Re: DES from source?

1999-04-07 Thread Mark Murray
"David O'Brien" wrote: > Actually a committed (forgot who) tried to overhall the crypt stuff a few > months ago and it blew up in his face. I don't think anyone has changed > since. A shame. Brandon Gillespie. I have a copy of his code (almost) ready-to-go. M -- Mark Murray Join the anti-SPAM

Re: DES from source?

1999-04-07 Thread David O'Brien
> Of course, passwd(1) should ideally be able to be told to ignore the old > method too - it looks like /etc/auth.conf is in the beginnings of this. When I proposed changing this and adding a knob in auth.conf, it was said PAM is really the place for this. Actually a committed (forgot who) tried

Re: DES from source?

1999-04-07 Thread Anders Andersson
* Peter Wemm (pe...@netplex.com.au) [990407 11:07]: > > Unfortunately, passwd(1) will helpfully maintain the same encryption > method as was used before. ie: if a user has a MD5 passwd, the new one > will also be MD5, regardless of the default. > > What I've wanted to do for some time is have a

Re: DES from source?

1999-04-07 Thread Dag-Erling Smorgrav
Anders Andersson writes: > Maybe I just should purify my network to loose those DES boxes and run > FreeBSD md5 native only, that would be more secure and faster right? More secure and *slower*. When it comes to password hashing, slower is better, because it makes brute force and dictionary attac

Re: DES from source?

1999-04-07 Thread Peter Wemm
Anders Andersson wrote: > * Dag-Erling Smorgrav (d...@flood.ping.uio.no) [990403 17:33]: > > > Existing MD5 passwords will still work. New users will get DES > > passwords. > > Thanks, but how do I get all my "old" users to use DES crypted passwords? Unfortunately, passwd(1) will helpfully maint

Re: DES from source?

1999-04-07 Thread adrian
Anders Andersson writes: >* Dag-Erling Smorgrav (d...@flood.ping.uio.no) [990403 17:33]: > >> Existing MD5 passwords will still work. New users will get DES >> passwords. > >Thanks, but how do I get all my "old" users to use DES crypted passwords? Well, the short answer is 'you get them to change

Re: DES from source?

1999-04-07 Thread Anders Andersson
* Dag-Erling Smorgrav (d...@flood.ping.uio.no) [990403 17:33]: > Existing MD5 passwords will still work. New users will get DES > passwords. Thanks, but how do I get all my "old" users to use DES crypted passwords? Maybe I just should purify my network to loose those DES boxes and run FreeBSD md

crypt algorithms (was Re: DES from source?)

1999-04-03 Thread Matthew D. Fuller
On Sat, Apr 03, 1999 at 05:34:06PM +0200, a little birdie told me that Dag-Erling Smorgrav remarked > > > Do I need to change all passwd with 'passwd {user}' to use DES passwd crypt? > > Existing MD5 passwords will still work. New users will get DES > passwords. Did we ever hash out a mechanism

Re: DES from source?

1999-04-03 Thread Dag-Erling Smorgrav
Hi Synker! Anders Andersson writes: > I am looking for the correct way of installing DES (crypt) from sources. *grumble* why do people keep wanting to install me? ;) > I plan to do 'make world' and from what I can tell I need to: > > ln -fs libdescrypt.so libcrypt.so > ln -fs libdescrypt.so.2

Re: DES from source?

1999-04-03 Thread Mark Murray
Anders Andersson wrote: > I am looking for the correct way of installing DES (crypt) from sources. Nothing to do, except for... > From the beginning I install most of my boxes from ftp and with the > "minimal" option. After that I cvsup and do make world to fit my needs. > > On this test box I