Re: [cobalt-users] Admin/root password security hole

["Fathi Said" <fathi@xxxxxx>]

Cassandra,

> Tonight, my server granted me access pointblank, with only 10/14
characters
> in the password entered.  I was able to access root in this manner as
well.
> I logged out and attempted this several times, with several versions of my
> password.  The server granted me access as long as I had the first eight
> characters.
> Obviously, this is a gaping security hole.  Has anyone else had this
> problem?  Any solutions, other than the obvious of having a shorter
> password?

This is not a security hole, this is Linux. You cannot have passwords longer
than 8 characters -- I mean, you can, but everthing over character #8 will
be ignored. The same applies for all user passwords, I think.

Regards,
Fathi