From: Kevin Sindhu (kevin.a.sindhu@mail.ac)
Date: Sun Oct 12 2003 - 16:04:00 EDT
Hiya folks,
I'm trying to find a solution to this, so I'm wondering if anyone can
help (will summarize). I'm trying to change the passwords from default
__crypt__ to blowfish on Solaris 9 08/03. However, I ^can^ change the
hashing to blowfish in /etc/shadow but I still can get authenticated
with only the first 8 chars. I've checked /etc/default/passwd and
changed PASSLENGTH to 16 and 256 with no avail. Is there a way in
Solaris 9 to have passwords longers than 8 chars (authentication from
files)?
Here are the details from the machine:
[root@chromium:~]# cat /etc/release
Solaris 9 8/03 s9s_u4wos_08a SPARC
Copyright 2003 Sun Microsystems, Inc. All Rights Reserved.
Use is subject to license terms.
Assembled 13 June 2003
[root@chromium:~]# uname -a
SunOS chromium 5.9 Generic_112233-08 sun4u sparc SUNW,Ultra-Enterprise
[root@chromium:~]# cat /etc/security/policy.conf | grep 2a
CRYPT_ALGORITHMS_ALLOW=1,2a,md5
CRYPT_DEFAULT=2a
[root@chromium:~]# sotruss passwd
passwd -> libc.so.1:*atexit(0xff3cd050, 0x24c00, 0x0)
<snip>
passwd -> libpam.so.1:*pam_authenticate(0x26ae0, 0x0,
0x25090)
passwd -> libc.so.1:*str2spwd(0x27868, 0x56, 0xffbfebec)
passwd -> libc.so.1:*calloc(0x1, 0x8, 0x26ae0)
passwd -> libc.so.1:*getpassphrase(0xffbfaa78, 0x0,
0xffffffff)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
USES's gettpassphrase() not getpass()
[root@chromium:~]# truss passwd
USES's crypt_bsdf.so.1
read(4, " #\n # C o p y r i g h".., 8192) = 250
close(4) = 0
stat("/usr/lib/security/crypt_bsdbf.so.1", 0xFFBFDC3C) = 0
open("/usr/lib/security/crypt_bsdbf.so.1", O_RDONLY) = 4
fstat(4, 0xFFBFDC3C) = 0
mmap(0x00000000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) =
0xFF2C0000
mmap(0x00000000, 90112, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) =
0xFEEB0000
mmap(0xFEEC4000, 659, PROT_READ|PROT_WRITE|PROT_EXEC,
MAP_PRIVATE|MAP_FIXED, 4, 16384) = 0xFEEC4000
munmap(0xFEEB4000, 65536) = 0
resolvepath("/usr/lib/security/crypt_bsdbf.so.1",
"/usr/lib/security/crypt_bsdbf.so.1", 1023) = 34
memcntl(0xFEEB0000, 1592, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(4) = 0
Reference:
1) http://docs.sun.com/db/doc/816-4883/6mb2joatc?a=view
2) http://bsdvault.net/sections.php?op=printpage&artid=89
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:27:16 EDT