RE: [cobalt-users] Security Problem in Pass

["Rick" <rick@xxxxxxxxxxxx>]

thanx alot gerald
ive fixed the prob
:)

-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Gerald Waugh
Sent: Sunday, May 26, 2002 6:46 PM
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-users] Security Problem in Pass


On Saturday 25 May 2002 11:56 pm, Rick wrote:
> Hi,
> My password is 11 chars long.
> But, as long as i type in 8chars, it accepts me in to shell.
> I would like to know how do i fix this problem of mine.
>
You are probably running a RaQ2

You can get useradd and passwd commands to use MD5 passwords
but the GUI won't make an MD5 encrypted password, however the GUI will not
allow a login using 8 of a 16 character password.

I fixed mine by adding the following line to
/etc/login.defs
MD5_CRYPT_ENAB  yes
Then I changed all the users passwords via command line using passwd

I suppose one could write a cgi script that would allow users to change
their
passwords using 'passwd' command

I have not had any problem with this, no warranties, ymmv

--
Gerald Waugh
http://www.frontstreetnetworks.com :: Phone. [011] 203.785.0699
Front Street Networks LLC | SOHO Networks, Web Site Hosting, & Cobalt
Consulting
229 Front Street, Ste. #C, New Haven, CT, 06513-3203 United States:wq

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users