On Aug 27, 2004, at 10:11 AM, Jeremy Kister wrote:
From the Solaris box:
max> ./vchkpw.pl
Email Address: [EMAIL PROTECTED]
Password: asdf
test: $1VUyx7YfKO2w - crypt: $1VUyx7YfKO2w
Correct Password

From the FreeBSD box:
penny> ./vchkpw.pl
Email Address: [EMAIL PROTECTED]
Password: asdf
test: $125a08DVKgFI - crypt: $1VUyx7YfKO2w
Incorrect Password

According to my docs for crypt(), '$' is not a valid salt character -- "0-9a-zA-Z./" are the only ones allowed, so using an invalid salt will have unpredictable results.


What was used to generate the $1 salt for the original crypted passwords?

--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
Info on the Sniffter hand-held Network Tester: http://sniffter.com/



Reply via email to