*BSD News Article 89180


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!news.rmit.EDU.AU!news.unimelb.EDU.AU!munnari.OZ.AU!uunet!in2.uu.net!204.253.208.40!insync!www.nntp.primenet.com!nntp.primenet.com!enews.sgi.com!news.sgi.com!news.sprintlink.net!news-stk-200.sprintlink.net!news.utelfla.com!hobbes.crc.com!usenet
From: Dan Benjamin <dpb@mail.hqs.crc.com>
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: Adding DES after the fact
Date: Tue, 11 Feb 1997 15:34:21 -0500
Organization: Coleman Research Corporation
Lines: 24
Message-ID: <3300D7CD.66FA@mail.hqs.crc.com>
References: <5dpuo6$fnk@pelican.unf.edu>
NNTP-Posting-Host: pelican.hqs.crc.com
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 3.01Gold (Win95; I)
Xref: euryale.cc.adfa.oz.au comp.unix.bsd.freebsd.misc:35498

Cliff Addy wrote:
> 
> I need to add DES support to a system that has been up for about a year.  I've
> had conflicting opinions on whether this will break current passwords, if all
> executable must be recompiled, etc.  Is there anyone who has actually *done*
> this who can relate their experience?

You do not need to recompile, but changing to DES will break all of your
passwords.

The easiest way would be to install DES from sysinstall - just do a
custom install, choose DES, and away you go.  You could alternatively
install/compile the source yourself.

Above all, make sure root password is set to nul before you make the
change (provided noone can access the machine during that time - hence
boot to single user first).

You will probably need to set the user passwords to null before the
change.
-- 

Dan Benjamin
dpb@crc.com