[ale] crypt? passwd? faulty package?

[Jerry Z. Yu]

	perl's crypt() just call the crypt() in libc. GNU libc's crypt() 
is overloaded for different salts. MD5-hashed password use a salt of 
strange format, something like like $1$<8-char-string>$. 

So, you can obtain the encrypted password with the same PERLet, just using 
different salts ( 2-char for plain/old crypt(), and $1$<8-char-string>$ 
for md5-hashed version.

perl -e "print crypt('PLAINTEXT', '\$1\$sY/OcC.O$').\"\n\"";

BTW, as far I can recall from a crypto article I read a long while back 
... the salts are not really of picking. It results from some gathered 
system randomness after several times of one-way message digest/hash 
calculation 


 On Thu, 17 Oct 2002, Dow Hurst wrote:

#How would md5 based passwords figure into the use of the PERLet you've 
#provided?  This obviously could be a good ALE talk sometime!
#Dow
#
#
#Jerry Z. Yu wrote:
#
#>	yes. it should encrypted by crypt(). assume you are in a batch 
#>situation, you can pick a pass in plaintext, then run a PERLet, as such
#>
#>perl -e "print crypt('PASSPLAINTEXT', 'Oz').\"\n\"";
#>to get crypted version, with "Oz" as the 2-character salt.
#>
#>	If you are not in a batch situation, you'd do fine by issuing 
#>"passwd regularUser && passwd -f regularUser" as root. 
#>
#>On Thu, 17 Oct 2002, Stephen Turner wrote:
#>
#>#am i supposed to get a passwd from crypt or something? im sorry, i must be
#>#a complete idiot or have a faulty package somewhere, i just cant get a new
#>#user to work! ive read man pages and tried the options, even tried
#>#different orders as if that might matter, i dont wanna run the system in
#>#root but im thinking ive got no choice! i can allways su into my new users
#>#but i cant change thier passwords cause they dont seem to be valid, which
#>#stops me from logging in as them.
#>#
#>#__________________________________________________
#>#Do you Yahoo!?
#>#Faith Hill - Exclusive Performances, Videos & More
#>#http://faith.yahoo.com
#>#
#>#---
#>#This message has been sent through the ALE general discussion list.
#>#See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
#>#sent to listmaster at ale dot org.
#>#
#>
#>Jerry Z. Yu				+1-404-487-8544 (O)
#>systems engineer			z.yu at voicecom.com
#>is support, voicecom, llc		www.voicecom.com
#>
#>
#>---
#>This message has been sent through the ALE general discussion list.
#>See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
#>sent to listmaster at ale dot org.
#>
#>
#>  
#>
#
#-- 
#__________________________________________________________
#Dow Hurst                  Office: 770-499-3428
#Systems Support Specialist    Fax: 770-423-6744
#1000 Chastain Rd., Bldg. 12
#Chemistry Department SC428  Email:dhurst at kennesaw.edu
#Kennesaw State University         Dow.Hurst at mindspring.com
#Kennesaw, GA 30144
#*********************************
#*Computational Chemistry is fun!*
#*********************************
#
#
#
#---
#This message has been sent through the ALE general discussion list.
#See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
#sent to listmaster at ale dot org.
#

Jerry Z. Yu				+1-404-487-8544 (O)
systems engineer			z.yu at voicecom.com
is support, voicecom, llc		www.voicecom.com


---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.