full-disclosure - os x 10.2.x has 8 character password limit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: attica at stackheap.org (S . f . Stover)
Subject: os x 10.2.x has 8 character password limit

: Now according to Apple's docs, such as:
: 
: http://www.apple.com/macosx/pdfs/MacOSX_for_UNIX_users_TB.pdf
: 
: Mac OS X supports PAM.

Looks pretty interesting - at the very least, it states that Darwin is based
on FreeBSD 4.4 - I'll be interested to see if crypt is used in that version.

: According to some other docs you can stipulate the
: password length in Mac OS X 10.2 and up, perhaps they use a default of 8
: characters since "that's how UNIX used to work".

What I've been able to find is that OS X server (10.2) has something called
"password server" which allows you to use larger passwords:

http://discussions.info.apple.com/WebX?14@97.wYU5aMvlmKe.346470@.59966bc9

Haven't found anything refers to OS X client.

-- 

aka Dolph Longhorn
attica@...ckheap.org
GPG Key ID: 0xF8F859D0
http://pgp.mit.edu:11371/pks/lookup?search=0xF8F859D0&op=index

"There is no such thing as right and wrong, there's just popular opinion."
-Jeffrey Goines
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20031125/d6cc4e2a/attachment.bin