Debian bug report logs - #1022
No message for 'easy' pasword

Message received at debian-bugs:

From netcom.com!grantbow Tue Jun 20 14:20:17 1995
Return-Path: <grantbow@netcom.com>
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0sOAiW-0005hHC; Tue, 20 Jun 95 14:20 PDT
Received: from netcom19.netcom.com by pixar.com with SMTP id AA18967
  (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Tue, 20 Jun 1995 14:18:48 -0700
Received: from DialupEudora by netcom19.netcom.com (8.6.12/Netcom)
	id OAA15888; Tue, 20 Jun 1995 14:19:20 -0700
X-Sender: grantbow@netcom19.netcom.com
Message-Id: <v02120d00ac0ce6c3d38b@[192.0.2.1]>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Date: Tue, 20 Jun 1995 14:18:39 -0700
To: jdassen@WI.LeidenUniv.NL (J.H.M.Dassen), debian-bugs@pixar.com
From: grantbow@netcom.com (Grant R. Bowman)
Subject: Re: Bug#1022: No message for 'easy' pasword

At 4:08 AM 6/20/95, J.H.M.Dassen wrote:
>Package: base
>Version: 0.93R5
>
>[Reported by a friend]
>
>When a user supplies an 'easy' password (e.g. lower case only),
>the install rejects this _without giving any indication of the cause
>of rejection_; this can cause users to think that the install has
>gone in an infinite loop.

Actually, take a look at bug report #997.  I gave a step-by-step
description of what happened to me when I installed the base system, and it
started looping.  I have not (0/3) gotten a base installed without looping
yet.  The easy password is actually accepted, I believe.  It was accepted
and used during my initial installations.  I have not yet tried it with a
complex password.

Also, when I retest, it would help if I knew where can I find the code that
defines an "easy password?"

>Suggestion: if a password is reject, print a message like
>"That password is not safe enough; please use a password with
> a combination of upper and lower case characters, and preferably
> including non-alphanumeric characters".

Ray,

I am not sure that the password was really rejected.  My simple password
was accepted and I used it to log in to fix my looping problem.  I can do
another format and reinstall of my little test base system if it's genuine,
but I would first like to know what makes him think the password was
rejected?

Who is your friend?  I don't want to make you a messenger when asking about
these specfics.  I doubt you would like it and I think I might be able to
narrow it down quicker if I e-mail him (or him me) or whatever.

Without testing it, I have a hunch that the looping is not due to the
password, and that it was just a coincidence.  I will let you know when I
try another base install if this is actually the case.

Regards,

--
-- Grant R. Bowman                                AdvoTech
-- <grantbow@netcom.com>         Computer and Software Asset Manaagement

Message received at debian-bugs:

From WI.LeidenUniv.NL!jdassen Tue Jun 20 04:11:15 1995
Return-Path: <jdassen@WI.LeidenUniv.NL>
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0sO1Cj-0005nRC; Tue, 20 Jun 95 04:10 PDT
Received: from mailhost.WI.LeidenUniv.NL (zeus.wi.leidenuniv.nl) by pixar.com with SMTP id AA18945
  (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Tue, 20 Jun 1995 04:09:15 -0700
Received: from ind156a.wi.leidenuniv.nl (jdassen@ind156a [132.229.128.220])
          by mailhost.WI.LeidenUniv.NL (8.6.10a/FHM-1.20-M) with ESMTP id NAA26381
          for <debian-bugs@pixar.com>;  Tue, 20 Jun 1995 13:10:38 +0200 (MET)
From: jdassen@WI.LeidenUniv.NL (J.H.M.Dassen)
Organization: Leiden University,
              Dept. of Mathematics & Computer Science,
              The Netherlands
Received: from  (jdassen@localhost)
          by ind156a.wi.leidenuniv.nl (8.6.9/FHM-1.03-S) id LAA03430
          for debian-bugs@pixar.com;  Tue, 20 Jun 1995 11:08:30 GMT (MET)
Message-Id: <199506201108.LAA03430@ind156a.wi.leidenuniv.nl>
Subject: No message for 'easy' pasword
To: debian-bugs@pixar.com
Date: Tue, 20 Jun 1995 13:08:29 +0200 (MDT)
Return-Receipt-To: jdassen@WI.LeidenUniv.NL
X-Home-Page: <URL:http://www.wi.leidenuniv.nl/home/jdassen>
X-Mailer: ELM [version 2.4 PL24 (modified)]
Content-Type: text
Content-Length: 842       

Package: base
Version: 0.93R5

[Reported by a friend]

When a user supplies an 'easy' password (e.g. lower case only),
the install rejects this _without giving any indication of the cause
of rejection_; this can cause users to think that the install has
gone in an infinite loop.

Suggestion: if a password is reject, print a message like
"That password is not safe enough; please use a password with
 a combination of upper and lower case characters, and preferably
 including non-alphanumeric characters".

Regards,
Ray
-- 
J.H.M. Dassen                 | RUMOUR  Believe all you hear. Your world may  
jDassen@wi.LeidenUniv.Nl      | not be a better one than the one the blocks   
Dassen@stpc.wi.LeidenUniv.Nl  | live in but it'll be a sight more vivid.      
                              |     - The Hipcrime Vocab by Chad C. Mulligan