setting encrypted password for a user

[Teske, Devin]

On Dec 22, 2013, at 4:55 PM, RW wrote:

> On Sun, 22 Dec 2013 05:47:08 +0000
> Teske, Devin wrote:
> 
>> 
>> On Dec 21, 2013, at 9:36 PM, M. V. wrote:
>> 
>>> hello,
>>> 
>>> I'm using FreeBSD-8.2. I have a program which sends "MD5 
>>> of the new password" of a user to me, and I want to reset user's
>>> password with it. I realized I can use "chpass" to set encrypted
>>> password for a user, but it needs salt and I couldn't make it work
>>> without it. so I wanted to know:
>>> - can I set user's password in FreeBSD if I have only MD5 of the
>>> password? how?
>>> 
>> 
>> echo 'MD5-HASH' | pw usermod username -H 0
> 
> Presumably that's  just a way inserting the salted hash. If
> you simply have the md5 of a password it shouldn't be possible to
> create a password entry.

RW is correct, if what is sent to you does not look like "$1$blah$moreblah"
then you don't have a hash, but a digest. You cannot turn a digest into a
hash because that would require getting at the data that was digested.

The ``echo ... | pw ...'' command I gave is only going to work if you have a
hash (looks like "$1$blah$moreblah") and not a digest (looks like "blah").
-- 
Devin

_____________
The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you.