From owner-freebsd-questions@FreeBSD.ORG Tue Jul 15 10:32:04 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9329F37B401 for ; Tue, 15 Jul 2003 10:32:04 -0700 (PDT) Received: from shrike.submonkey.net (pc1-cdif2-5-cust38.cdif.cable.ntl.com [81.101.150.38]) by mx1.FreeBSD.org (Postfix) with ESMTP id AB38A43FAF for ; Tue, 15 Jul 2003 10:32:03 -0700 (PDT) (envelope-from setantae@submonkey.net) Received: from setantae by shrike.submonkey.net with local (Exim 4.20) id 19cTek-0008Rc-3d; Tue, 15 Jul 2003 18:32:02 +0100 Date: Tue, 15 Jul 2003 18:32:02 +0100 From: Ceri Davies To: Kris Yates Message-ID: <20030715173201.GB21668@submonkey.net> Mail-Followup-To: Ceri Davies , Kris Yates , questions@freebsd.org References: <3F1437D2.7090503@2binteractive.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <3F1437D2.7090503@2binteractive.com> User-Agent: Mutt/1.5.4i Sender: Ceri Davies cc: questions@freebsd.org Subject: Re: /etc/login.conf password formatting X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jul 2003 17:32:04 -0000 On Tue, Jul 15, 2003 at 12:20:18PM -0500, Kris Yates wrote: > Please send replies directly to me as I do not have time to check the > list as often as I would like.. > > Currently, it appears that some passwords on my system are DES, most are > MD5. I found the following below recently, a suggestion to switch to > blowfish. I am down with that! If I change the following (as shown > below) in /etc/login.conf, will the system still decrypt the old DES and > MD5 entries, ie. nothing will break in this regard? > > :passwd_format=blf:\ Correct, but don't forget to rebuild the capability database afterwards as mentioned at the top of /etc/login.conf. Also, for completeness, you should also change the crypt_default line in /etc/auth.conf to read: crypt_default = blf md5 des Ceri -- User: DO YOU ACCEPT JESUS CHRIST AS YOUR PERSONAL LORD AND SAVIOR? Iniaes: Sure, I can accept all forms of payment. -- www.chatterboxchallenge.com