Re: Re: how to use /etc/passwd with perl programs

Those are good points except for the second one. On my system at least, and I believe on all systems that provide nonstandard crypt(3) implementations, crypt will detect and use the right hash function if you pass the entire crypted password as the SALT. For example, I have a user with a password "test". His crypted password is $1$V80MC/nB$s/9nJGRaDB3xtUNpI7k0O.. Running this Perl code:

print crypt('test',
            '$1$V80MC/nB$s/9nJGRaDB3xtUNpI7k0O.'),
      "\n";
[download]

prints the correctly encrypted password.

Comment on Re: Re: how to use /etc/passwd with perl programs Download Code

Replies are listed 'Best First'.
Re: Re: Re: how to use /etc/passwd with perl programs by TVSET (Chaplain) on Jul 04, 2003 at 12:36 UTC
Good catch - you are mostly right. Here is a quote from the man page: GNU EXTENSION The glibc2 version of this function has the following addition +al fea- tures. If salt is a character string starting with the three + charac- ters "$1$" followed by at most eight characters, and optionally + termi- nated by "$", then instead of using the DES machine, the gli +bc crypt function uses an MD5-based algorithm, and outputs up to 34 + bytes, namely "$1$<string>$", where "<string>" stands for the up to 8 + charac- ters following "$1$" in the salt, followed by 22 bytes chosen f +rom the set [a-zA-Z0-9./]. The entire key is significant here (instead + of only the first 8 bytes). Programs using this function must be linked with -lcrypt. [download] ++ Leonid Mamtchenkov aka TVSET	[reply] [d/l]

Replies are listed 'Best First'.

Re: Re: Re: how to use /etc/passwd with perl programs
by TVSET (Chaplain) on Jul 04, 2003 at 12:36 UTC

GNU EXTENSION
       The glibc2 version of this function has the following  addition
+al  fea-
       tures.   If  salt is a character string starting with the three
+ charac-
       ters "$1$" followed by at most eight characters, and optionally
+  termi-
       nated  by  "$",  then instead of using the DES machine, the gli
+bc crypt
       function uses an MD5-based algorithm,  and  outputs  up  to  34
+  bytes,
       namely  "$1$<string>$", where "<string>" stands for the up to 8
+ charac-
       ters following "$1$" in the salt, followed by 22 bytes chosen f
+rom  the
       set [a-zA-Z0-9./].  The entire key is significant here (instead
+ of only
       the first 8 bytes).

       Programs using this function must be linked with -lcrypt.
[download]

Leonid Mamtchenkov aka TVSET

[reply]
[d/l]