.1-RELEASE
>Organization:
>Environment:
N/A
>Description:
When passwd-format=md5 is added to the login.conf file of a system that uses DES passwords, DES passwords are still used for all accounts, even if users attempt to change their passwords with passwd. Evidently, once it's DES, it's always DES, regardless of what login.conf says.

There is a workaround below, but it would be nice if the docs reflected the true nature of this beast.
>How-To-Repeat:
-Install FreeBSD with libdescrypt
-Create an account
-Add passwd_format=md5 to login.conf under default
-Login to the account that was created and use passwd to change the password
-Login as root and cat master.passwd--- note that DES is still used.
>Fix:
Login as root and use vipw to set the user's encrypted password to $1$. Use passwd _username_ to set the password for that user again.

>Release-Note:
>Audit-Trail:
>Unformatted:


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message