Re: allowing an @ sybol in a password
- From: Doug Freyburger <dfreybur@xxxxxxxxx>
- Date: Thu, 31 Jan 2008 12:24:49 -0800 (PST)
Thorbjoern Ravn Andersen <nospam0...@xxxxxxxxx> wrote:
Bryan <bryan.engebret...@xxxxxxxx> writes:
for this, or a config file that I can change to allow an @ in the
password? Using HP-UX B.11.11 for an OS. Much appreciated,
It appears that you have teletype settings.
From http://hell.org.ua/Docs/oreilly/unix/upt/ch41_02.htm
"Teletypes were printers, incapable of erasing, so the erase and kill
characters were just ordinary printing characters, namely # and @."
So you should have a similar problem with hashmarks in your passwords :)
Yes. That's a classic HPUX problem - The initial password prompt
uses the original default settings because there isn't any other
authoritative definition at the time. Putting it somewhere like
/etc/profile doesn't get referenced until much later in the process.
I would rather they pick some modern defaults but I understand why
they chose the authoritative option.
The fun part comes in when passwords are asked for in various
environments. If you already have a full environment set up with a
running shell, settings for character and line erase and so on, it
will use your current environment. At which time both @ and #
work in passwords. The most common time is "su". But if you're
at a login: prompt on the console or in a login issued by init any
other way, then there's no default set and it uses @ and #.
The primary solution is to know this about HPUX and never use
either character in your passwords. It's PAM module should
forbid them.
The secondary solution is to know when the password prompt
was issued with an environment or not and escape with either
backslash or control-V. This is more of a workaround once
someone already made the initial mistake. It should be corrected
ASAP to a working password.
In a mixed OS environment tell users not to use @ or #.
.
- References:
- allowing an @ sybol in a password
- From: Bryan
- Re: allowing an @ sybol in a password
- From: Thorbjoern Ravn Andersen
- allowing an @ sybol in a password
- Prev by Date: Re: allowing an @ sybol in a password
- Next by Date: Re: allowing an @ sybol in a password
- Previous by thread: Re: allowing an @ sybol in a password
- Next by thread: Re: allowing an @ sybol in a password
- Index(es):
Relevant Pages
|
