try this: extraneous characters on the end of your password
Can someone else verify this?
try adding some extraneous characters to the end of your password on ssh login.
For my fully patched solaris 9 and 10 systems the garbage on the end is accepted as if it was the correct, exact length version.
Smells like a bug, though I can barely believe it would have survived this long..
thanks
# 1
Well, a password can only be 8 characters, anything after the 8 characters will be ignored.... unless you change the default password algorithm i guess. 7/M.
# 2
Standard unix crypt only holds first 8 characters of password.
Its not a bug, its a feature :-).
If you need longer password then you can change the password crypt scheme.
This can be done in solaris 10, but I don't think it can be done in solaris 9.
Its controlled by /etc/security/policy.conf