changing md5 hashed for sha

[Mike Tancsa]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 6/23/2012 9:37 AM, Christopher J. Ruwe wrote:
> For setting the dafault hash used to hash /etc/master.passwd, it 
> has been recommended changing md5 for something more secure in the 
> sense of being more expensive to crack.
> 
> The handbook describes the procedure used in 
> http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/crypt.html.
>
>
> 
Allegedly, hashes which were hashed with one of the sha-functions begin
> with the character $6$.
> 
> Afer having changed my /etc/login.conf accordingly and having
> reset the passwords, the given there is not md5 anymore (I have
> tried with md5), but does not begin with the character $6$, but, as
> md5, with $1$, which is supposed to be md5-hashed.
> 
> I fear I am a bit dense here, what am I getting wrong?

Are you sure you ran
cap_mkdb /etc/login.conf
after adjusting the values in login.conf ?

Also, this will only work on relatively recent versions of FreeBSD.

	---Mike


- -- 
- -------------------
Mike Tancsa, tel +1 519 651 3400
Sentex Communications, mike at sentex.net
Providing Internet services since 1994 www.sentex.net
Cambridge, Ontario Canada   http://www.tancsa.com/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJP551fAAoJEJXHwM2kc8rXS34H/j+uxWq8Pa9j0iXpehObx2iY
LeeCZx7YbSv9AwGVHy/gTRtYP1uStBNn79oKV0ANSyjOT3F7l1MuygfJAqfXIKDm
WdN4KX2D3tpAjVMdce1zX2rSy4OtXLYXpBXTiGmP2d/erAEtE9B8gJ8GQWDh0gWz
14CkQyefcF2YvmepSj3+9P69EzjlEm6vDMPyY/nrMlJcT8+ujtZX325+kQzQiiFX
FFasbqekazHCUnKGZZY9arY01AxPKg5e2PXFZPQf3qQy3jHqOupnM3ei3D39O9aV
gqJ/k2XDPjZYqAIy0gyPi99q4fCueYQFQrm2tyeTkV6+OxM8kdD5czx/FvySiG8=
=FVSP
-----END PGP SIGNATURE-----