i386/52392: Password lengths over 8 chracters are ignored

[Simon L. Nielsen]

The following reply was made to PR i386/52392; it has been noted by GNATS.

From: "Simon L. Nielsen" <simon at nitro.dk>
To: Chris Lewis <chris at digitalwaffle.net>
Cc: freebsd-gnats-submit at FreeBSD.org
Subject: Re: i386/52392: Password lengths over 8 chracters are ignored
Date: Sun, 18 May 2003 12:57:20 +0200

 --LZvS9be/3tNcYl/X
 Content-Type: text/plain; charset=us-ascii
 Content-Disposition: inline
 Content-Transfer-Encoding: quoted-printable
 
 On 2003.05.18 03:50:11 -0700, Chris Lewis wrote:
 
 >  It would appear the problem is not with the FreeBSD core, but instead wi=
 th=20
 >  /usr/bin/adduser, which I used to set my test user's password initially,=
 =20
 >  the problem did not apply to passwords changed later (as they should be)=
 =20
 >  with "passwd".
 > =20
 >  The issue is, therefore, with adduser - but I don't know how relevant it=
  is=20
 >  considering users should change their passwords anyway after being added=
 =2E :)
 
 I think the problem is that adduser uses DES passwords by default even
 when you have set MD5 e.g. in login.conf.  This has been discussed a few
 times before, but I can't remember the reason for this.  Try searching
 the mailling list archives.
 
 --=20
 Simon L. Nielsen
 
 --LZvS9be/3tNcYl/X
 Content-Type: application/pgp-signature
 Content-Disposition: inline
 
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.2.1 (FreeBSD)
 
 iD8DBQE+x2cQ8kocFXgPTRwRAkDrAJ4vXngof5PbPCvO60MtuOHGAr9XTQCguCer
 BKYnc0h5UAgUN5viSCfTpsU=
 =6VLy
 -----END PGP SIGNATURE-----
 
 --LZvS9be/3tNcYl/X--