Bug 22667

Summary:	yppasswd creates DES passwords
Product:	[Retired] Red Hat Linux	Reporter:	Gerald Teschl <gt>
Component:	yp-tools	Assignee:	Alexander Larsson <alexl>
Status:	CLOSED RAWHIDE	QA Contact:	Aaron Brown <abrown>
Severity:	medium	Docs Contact:
Priority:	high
Version:	7.1	CC:	dr, jarno.huuskonen
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	i386
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2002-03-22 17:24:57 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Gerald Teschl 2000-12-21 15:20:20 UTC

yppasswd creates DES encrypted passwords even if md5 is set and even if
the old password was md5.

Comment 1 Bill Nottingham 2000-12-22 05:29:22 UTC

*** Bug 22674 has been marked as a duplicate of this bug. ***

Comment 2 Gerald Teschl 2001-01-17 18:47:17 UTC

Since the ordinary passwd does it right I recommend to remove yppasswd and
replace it
by a link to passwd.

Comment 3 Alexander Larsson 2002-03-21 15:44:36 UTC

*** Bug 3243 has been marked as a duplicate of this bug. ***

Comment 4 Alexander Larsson 2002-03-22 17:24:52 UTC

I think passwd may be broken actually. I think it looks at the local
configuration and uses md5 if it is used there. setting an md5 password on the
nis server may break login from non-md5 capable machines.

I agree that we should set a md5 password if the previous one is md5 though.

Comment 5 Alexander Larsson 2002-03-25 16:19:42 UTC

yp-tools-2.6-4 sets a MD5 password if the old one was MD5. This is the best we
can do I think.

Comment 6 Doug Sibley 2003-09-15 12:52:53 UTC

When I try to add a new already crypted password in MD5 format $1$<salt>$<hash>
via useradd -p I get a blank entry in my nis shadow table. Certianly this is an
easy enough to fix bug.