Yeps that's a shortcoming of crypt(). One way to go around it is to use a 8 char password, but a pretty random string (the "password") as the username ;)<div><br></div><div>Ray.<br><br><div class="gmail_quote">
On Thu, Apr 8, 2010 at 12:07 AM, Boris Dolgov <span dir="ltr"><<a href="mailto:boris@dolgov.name">boris@dolgov.name</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div><div></div><div class="h5">On Wed, Apr 7, 2010 at 7:33 PM, AMP Admin <<a href="mailto:admin@ampprod.com">admin@ampprod.com</a>> wrote:<br>
> On one of my boxes I noticed that if the password is only half the string it<br>
> will authenticate.<br>
> Should be:<br>
> Username: tester<br>
> Pass: ThisPassword1234#&^<br>
> But the following authenticates:<br>
> Username: tester<br>
> Pass: ThisPassword<br>
> Can anyone confirm this behavior?<br>
<br>
</div></div>ThisPass will also authenticate - crypt() uses only first 8 symbols of<br>
the password.<br>
<font color="#888888"><br>
--<br>
Boris Dolgov.<br>
<br>
_______________________________________________<br>
nginx mailing list<br>
<a href="mailto:nginx@nginx.org">nginx@nginx.org</a><br>
<a href="http://nginx.org/mailman/listinfo/nginx" target="_blank">http://nginx.org/mailman/listinfo/nginx</a><br>
</font></blockquote></div><br></div>