Re: Rh 6.1 initial root password encryption

From: Fabian Kroenner (escherat_private)
Date: Sat Jan 22 2000 - 03:42:51 PST

Next message: Stefan Laudat: "NIS security advisory : password method downgrade"

Previous message: Dino Amato: "stream.c"
Maybe in reply to: Ken Barber: "Rh 6.1 initial root password encryption"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Fri, Jan 21, 2000 at 10:57:45AM +1100, Ken Barber wrote:
> The initial root password that is set in /etc/shadow by the Red Hat 6.1
> installation program is in crypt-style, not MD5. This occurs even if you
> have chosen MD5 encryption in the initial setup of RH.

Hi,

this has been reported to Red Hat Oct, 10th 1999.

The Bugzilla-ID is 5542 - see:
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=5542
to find out more about the status of the bug.

I suspect that it does affect all (user) accouts created during
installation with the new anaconda-installer. If I recall correctly I
have observed this in the previous (Red Hat 6.0) installer as well.
Both ask for the root password, before setting the encryption-options.

I hope they modify the installer properly, since it cannot be 'fixed'
through a package update. Using passwd after install is the only way
to do it, correct me if I am wrong.

Regards...
Fabian Kroenner <escherat_private>
__________________________________________________________________
GnuPG Public Key available: http://www.spoiled.org/~escher/.pubkey
Key Fingerprint: 2311 6D40 FE1F 9D94 77AD 20CA 2F38 AD9E 19AB 6A00

Next message: Stefan Laudat: "NIS security advisory : password method downgrade"
Previous message: Dino Amato: "stream.c"
Maybe in reply to: Ken Barber: "Rh 6.1 initial root password encryption"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:30:08 PDT