[Grml] JFYI: grml2hd - setting a password with >8 chars

Michael Prokop mika at grml.org
Tue Aug 15 15:08:01 CEST 2006


Hoi,

to all of you who are running a grml system or plan to do so:

Affected software
=================

grml2hd - install grml on harddisk

Problem
=======

Setting the password in grml2hd is done via chpasswd. If you provide
a password it will be set correct and login is possible with the
provided password. But login is also possible with providing just
the first 8 characters of the password.

Fix for existing installations
==============================

Please run 'passwd' manually after hd-installation (for normal user
and user root).  So if you are using passwords with more than 8
characters please run:

# passwd

and

# passwd <username>

where <username> is the user with UID 1000 on your grml system.
This makes sure that login is possible only with the full length
password.

Fix for upcoming grml2hd installations
=======================================

Please run:

# apt-get update ; apt-get install grml2hd

before running grml2hd itself so you get the fixed and up2date
grml2hd version.

Additional notes
================

The issue has been documented also at:
http://wiki.grml.org/doku.php?id=grml_0.8

Credits
=======

The issue has been discovered and reported by Matthias Kopfermann.

thx for notice && regards,
-mika-
-- 
 http://grml.org/            # Linux for texttool-users and sysadmins
 http://wiki.grml.org/       # share your knowledge
 http://grml.supersized.org/ # the grml development weblog
 #grml @ irc.freenode.org    # meet us on irc
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://ml.grml.org/pipermail/grml/attachments/20060815/55083c44/attachment-0003.pgp>


More information about the Grml mailing list