#21733: password prompt in luci accepting incomplete password
--------------------------------+------------------------
Reporter: brennangalletly@… | Owner: developers
Type: defect | Status: closed
Priority: normal | Milestone:
Component: packages | Version: Trunk
Resolution: worksforme | Keywords: password
--------------------------------+------------------------
Comment (by jow):
Ok, here's what happened:
Due to
https://dev.openwrt.org/browser/trunk/toolchain/musl/patches/901-crypt_size_hack.patch
we do not support sha256 in musl's `crypt()` therefore it silently reverts
to the `DES` algorithm which only regards the forst six byte of input.
You can solve this by changing the busybox password crypt algorithm back
to md5.
We'll change the patch to let `crypt()` fail with `ENOSYS` in such a case.
--
Ticket URL: <https://dev.openwrt.org/ticket/21733#comment:5>
OpenWrt <http://openwrt.org>
Opensource Wireless Router Technology
_______________________________________________
openwrt-tickets mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-tickets
