This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

password problem....

Hi,

I found this strange behavior on my ASG110 (5.207) and on my ASL 6.101 installation...pratically I setup all the password (admin, root, loginuser) to the same value with this form: XXXXXXXXXXYYYY
So the password length is 14 char.

I CAN LOGON TO MY ASTARO IF I USE XXXXXXXXXX or XXXXXXXXXXYYYY AS PASSWORD VIA SSH or CONSOLE!!

Why?

This thread was automatically locked due to age.

Parents

0 mdallagi over 19 years ago

Hi,

today I found that I need only 8 chars of my password...

Bye
Cancel
Vote Up 0 Vote Down

Cancel
0 TOHIL over 19 years ago in reply to mdallagi

Have I understood this right. you have a long passwort, and have just to put in the 8 first characters of this, and you can login?????
Cancel
Vote Up 0 Vote Down

Cancel
0 mdallagi over 19 years ago in reply to TOHIL

Hi TOHIL,

yes, it's true...try it.
This is valid only for user loginuser (ssh access) and for root (console access).

Bye
Cancel
Vote Up 0 Vote Down

Cancel
0 KKnecht over 19 years ago in reply to mdallagi

That's not an Astaro problem, this is normal Linux behaviour.
Passwords are max. 8 characters.
So use "strange" passwords, like f%v-§3Bc (just an example)
Cancel
Vote Up 0 Vote Down

Cancel
0 mdallagi over 19 years ago in reply to KKnecht

Hi KKnecht,

The real problem is, why Astaro uses DES password instead of MD5?
Cancel
Vote Up 0 Vote Down

Cancel
0 mdallagi over 19 years ago in reply to mdallagi

Hi all,

Perhaps the Astaro users consider that is not important to improve security by using MD5 instead of DES.
Well, in my opinion Astaro must inform to me about this security setting when I'm changing the loginuser and root password.
Without this information we can have a false sense of security when we use long passwords over 8 chars.

What are you thinking about it?

Bye
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 mdallagi over 19 years ago in reply to mdallagi

Hi all,

Perhaps the Astaro users consider that is not important to improve security by using MD5 instead of DES.
Well, in my opinion Astaro must inform to me about this security setting when I'm changing the loginuser and root password.
Without this information we can have a false sense of security when we use long passwords over 8 chars.

What are you thinking about it?

Bye
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 TOHIL over 19 years ago in reply to mdallagi

I thought, its possible to set the length of a password under unix systems. Is it not possible to set this, to more characters? I use a longer password, and i'm sure hundrets of other users also...

Edit:

I've tried to login with the eight first characters of my pass, but this didn't work...
Cancel
Vote Up 0 Vote Down

Cancel
0 mdallagi over 19 years ago in reply to TOHIL

Hi TOHIL,

try with root from console or with loginuser via SSH...
"admin" is a webadmin user not a linux user.

[ QUOTE ]

Edit:

I've tried to login with the eight first characters of my pass, but this didn't work...

[/ QUOTE ]
Cancel
Vote Up 0 Vote Down

Cancel
0 TOHIL over 19 years ago in reply to mdallagi

ahhhhh okay [:)]

Astaro: Fix this!!! My Linux passworts are realy long, and not so dificult on the 8 first chars...
Cancel
Vote Up 0 Vote Down

Cancel
0 doug_p over 19 years ago in reply to mdallagi

I just tried to login via SSH using only the first 8 characters and got denied.
Cancel
Vote Up 0 Vote Down

Cancel
0 mdallagi over 19 years ago in reply to doug_p

Hi doug_p

Try again and you'll be more lucky...
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 19 years ago in reply to mdallagi

8 characters of my password doesn't let me login via ssh, SU, or webmin.
(on 5.2x)

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 mdallagi over 19 years ago in reply to BarryG

Hi BarryG,

I can logon with 8 characters of my password on my following systems:

- 2 ASG110 v. 6.102
- 3 ASL v. 5.208
- 1 ASG220 v. 5.208

There is something strange if you can't login with 8 characters because Astaro use DES encryption.
Are you using a modified version of Astaro?

Remember: the webadmin logon is not interessed by the password problem.
Cancel
Vote Up 0 Vote Down

Cancel
0 manson over 19 years ago in reply to mdallagi

I tested it on my ASG110 6.102 and ASL 6.102, both didn't let me in with 8 characters....
Cancel
Vote Up 0 Vote Down

Cancel
0 mdallagi over 19 years ago in reply to manson

Hi manson,

like me also TOHIL has found this behavior...are you sure to type exactly the first 8 characters of your loginuser/root long password?
Cancel
Vote Up 0 Vote Down

Cancel
0 manson over 19 years ago in reply to mdallagi

hello mdallagi,

yes i'm sure. first I set my passwords to "ppppppppoo" after that I tried to login via ssh and console with password "pppppppp"

....get permission denied.....
Cancel
Vote Up 0 Vote Down

Cancel