adduser and crypt

Eugene eugene at copoc.ru
Tue Apr 8 02:17:46 PDT 2003


Hello!

adduser(8) perl script uses crypt(3) to generate encrypted passwords,
as pointed in /usr/sbin/adduser itself. Currently in /etc/login.conf
password format is MD5 as default but adduser always generates encrypted
passwords in DES format.
IMHO adduser script should read value of passwd_format in /etc/login.conf
to decide what kind of salt (DES, MD5 or somewhat else) he gives to crypt.
At least since default password format is MD5, should not adduser generate
MD5 passwords? Especially it is not too difficult to bring about.

Any suggestions?

Eugene


More information about the freebsd-stable mailing list