FreeBSD maximum password length

takCoder tak.official at gmail.com
Wed Jun 19 05:13:03 UTC 2013


Thank you all for the points you mentioned around this topic.

On Mon, Jun 17, 2013 at 3:44 PM, Mark Felder <feld at feld.me> wrote:
>There isn't a max password length as far as I'm aware, ...


On Jun 17, 2013, at 7:47 AM, Eduardo Morras wrote:
>
> If I remember well, any password longer than default size is truncated,
so passwords
>
> a) '
AhN12Njufsn8794432kjfvsnkkJHNDSMNDKh844mNJKnhjhu8u8424'
> b) 'AhN12Njufsn8794432kj'
>
> have the same salt hash value and both validate the user.
>

My test machine is currently an old 8.2 one, but the final machine may be
upgraded. on this machine, if i enter a password longer than 128
characters, extra characters will be exactly trimmed. So, the final
password for any user with a greater-equal input password string, with same
first 128 characters, would be the first 128characters.

has this been changed in Freebsd 8.3+ to what you explained, Eduardo, or
this is the respected behavior? or i am wrong somewhere?

Thank you :)


On Tue, Jun 18, 2013 at 7:12 AM, Michael Sierchio <kudzu at tenebras.com>wrote:

> I know this may seem off-the-wall to some, but I pasted a hashed
> password for a user under 9.1 into the /etc/passwd entry for that user
> on an 8.3 machine, and auth continues to work properly.  That's nice.
>
> - M
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "
> freebsd-questions-unsubscribe at freebsd.org"
>


More information about the freebsd-questions mailing list