[218] in Kerberos
passwd bugs
daemon@TELECOM.MIT.EDU (steiner@ATHENA.MIT.EDU)
Thu Oct 15 12:56:59 1987
From: steiner@ATHENA.MIT.EDU
To: kerberos@ATHENA.MIT.EDU
The command to change a Kerberos password, "passwd", accepts
a carriage return as valid input for the new password prompt.
After changing the password in this way, the user can't authenticate
to Kerberos anymore at all, neither using a <CR> in response to
the password prompt, nor the old password.
John Barba noticed this bug and will fix it. We propose that,
as in the "register" program, a password of less than 4 characters
not be accepted. Any objections?
There is another, known (at least to Carla) bug, which is: if
you type the command "passwd", even if you type in the correct
old password at the prompt, your password is deemed incorrect.
If you give the command "passwd -name your_name", however, all
goes as expected.
Is someone looking into this already?
Jennifer
