Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 14 Jun 2007 22:02:22 -0400
From:      Kris Kennaway <kris@obsecurity.org>
To:        Mark Messier <mark@messier.com>
Cc:        FreeBSD Mailing List <freebsd-questions@freebsd.org>
Subject:   Re: password file migration
Message-ID:  <20070615020222.GA96262@rot13.obsecurity.org>
In-Reply-To: <7CDA68DA-A40D-4A6A-B9D7-1AFF589E9316@messier.com>
References:  <10840247.post@talk.nabble.com> <11093482.post@talk.nabble.com> <7CDA68DA-A40D-4A6A-B9D7-1AFF589E9316@messier.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Jun 14, 2007 at 02:57:41PM -0700, Mark Messier wrote:
> 
> I know this has been covered before, but the search mechanism
> at the mailing list archive doesn't seem to work (zero matches for
> the word: password).
> 
> I've got a 5.3 system and a 6.2 system.  I want to migrate the user
> accounts from the 5.3 to the 6.2.  They use different encryption
> mechanisms for the password in master.password.
> 
> Other that running a cracker, is there a way to upconvert the
> old to the new?

They are backwards compatible formats, so why do you want to change?

If you are concerned that the old password hash is insecure (if it's
an ancient DES password, this is true), then you will need to generate
a new password for each affected account.  One way to do this is by
using password expiry to force a change on next user login (see
e.g. pw(8)).

Kris



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070615020222.GA96262>