Shouldn't the default rounds for blowfish in adduser.perl be the same
as login.conf? ok? 

mark

Index: adduser.perl
===================================================================
RCS file: /cvs/src/usr.sbin/adduser/adduser.perl,v
retrieving revision 1.58
diff -u -p -u -p -r1.58 adduser.perl
--- adduser.perl        22 Sep 2011 10:59:23 -0000      1.58
+++ adduser.perl        12 May 2013 20:09:47 -0000
@@ -973,12 +973,12 @@ sub salt {
         $salt = "";
     } elsif ($encryptionmethod =~ /^blowfish/ ) {
         ($encryptionmethod, $salt) = split(/\,/, $encryptionmethod);
-       $salt = 7 unless $salt;         # default rounds if unspecified
+       $salt = 6 unless $salt;         # default rounds if unspecified
     } else {
         warn "$encryptionmethod encryption method invalid\n" if ($verbose > 0);
-       warn "Falling back to blowfish,7...\n" if ($verbose > 0);
+       warn "Falling back to blowfish,6...\n" if ($verbose > 0);
        $encryptionmethod = "blowfish";
-       $salt = 7;
+       $salt = 6;
     }

     warn "Salt is: $salt\n" if $verbose > 1;

Reply via email to