Re: [cobalt-users] Security Problem in Pass

[Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>]

On Saturday 25 May 2002 11:56 pm, Rick wrote:
> Hi,
> My password is 11 chars long.
> But, as long as i type in 8chars, it accepts me in to shell.
> I would like to know how do i fix this problem of mine.
>
You are probably running a RaQ2

You can get useradd and passwd commands to use MD5 passwords 
but the GUI won't make an MD5 encrypted password, however the GUI will not 
allow a login using 8 of a 16 character password.

I fixed mine by adding the following line to 
/etc/login.defs
MD5_CRYPT_ENAB  yes
Then I changed all the users passwords via command line using passwd

I suppose one could write a cgi script that would allow users to change their 
passwords using 'passwd' command

I have not had any problem with this, no warranties, ymmv

-- 
Gerald Waugh 
http://www.frontstreetnetworks.com :: Phone. [011] 203.785.0699
Front Street Networks LLC | SOHO Networks, Web Site Hosting, & Cobalt 
Consulting
229 Front Street, Ste. #C, New Haven, CT, 06513-3203 United States:wq