HP-UX A.03.81.002 Secure Shell password longer than eight

[breiner]

Hello,

My system is HPUX 11.00 on HP9000.
I installed HP-UX A.03.81.002 Secure Shell and use ssh with trusted mode. therefore the passwords are in /tcb/auth/files.
My problem is when a user has a password longer than eight character, his password is
refused.

It would be great if someone could help me.

Best regards.

Gerard Breiner
Institut D'Astrophysique Spatiale
Orsay Campus
France
gerard.breiner@ias.u-psud.fr

[Sridhar Bhaskarla]

Hi,

Did you just convert the system?. If so, let the user change the password again. The issue really is when the system was not trusted, it would only store the encrypted password of first eight characters eventhough the user typed more than 8 characters as the password. It would simply discard rest of the characters. Since trusted system can recognize more then eight characters, it will try compare 'more then 8 character encrypted' password with that of the old '8 character encrypted' password.

-Sri

[breiner]

Thanks for your answer.
I 've changed my password several times but it is refused when I use ssh but it works with telnet.

[F Verschuren]

Properly one is using pan ant the other one not...

use sam,
Accounts for Users and Groups
Users
Select your userID
Actions
Modify Security Policies...
Password Format Policies...
Maximum Password Length: [ Default (8) ->]
and set it on the requested valuwe.

[F Verschuren]

sorry the reason is somting els:

telnet is working because telnet wil forget everyting that is typed after 8 caracters (try to log in whit only the first 8 and you can login (telnet and SSH).

Kind regatrs, Freek Verschuren

[Thomas Lydick]

Gerard,
Did you ever get a resolution for this?

I'm running into the same problem.
Entering the first 8 characters of the password at an ssh prompt doesn't work.

Thank You,
Tom Lydick
Unix Admin - NCO Group

[Curtis A. Johnson]

We had a similar problem. We had an older version of the HP-UX secure shell and we upgraded to A.03.81.002. When we upgraded it kept the old sshd_config file. Now everything work if you had a password less than eight characters, anything more and we could not sign in.

What I did was copy from /opt/ssh/etc/newconfig/opt/ssh/etc the sshd_config file to /opt/ssh/etc overwriting the old one. Then restart the sshd daemon by

/sbin/init.d/secsh stop
/sbin/init.d/secsh start

It worked for me, so hopefully it will help everyone else out.

If you need to know, the system is HPUX 11.11 on HP9000. It is also a trusted system.