Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #239110

Re: You are required to change your password immediately (administrator enforced).

From Sven Joachim <svenjoac@gmx.de>
Newsgroups linux.debian.user
Subject Re: You are required to change your password immediately (administrator enforced).
Date 2021-08-21 10:20 +0200
Message-ID <COuoq-1F5-11@gated-at.bofh.it> (permalink)
References <CNbHb-ky-5@gated-at.bofh.it> <CNdpE-1fe-3@gated-at.bofh.it> <CNt1n-3sZ-9@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

On 2021-08-18 14:16 +0200, Harald Dunkel wrote:

> On 8/17/21 21:55, Sven Joachim wrote:
>> On 2021-08-17 19:59 +0200, Harald Dunkel wrote:
>>
>>>
>>> How can I make sure I don't have to change passwords on 400+ hosts?
>> Do not run sid on 400+ hosts.  Do not run testing either, especially
>> in
>> the first months after a release.
>>
>
> Of course not. But sid becomes the next release in 2 years, and then it
> might be to late to get rid of this lie.

Feel free to file a bug against the libcrypt1 package and/or the release
notes.  The change itself looks quite reasonable to me though, as
md5crypt hashes are really insecure these days.

The following command could be used to check for old md5crypt password
hashes, see crypt(5):

sudo cat /etc/shadow | grep -F ':$1$'

Cheers,
       Sven

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

You are required to change your password immediately (administrator  enforced). Harald Dunkel <harri@afaics.de> - 2021-08-17 20:10 +0200
  Re: You are required to change your password immediately  (administrator enforced). Sven Joachim <svenjoac@gmx.de> - 2021-08-17 22:00 +0200
    Re: You are required to change your password immediately  (administrator enforced). Sven Joachim <svenjoac@gmx.de> - 2021-08-17 22:20 +0200
    Re: You are required to change your password immediately  (administrator enforced). Harald Dunkel <harald.dunkel@aixigo.com> - 2021-08-18 14:40 +0200
      Re: You are required to change your password immediately  (administrator enforced). Sven Joachim <svenjoac@gmx.de> - 2021-08-21 10:20 +0200
      Re: You are required to change your password immediately  (administrator enforced). John Crawley <john@bunsenlabs.org> - 2021-08-22 07:10 +0200

csiph-web