Subject: Re: "daily insecurity output" annoyance
To: Perry E. Metzger <perry@wasabisystems.com>
From: Andrew Brown <atatat@atatdot.net>
List: tech-userlevel
Date: 01/25/2001 15:54:58
>>> >Right now, as it stands, /etc/security prints that message out no
>>> >matter what if field two of the password file is not thirteen or
>>> >twenty characters long. (What is twenty characters for?)
>>> 
>>> 20 characters is for md5 based passwords.  you're using current, so a
>>> quick look at passwd.conf (sorry, there's no example in the tree)
>>> should give you an idea of this.

minor correction.  :)

since i know very little about this, i *assumed* that the 20 was for
md5, but it's not.  it's for "newsalt" passwords.  they're 20
characters long.  md5 password are 34 characters long, and
/etc/security complains about them.

-- 
|-----< "CODE WARRIOR" >-----|
codewarrior@daemon.org             * "ah!  i see you have the internet
twofsonet@graffiti.com (Andrew Brown)                that goes *ping*!"
andrew@crossbar.com       * "information is power -- share the wealth."