Bugtraq mailing list archives

Rh 6.1 initial root password encryption


From: ken () OPTUSNET COM AU (Ken Barber)
Date: Fri, 21 Jan 2000 10:57:45 +1100


The initial root password that is set in /etc/shadow by the Red Hat 6.1
installation program is in crypt-style, not MD5. This occurs even if you
have chosen MD5 encryption in the initial setup of RH.

A change of password _after_ initial setup changes the encryption to
MD5.

What does this mean? A seemingly long root password set by the
administrator is actually truncated to 8 characters.

ken@.


Current thread: