Date: Tue, 09 Jul 2002 23:16:39 +0400 From: Ozol Andrew Albert <andrew-ozol@hotmail.ru> To: freebsd-security@FreeBSD.ORG Subject: Crypto default after "make world" Message-ID: <20020709191639.7606.qmail@flock1.newmail.ru>
next in thread | raw e-mail | index | archive | help
Hello ALL ! I have FreeBSD 4.4, established in the last year. Now has corrected resolv.patch and has made "make world" and "make installworld" on source 4.4, download then .CVS up did not do. Reboot and oops - me on mine login does not start up, but lets as root . Investigation has shown, that passwords in DES do not work, moreover, all new passwords are created in shadow.passwd in format MD5. Because of it also have ceased to work perl scripts with function crypt as in the scripts base old passwords in DES, and new are already created in MD5. Studying updating and readme in /usr/src , updating auth.conf and login.conf any result did not give. All passwords only MD5 and all!. To restore DES enciphering it was possible only "substitution" libcrypto on libdescrypto in /usr/lib , then all passwords began DES :-) . Readings mailing list it became clear, that up to version 4.4 the choice of algorithm crypto was defined(determined) by libraries, and with 4.4 like the universal library supporting MD5 and DES has appeared. Once again , that in auth.conf and login.conf passwd_format des registered - does not work. At des in login.conf also passwd refuses to work - passwd: cannot set password cipher: Undefined error: 0. cap_mkdb applied .It seems, that DES has disappeared as a class. And so a question to dear community - how all the same to establish algorithm crypto by default, for function crypto for example? And for new created logins? And how it is defined(determined) MD5 or DES for a started demon from nobody with nobody:*:65534:65534:: 0:0 in shadow.passwd - in the same place like type of the password obviously it is not specified? -- Best regards , Andrew A. Ozol Sysadmin __________ www.newmail.ru -- всегда что-то новое. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020709191639.7606.qmail>