Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 17 Sep 2000 23:09:54 -0700 (PDT)
From:      Kris Kennaway <kris@FreeBSD.org>
To:        "Vladimir B. Grebenschikov" <vova@express.ru>
Cc:        freebsd-security@freebsd.org, Brian Feldman <green@FreeBSD.org>
Subject:   Re: MD5 passwords vs DES
Message-ID:  <Pine.BSF.4.21.0009172309080.66732-100000@freefall.freebsd.org>
In-Reply-To: <14789.42660.401430.305445@vbook.express.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 18 Sep 2000, Vladimir B. Grebenschikov wrote:

> 
> I have a question: 
> 
>   Do anybody have ideas to add 'default crypting mode' for utilities
> like passwd, adduser, etc ?
> 
> I am not very happy to add new user with adduser, then to edit manualy
> /etc/passwd adding $1$xxx$xx to password, then lanch passwd to change
> password for user. In a reality passwd uses old password as salt for
> new password, but if there was no old password or it was '*' - new
> password is crypted with DES :(

Brian Feldman wrote code in -current which fixes this by using a login
capability to specify which format to use for new passwords.

I'm trying to get him to merge it back to -stable in time for
4.1.1. Brian, whats the latest?

Kris

--
In God we Trust -- all others must submit an X.509 certificate.
    -- Charles Forsythe <forsythe@alum.mit.edu>



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0009172309080.66732-100000>