*BSD News Article 94768


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!munnari.OZ.AU!news.ecn.uoknor.edu!feed1.news.erols.com!howland.erols.net!cs.utexas.edu!data.ramona.vix.com!nnrp1.crl.com!not-for-mail
From: "Jordan K. Hubbard" <jkh@FreeBSD.org>
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: master.passwd problem
Date: Wed, 30 Apr 1997 03:11:25 -0700
Organization: Walnut Creek CDROM
Lines: 31
Message-ID: <33671ACD.15FB7483@FreeBSD.org>
References: <roark-2904971742230001@design.goldstag.com>
NNTP-Posting-Host: time.cdrom.com
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 3.01 (X11; I; FreeBSD 2.2-STABLE i386)
To: Michael Roark <roark@bulloch.com>
Xref: euryale.cc.adfa.oz.au comp.unix.bsd.freebsd.misc:40003


Michael Roark wrote:
> 
> Our company is currently in the middle of moving from one service provider
> to another and have run into a snag. Both servers, old and new, are
> running FreeBSD, but the old one uses a longer encryption string in

Arghhh..  version information please!  *Which* version of FreeBSD? :)

> the master.passwd file than the new one. We were told to rebuild the kernel
> with the extra encryption feature. The only problem is that we don't know
> what to build into the kernel to use the feature.

Who told you that?  We'd like a word with them. :-)

When you say "longer" I'm also assuming that you're referring to MD5
style password strings (tip-off: they all start with "$1") vs the more
traditional DES passwords.  Neither requires any form of special kernel
support and what you need on a DES system is simply the des distribution
loaded.  If you did not already load this at installation time, it's
also no problem at all - simply grab the des distribution for your
release from ftp.freebsd.org if you're in the U.S/Canada or
ftp.internat.freebsd.org if you're outside.  Run the des distribution's
`install.sh' script ("sh install.sh" works well) and you're in business.

The longer MD5 passwords are always supported by default and, assuming a
reasonably recent FreeBSD version (2.1.7 or 2.2.x), you can use both in
the same password file if you have the DES bits loaded - the system is
smart enough to tell the two types apart when decrypting them.
-- 
- Jordan Hubbard
  FreeBSD core team / Walnut Creek CDROM.