On Mon, 2005-03-07 at 15:34 -0300, Antonio Souto wrote:

> You can happily login using only the first 8 characters of your
> password and even type whatever you want after the 8th!

> Desperate for hints.

Its to do with what the passwords are encrypted with in /etc/shadow
(or /etc/passwd), think it defaults to DES.  

Not sure about yellow pages, but looking at system_auth on my pc the
pam_unix line has it to be encrypted in MD5.

password   sufficient   /lib/security/pam_unix.so nullok md5 shadow
use_authtok

/usr/share/doc/pam-0.77-r6/modules has some docs that you might be
helpful to you...

all the best,
Richard...

--
[email protected] mailing list

Reply via email to