Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 17 Jun 2013 16:47:44 +0200
From:      Eduardo Morras <emorrasg@yahoo.es>
To:        freebsd-questions@freebsd.org
Subject:   Re: FreeBSD maximum password length
Message-ID:  <20130617164744.1c4e3d02e57de825d500e309@yahoo.es>
In-Reply-To: <CAPkyVLwNAUU_2E0d8Go6OP4m7jqHeHKCWEt5WRhtYcgRBSQ2nQ@mail.gmail.com>
References:  <CAPkyVLw=m5-3HX7YC-Zqm=OgTLMhNYq4trBSWso8qEmPzqV38Q@mail.gmail.com> <44li69diyv.fsf@be-well.ilk.org> <CAPkyVLwNAUU_2E0d8Go6OP4m7jqHeHKCWEt5WRhtYcgRBSQ2nQ@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 17 Jun 2013 17:49:56 +0330
takCoder <tak.official@gmail.com> wrote:
> 
> I need to moderate the input password in my system's user interface. And I
> believe i have tested longer passwords than that, about 1000 characters
> long, and there was no limitations, via using this command in a /bin/sh
> test shell script : "echo PASSWORD | pw user mod USER -h 0".

If I remember well, any password longer than default size is truncated, so passwords

a) 'AhN12Njufsn8794432kjfvsnkkJHNDSMNDKh844mNJKnhjhu8u8424'
b) 'AhN12Njufsn8794432kj'

have the same salt hash value and both validate the user.

> Thank you :)

---   ---
Eduardo Morras <emorrasg@yahoo.es>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20130617164744.1c4e3d02e57de825d500e309>