Date: Wed, 26 May 2004 16:30:16 -0700 (PDT) From: GS <goiden@comcast.net> To: freebsd-gnats-submit@FreeBSD.org Subject: i386/67240: adduser concatenates the password Message-ID: <200405262330.i4QNUGOA065790@www.freebsd.org> Resent-Message-ID: <200405262340.i4QNeTDr039923@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 67240
>Category: i386
>Synopsis: adduser concatenates the password
>Confidential: no
>Severity: serious
>Priority: low
>Responsible: freebsd-i386
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Wed May 26 16:40:29 PDT 2004
>Closed-Date:
>Last-Modified:
>Originator: GS
>Release: 4.9
>Organization:
>Environment:
4.9-RELEASE FreeBSD 4.9-RELEASE #0: Mon Oct 27 17:51:09 GMT 2003 root@freebsd-stable.sentex.ca:/usr/obj/usr/src/sys/GENERIC i386
>Description:
the password the user puts into adduser is concatenated
>How-To-Repeat:
adduser - put the person's password, so say username goiden, password is goidenpassword. you can log in as goiden password goidenpass or goidenpassw or goidenpasswo or goidenpassword. It seems that only "goidenpass" is stored
>Fix:
to fix the user has to passwd to change their password. If they change it to goidenpassword, it takes correctly.
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200405262330.i4QNUGOA065790>