try this: extraneous characters on the end of your password

Can someone else verify this?

try adding some extraneous characters to the end of your password on ssh login.

For my fully patched solaris 9 and 10 systems the garbage on the end is accepted as if it was the correct, exact length version.

Smells like a bug, though I can barely believe it would have survived this long..

thanks

[358 byte] By [fletcher_cocquyt] at [2007-11-26 10:20:32]
# 1
Well, a password can only be 8 characters, anything after the 8 characters will be ignored.... unless you change the default password algorithm i guess. 7/M.
mAbrante at 2007-7-7 2:19:03 > top of Java-index,Solaris Operating System,Solaris Essentials - General Technical Questions...
# 2

Standard unix crypt only holds first 8 characters of password.

Its not a bug, its a feature :-).

If you need longer password then you can change the password crypt scheme.

This can be done in solaris 10, but I don't think it can be done in solaris 9.

Its controlled by /etc/security/policy.conf

robertcohen at 2007-7-7 2:19:03 > top of Java-index,Solaris Operating System,Solaris Essentials - General Technical Questions...