More on fP 6.0 features

[Bill Vermillion]

press any key to reboot  -oops- Fairlight said on Thu, Oct 28 20:28  

> Simon--er, no...it was Bill Vermillion--said:
> > On Thu, Oct 28 13:06 , while impersonating an expert on the internet, 
> > Fairlight sent this to stdout: 
> > 
> > > Yo, homey, in case you don' be listenin', Bill Vermillion done said:
> > > > 
> > > > AFIK only DES, MD5 and Blowfish are in the password files
> > > > in BSD.   A definition of Extended DES fails to come to mind
> > > > at the moment.
> > 
> > > On a FBSD 4.7 system on which I read the docs, man passwd
> > > documented Extended DES, which uses _ as the leading character
> > > before the salt.

> > Hm. It's not in the current 4.10 doc under either man 1 passwd
> > or man 5 passwd.

> > Double hm.

> > The login.conf file shows that only three types of password
> > formats are used there.  The keywords being 'des' 'md5' or 'blf'.

> I looked, and it took me forever to find it again too. man 3
> crypt. It's all there--documentation of all three formats.
> I referenced it when writing something a few weeks back. I
> just don't know if the password system itself honours it,
> even though the function does. I drew the inference that it
> -should-, but that may be contraindicated by man login.conf.

Ah.  I though I had looked at man 3 crypt before but I missed
the 'extended' 'modular' 'traditional' section.

> You tell me. But it -does- exist as an encryption method on
> FBSD. Whether or not it can be used in the password system is
> questionable. Test it and let me know...I don't dare putz with
> this FBSD box I have access to. :)

>From what I see in the man for login.conf only the 3 tokens
are used.

I had run 'glimpse' on the source tree and the logical search
was on 'blf' as that would tend to be in lower use than 'des'
which could match in words like 'description'.  Both md5 and des
said my query would search 98% of the database.

There is no way I know of to tell the password to encrypt in
anything other than the 3 - but I do see the references.

Thinking about it the password files probably don't need
the extended encruption - but they would/could be of use elsewhere.

And there are a ton of files with 'login' in them in so many
subtrees.  I'll not bother to look, and be content with the
3  usual modes.

Bill
-- 
Bill Vermillion - bv @ wjv . com