From nobody@FreeBSD.org  Wed Dec 13 18:35:53 2000
Return-Path: <nobody@FreeBSD.org>
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP id 0865637B400
	for <freebsd-gnats-submit@FreeBSD.org>; Wed, 13 Dec 2000 18:35:52 -0800 (PST)
Received: (from nobody@localhost)
	by freefall.freebsd.org (8.11.1/8.11.1) id eBE2Zq794782;
	Wed, 13 Dec 2000 18:35:52 -0800 (PST)
	(envelope-from nobody)
Message-Id: <200012140235.eBE2Zq794782@freefall.freebsd.org>
Date: Wed, 13 Dec 2000 18:35:52 -0800 (PST)
From: akenaton@club-internet.fr
Sender: nobody@FreeBSD.org
To: freebsd-gnats-submit@FreeBSD.org
Subject: Post 4.2 RELEASE errata problem about password_format problem and libdescrypt
X-Send-Pr-Version: www-1.0

>Number:         23537
>Category:       conf
>Synopsis:       Post 4.2 RELEASE errata problem about password_format problem and libdescrypt
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Dec 13 18:40:00 PST 2000
>Closed-Date:    Wed Jan 16 14:42:58 PST 2002
>Last-Modified:  Wed Jan 16 14:43:12 PST 2002
>Originator:     Fabrice Aneche
>Release:        4.2-RELEASE
>Organization:
nunix
>Environment:
FreeBSD kephren.in.nunix.net 4.2-RELEASE FreeBSD 4.2-RELEASE #1: Fri Nov 24 15:45:24 CET 2000     akh@kephren.in.nunix.net:/usr/src/sys/compile/KEPHREN  i386
>Description:
crypt_get_format() return des everytime ... 
and it's the same if I put :passwd_format=md5:\ in login.conf.

So it seems I have the inverse problem of the errata for 4.2.

(Using crypt_set_format("md5"); works so I can generate md5 password ...) but doesn't seems to be my default.
,
Something strange if I run ls /usr/lib/libcrypt.so
lrwxrwxrwx  1 root  wheel  - 14 Nov 23 20:02 /usr/lib/libcrypt.so@ -> libdescrypt.so

Why is this file is linked to des, if 4.2 is md5 enable by default ??

Handbooks says:
If you have installed the DES-capable crypt library libdescrypt (e.g. by installing the "crypto" distribution), then which password format will be used for new passwords is controlled by the ``passwd_format'' login
capability in /etc/login.conf, which takes values of either ``des'' or ``md5''. See the login.conf(5) manpage for more information about login capabilities.

This doesn't works.


>How-To-Repeat:
Just install with crypto to have ssh...

This bug seems to be a problem in installation, choosing crypto at install
seems to link libdescrypt by default (this was normal in old freebsd installation but shouldn't now) , which is not said when installing, and breaks all the mechanism
gived by login.conf to switch to another crypt mode.
>Fix:
none except  manually link to the others libraries .

>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->feedback 
State-Changed-By: dd 
State-Changed-When: Thu Sep 6 06:10:56 PDT 2001 
State-Changed-Why:  
This seems to be fixed in more recent releases.  Can you confirm? 

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=23537 
State-Changed-From-To: feedback->closed 
State-Changed-By: ashp 
State-Changed-When: Wed Jan 16 14:42:58 PST 2002 
State-Changed-Why:  
Reported fixed, and no feedback in months. 

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=23537 
>Unformatted:
