Package: pam
Version: 1.1.1-2
quilt patch 007_modules_pam_unix adds a check to see if the password you
are changing to is the same as the old password. It contains this comment:
/* The traditional crypt() truncates passwords to 8 chars. It is
possible to circumvent the above checks by choosing an easy
8-char password and adding some random characters to it...
Example: "password$%^&*123". So check it again, this time
truncated to the maximum length. Idea from npasswd. --marekm */
So it appears to intentionally not allow the first 8 characters to
remain the same in case ONLY the first 8 characters actually matter.
This no longer seems to be the case, and so I think this second test
should be dropped.
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
