On Feb 5, 2008 10:19 AM, Alessandro Corbelli <[EMAIL PROTECTED]> wrote:
>
> Il giorno mar, 05/02/2008 alle 10.10 -0800, Dan Nicholson ha scritto:
> > So, is the problem that it's not asking you to enter the password
> > again if it's a weak password?
>
> It doesn't ask also the first passwd.

This is normal when you're running passwd as root, I think. If you add
a user then run passwd as that user, I think you will be prompted for
the current password.

# useradd foo
# su -c "passwd" foo

I had a look at the shadow source, and it seems that the messages for
"New password: " and "Re-enter new password: " are not making it to
the screen. These should be printed when calling the function
getpass(). Reading the getpass(3) manpage, it seems that /dev/tty is
used for sending the messages and receiving the password. Do you have
the /dev/tty device? Can you show the permissions?

> > That sounds like a bug. If so, can you
> > see what happens if you try to change the password of a non-root user?
> >
> > # useradd foo
> > # passwd foo
> > (enter a weak password)
> > # userdel foo
>
> Same thing as above.

That seems consistent with getpass() not working.

--
Dan
-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/lfs/faq.html
Unsubscribe: See the above information page

Reply via email to