Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 05 Mar 2001 18:50:40 -0500
From:      Bill Moran <wmoran@iowna.com>
To:        Mikko Tyolajarvi <mikko@dynas.se>
Cc:        questions@freebsd.org
Subject:   Re: SUN TO BSD
Message-ID:  <3AA4264F.7AF4B2A5@iowna.com>
References:  <3AA402DD.1F4D19C1@iowna.com> <200103052325.f25NPsC76544@explorer.rsa.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Mikko Tyolajarvi wrote:
> 
> In local.freebsd.questions you write:
> >I believe this has to do with the system default password encryption
> >scheme. If both your Solaris & FreeBSD boxes are using the same
> >encryption scheme you should see the same encryped password. I've seen
> 
> Nope.  Password encryption schemes adds a "salt" (12 bits for the
> traditional DES version) to try to avoid passwords encrypting to the
> same value -- otherwise dictionary attacks become a lot simpler.

Straighten me out on this, then. (if you'd be so kind)
Do all systems use different password math? If so, how does FreeBSD
share it's data with Solaris, Linux, et al via NIS? It couldn't be
sending the passwords in cleartext, because they're not decryptable
(right?) That would be insane anyway.

I thought you had the option of using DES or MD5 for the password
storage?

Am I a little off in my understanding of this?

-Bill

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3AA4264F.7AF4B2A5>