Go Back   openSUSE Forums > Archives > SLS Archives > ARCHIVES - SuSE Linux > ARCHIVES - Network & Security > ARCHIVES - Security
Forums FAQ Members List Search Today's Posts Mark Forums Read


ARCHIVES - Security Want to know if you should really apply the latest kernel patch? Want to know how to configure your firewall? Discuss any Security related topics in here!

 
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 10-Apr-2008, 15:54
edortizq
Guest
 
Posts: n/a
Default

I'm installing a SLES 10 with LDAP+Samba. When I create users the max password length allowed is 8 characters, it's not enough for me. Is there a way to allow more than 8 characters in password???
Please your help experts.
Thank you
  #2 (permalink)  
Old 10-Apr-2008, 19:37
G0NZ0
Guest
 
Posts: n/a
Default

hmm it sounds really weird , are you sure about this limit? Are you sure the message says that the MAX and not the MIN password length is 8?
here for instance http://www.ratliff.net/blog/index.php/2007...assword-length/
the max pass length for SLED10 is reported to be 127 chars

Quote:
Maximum Cleartext Password Length:
RHEL5.1: 79 (5.1 limit imposed by passwd)
SLES10: 127 (limit imposed by passwd......[/b]
can you please paste here the exact error message you get if you try with a pwd longer than 8 chars?
  #3 (permalink)  
Old 11-Apr-2008, 13:54
edortizq
Guest
 
Posts: n/a
Default

Quote:
hmm it sounds really weird , are you sure about this limit? Are you sure the message says that the MAX and not the MIN password length is 8?
here for instance http://www.ratliff.net/blog/index.php/2007...assword-length/
the max pass length for SLED10 is reported to be 127 chars
can you please paste here the exact error message you get if you try with a pwd longer than 8 chars?
[/b]
I'm completely sure!!!, it´s happens when I create the user accounts, I think that maybe there is something about password encryption Any ideas???
  #4 (permalink)  
Old 18-Apr-2008, 17:24
edortizq
Guest
 
Posts: n/a
Default

Quote:
I'm completely sure!!!, it´s happens when I create the user accounts, I think that maybe there is something about password encryption Any ideas???
[/b]
Thanks for your answer. I've tried with DES, blowfish and MD5 encryption method, in my LDAP server configuration I've tested SSHA and CRYPT encryption methods.
The message when I try to change using Yast is
"La contraseña es demasiado larga para el método de codificación actual. Desea acortarla a 8 caracteres?"
In english it means something like that:
"The password is too LONG for the actual coding method. Do you like to truncate it to 8 characters?"
If I change the password in the terminal window using passwd command I got those messages:

Changing password for xxxxxxx
Enter login (Ldap) password: ********
New password: *******
Password will be truncated to 8 characters
Bad password: it is based on a dictionary word
Reenter new password: ********
LDAP password information changed for xxxxx

Please somebody help!!
  #5 (permalink)  
Old 18-Apr-2008, 19:25
FeatherMonkey
Guest
 
Posts: n/a
Default

Certainly not the best person to help but firstly I thought this would be pam, but don't believe the default would be 8, I suspect its a setting around pam or the authentication method being used.

http://www.snow.nl/dist/htmlc/ch10s04.html at bottom that does have a max password length but I really don't believe this will be the cause.

I've also found this http://publib.boulder.ibm.com/infocenter/p...mds4/passwd.htm
Which has this little snippet,

The passwd command uses only the first eight characters of your password for local and NIS passwords

Then finally are you using the official docs don't they help?

http://www.novell.com/documentation/sles10...client_conf_mod
  #6 (permalink)  
Old 28-Apr-2008, 16:39
edortizq
Guest
 
Posts: n/a
Default

I still can't solve this problem. Any ideas?? Please!! I really need some expert help!!
  #7 (permalink)  
Old 28-Apr-2008, 20:03
broch
Guest
 
Posts: n/a
Default

you have problem with LDAP (crypt uses the DES hash which is used in /etc/passwd, and
this hash only considers the first 8 characters of the password.) not with suse.
use blowfish or md5 instead (both 255 characters allowed)
temember to use pdbedit
to export this to LDAP
pdbedit -y -i tdbsam -e ldapsam
 

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




 

Search Engine Friendly URLs by vBSEO 3.3.0 RC2