Re: FreeBSD maximum password length

2013-06-18 Thread takCoder
Thank you all for the points you mentioned around this topic. On Mon, Jun 17, 2013 at 3:44 PM, Mark Felder f...@feld.me wrote: There isn't a max password length as far as I'm aware, ... On Jun 17, 2013, at 7:47 AM, Eduardo Morras wrote: If I remember well, any password longer than default

FreeBSD maximum password length

2013-06-17 Thread takCoder
Hi Everyone, As i googled it, there is no maximum limitations for users' password length by default.. But we may use *pam_passwdqc* module with *max* option to check it when required. And i've heard that no-maximum-limits for passwords length is only possible when we keep them in encrypted form

Re: FreeBSD maximum password length

2013-06-17 Thread Mark Felder
There isn't a max password length as far as I'm aware, but there is a max username length that drive me insane sometimes. I should really file a PR about that... ___ freebsd-questions@freebsd.org mailing list

Re: FreeBSD maximum password length

2013-06-17 Thread takCoder
Thank you, Mark, for your helpful answer :) yes, i am aware of the max username length of 16characters.. I just wanted to become sure about password max length, cause i need to moderate it in my self-built user interface.. Thank you again :) On Mon, Jun 17, 2013 at 3:44 PM, Mark Felder

Re: FreeBSD maximum password length

2013-06-17 Thread Lowell Gilbert
takCoder tak.offic...@gmail.com writes: As i googled it, there is no maximum limitations for users' password length by default.. But we may use *pam_passwdqc* module with *max* option to check it when required. And i've heard that no-maximum-limits for passwords length is only possible

Re: FreeBSD maximum password length

2013-06-17 Thread takCoder
Thank you, Lowell, for your reply. :) And i've heard that no-maximum-limits for passwords length is only possible when we keep them in encrypted form not as plain text, which i think is matched with FreeBSD behavior. Is plain-text passwords even a supported behaviour? I didn't think it was.

Re: FreeBSD maximum password length

2013-06-17 Thread Eduardo Morras
On Mon, 17 Jun 2013 17:49:56 +0330 takCoder tak.offic...@gmail.com wrote: I need to moderate the input password in my system's user interface. And I believe i have tested longer passwords than that, about 1000 characters long, and there was no limitations, via using this command in a /bin/sh

Re: FreeBSD maximum password length

2013-06-17 Thread Teske, Devin
On Jun 17, 2013, at 7:47 AM, Eduardo Morras wrote: On Mon, 17 Jun 2013 17:49:56 +0330 takCoder tak.offic...@gmail.com wrote: I need to moderate the input password in my system's user interface. And I believe i have tested longer passwords than that, about 1000 characters long, and there

Re: FreeBSD maximum password length

2013-06-17 Thread Mark Felder
On Mon, 17 Jun 2013 12:25:54 -0500, Teske, Devin devin.te...@fisglobal.com wrote: The default in FreeBSD is MD5 MD5 is no longer the default. http://svnweb.freebsd.org/base?view=revisionrevision=238484 ___ freebsd-questions@freebsd.org mailing

Re: FreeBSD maximum password length

2013-06-17 Thread Teske, Devin
On Jun 17, 2013, at 10:28 AM, Mark Felder wrote: On Mon, 17 Jun 2013 12:25:54 -0500, Teske, Devin devin.te...@fisglobal.com wrote: The default in FreeBSD is MD5 MD5 is no longer the default. http://svnweb.freebsd.org/base?view=revisionrevision=238484 Huzzah! 9.1-RELEASE and

Re: FreeBSD maximum password length

2013-06-17 Thread Mark Felder
On Mon, 17 Jun 2013 12:52:48 -0500, Teske, Devin devin.te...@fisglobal.com wrote: Is sha512 the highest it goes in our system? Not sure what the limitations are. I know OpenBSD uses blowfish and I have been using that on older FreeBSD servers as a workaround. I think that OpenBSD uses a

Re: FreeBSD maximum password length

2013-06-17 Thread RW
On Mon, 17 Jun 2013 17:52:48 + Teske, Devin wrote: On Jun 17, 2013, at 10:28 AM, Mark Felder wrote: On Mon, 17 Jun 2013 12:25:54 -0500, Teske, Devin devin.te...@fisglobal.com wrote: The default in FreeBSD is MD5 MD5 is no longer the default.

Re: FreeBSD maximum password length

2013-06-17 Thread Polytropon
One _little_ terminology detail: On Tue, 18 Jun 2013 00:56:08 +0100, RW wrote: What's important is the amount of work needed to evaluate a password in a bruteforce dictionary attack. I'd say that bruteforce != dictionary. It's bruteforce _or_ dictionary attack instead. A dictionary attack is

Re: FreeBSD maximum password length

2013-06-17 Thread Brandon Gooch
On Mon, Jun 17, 2013 at 6:35 AM, takCoder tak.offic...@gmail.com wrote: Thank you, Mark, for your helpful answer :) yes, i am aware of the max username length of 16characters.. I just wanted to become sure about password max length, cause i need to moderate it in my self-built user

Re: FreeBSD maximum password length

2013-06-17 Thread Mark Felder
On Mon, Jun 17, 2013, at 21:19, Brandon Gooch wrote: On Mon, Jun 17, 2013 at 6:35 AM, takCoder tak.offic...@gmail.com wrote: Perhaps your PR is unnecessary: $ svn log -v -r243023 /usr/src/sys/sys/param.h Hmm, looks like it wasn't MFC'd to 9-STABLE before 9.1's release. Well, at least it's

Re: FreeBSD maximum password length

2013-06-17 Thread Michael Sierchio
I know this may seem off-the-wall to some, but I pasted a hashed password for a user under 9.1 into the /etc/passwd entry for that user on an 8.3 machine, and auth continues to work properly. That's nice. - M ___ freebsd-questions@freebsd.org mailing