Date: Wed, 24 Oct 2001 01:30:57 -0700 From: "Crist J. Clark" <cristjc@earthlink.net> To: "Alexandru C." <raw@pcnet.ro> Cc: freebsd-bugs@FreeBSD.ORG Subject: Re: openssh problem Message-ID: <20011024013057.D5743@blossom.cjclark.org> In-Reply-To: <Pine.LNX.4.21.0110232322530.998-100000@blindman.atlantis.net>; from raw@pcnet.ro on Tue, Oct 23, 2001 at 11:29:35PM %2B0300 References: <Pine.LNX.4.21.0110232322530.998-100000@blindman.atlantis.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Oct 23, 2001 at 11:29:35PM +0300, Alexandru C. wrote:
>
> hi
>
> first of all , please excuse me if this is a known issue.
>
> i have an account on a FreeBSD 4.4 box and my password is 13 characters
> long. the freebsd box has openssh 2.3.0 installed (it was shipped with
> freebsd i think). i use to connect from my linux box with ssh (openssh
> 2.5.1p1 installed from source) to that freebsd box. i noticed today that i
> can log in the FreeBSD host even if i truncate my password to the first 12
> ,11 , 10 , 9 , 8 or even 7 characters.
> my sshd (openssh 2.5.1p1) from my Linux hasn't the same behaviour and it
> won't let me log in if i don't enter the exact full password
> is this a known issue or a normal behaviour?
This is normal. Only the first eight characters are significant for
DES passwords. Use MD5 passwords if you want to use longer
passwords. See the FAQ and Handbook for documentation on how to change
to MD5 passwords. This has nothing to do with OpenSSH, but has to do
with the cryptographic hash in /etc/master.passwd. If you have more
questions, please address them to freebsd-questions@freebsd.org or
another more suitable list.
--
Crist J. Clark | cjclark@alum.mit.edu
| cjclark@jhu.edu
http://people.freebsd.org/~cjc/ | cjc@freebsd.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011024013057.D5743>