• Bug#262143: Doesn't accept passwords which are 1 character long

    From Enrico Zini@1:229/2 to Gerrit Pape on Tue Aug 17 02:30:11 2004
    From: [email protected]

    On Sun, Aug 01, 2004 at 12:40:21PM +0000, Gerrit Pape wrote:

    thanks for packaging fgetty. I find it very simple and useful; however,
    I discovered that if the user's password is 1 character long, fgetty
    denies the login even if the password is correct. getty on the other
    hand logs in successfully.
    Hmm, I cannot reproduce this, tested on powerpc and i386. Do you
    possibly use a different /bin/checkpassword, or
    /bin/checkpassword.login?

    Hello,

    In the end, I tracked the problem down: that user account had the
    password in /etc/passwd and an empty password in /etc/shadow. Puttin
    'x' in /etc/passwd and resetting its password with passwd <user> solved
    the problem.

    To reproduce, add:

    test:$1$szfhi.PZ$Cwa1YBa6uOw/VxaJjaCwW.:3000:3000:Test:/:/bin/bash

    to /etc/passwd and

    test:::::::

    to /etc/shadow.

    Then, as root:

    # fgetty-login test
    test's password:
    #

    (note that login didn't succeed and I'm still root)


    Ciao,

    Enrico

    --
    GPG key: 1024D/797EBFAB 2000-12-05 Enrico Zini <[email protected]>

    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.2.5 (GNU/Linux)

    iD8DBQFBIUvR9LSwzHl+v6sRAk3FAJ9spnB8b1J6fPDzq1FjT0jkawfuEACcDOUE PzS4Yw6U5Pu431Coc2n+Y8A=
    =8Lij
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)