changing md5 hashed for sha

[Christopher J. Ruwe]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

oops ... forwarding to the list also


- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, 24 Jun 2012 19:06:07 -0400
Mike Tancsa <mike at sentex.net> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 6/23/2012 9:37 AM, Christopher J. Ruwe wrote:
> > For setting the dafault hash used to hash /etc/master.passwd, it 
> > has been recommended changing md5 for something more secure in the 
> > sense of being more expensive to crack.
> > 
> > The handbook describes the procedure used in 
> > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/crypt.html.
> >
> >
> > 
> Allegedly, hashes which were hashed with one of the sha-functions
> begin
> > with the character $6$.
> > 
> > Afer having changed my /etc/login.conf accordingly and having
> > reset the passwords, the given there is not md5 anymore (I have
> > tried with md5), but does not begin with the character $6$, but, as
> > md5, with $1$, which is supposed to be md5-hashed.
> > 
> > I fear I am a bit dense here, what am I getting wrong?
> 
> Are you sure you ran
> cap_mkdb /etc/login.conf
> after adjusting the values in login.conf ?
> 
> Also, this will only work on relatively recent versions of FreeBSD.
> 
> 	---Mike
> 
> 
> - -- 
> - -------------------
> Mike Tancsa, tel +1 519 651 3400
> Sentex Communications, mike at sentex.net
> Providing Internet services since 1994 www.sentex.net
> Cambridge, Ontario Canada   http://www.tancsa.com/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.14 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
> 
> iQEcBAEBAgAGBQJP551fAAoJEJXHwM2kc8rXS34H/j+uxWq8Pa9j0iXpehObx2iY
> LeeCZx7YbSv9AwGVHy/gTRtYP1uStBNn79oKV0ANSyjOT3F7l1MuygfJAqfXIKDm
> WdN4KX2D3tpAjVMdce1zX2rSy4OtXLYXpBXTiGmP2d/erAEtE9B8gJ8GQWDh0gWz
> 14CkQyefcF2YvmepSj3+9P69EzjlEm6vDMPyY/nrMlJcT8+ujtZX325+kQzQiiFX
> FFasbqekazHCUnKGZZY9arY01AxPKg5e2PXFZPQf3qQy3jHqOupnM3ei3D39O9aV
> gqJ/k2XDPjZYqAIy0gyPi99q4fCueYQFQrm2tyeTkV6+OxM8kdD5czx/FvySiG8=
> =FVSP
> -----END PGP SIGNATURE-----

Ahhh .... I am sure I did not run cap_mkdb. Didn't say so in the
relevant section of the handbook and I was to lazy to thooughly read the
manpage. Thanks, I have the correct hashes now.

Cheers,
- - -- 
Christopher
TZ: GMT + 2h
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (FreeBSD)

iQIcBAEBAgAGBQJP6KvdAAoJEJTIKW/o3iwUATEQAO0tDflkfluM4wTiUvhFvN31
PLEZKGcOjDfVnXaIqRuu5D1pPWc532xeST2H3mLJVFktjatrx/LbEy7O5w3diB1J
zMM/SdiiSaIGyhSdWwTEgsGpd1jhG31RWGWtVLFzNMvfBpk/peiAbOwBcYqnKw85
zJOfDFLFcAkdP9jmiXF16iKCYcANK9R+2l0mCJ4qEdV6iIn8KAtrNxzS4i0ICzZB
jBPO+bVbNkU3S7U/EXm449EvOFk+tVLxZcny3hyYWyY9ccH9Z7kyXrPRrb7cspHp
iAKmWsJnntAlp7ogFYdjdOvbCeKfgtCGBnj8K9v7XYEs/KjUmschXYeIf4STsDL2
d7dLOMYz2fqYrH9toM0AvEPJuJR6cXm8XmLco7eBd2tjhdocSQ4t5nQXO/EhEGUs
ESJ+ibcGtpmbad8vY0z88AIUeyrq1pQ9Ve+ceu0uQ63UTnZb3Zfu8f3PsdtCzV/2
jDYmmB1f9gjPp/NEZXPlQT7r1fTlw2IDEmU/JJEghBUIiTVuWtOvkCqG9ErYIdJK
CWXV7slHlQ0d0ssCjL6wukTKpL0lS03YsvSYgoDee1h9fhLqaYpzhr+rduzxS79z
q8vyaz/SRUlebTcHRZMSW9+FA/eJ3NHEv6y+d0w08OrhqmOvOxpo1dKEBdWo/JTN
qP89RAUQLMfsp5NgU61o
=QvC/
- -----END PGP SIGNATURE-----
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (FreeBSD)
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=P3wE
-----END PGP SIGNATURE-----