On Tue, Aug 30, 2011 at 09:54:41AM -0400, James Knott wrote:

Mark Goldstein wrote:

...

I had the same problem. I guess it is due to the fix of long-hidden bug in blowfish library. My workaround was to change the password for the user from root account. It worked and after that the user could change the passwords again.

That works if root changes the password from the command line, but not Yast, so I guess I may be changing passwords for users in the future.

This was due to a bug in libxcrypt for the blowfish issue. We released fixed libxcrypt packages just today for this problem. Ciao, Marcus -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Mark Goldstein wrote:

On Tue, Aug 30, 2011 at 4:28 PM, James Knott wrote:

...

...

Since some updates last week, I am unable to use the passwd command to change passwords. When I try, I get an error message:

Unable to generate a salt. Check your crypt settings. Cannot create salt for blowfish crypt Error: Password NOT changed. passwd: Authentication token manipulation error

Any fix for this? I can use Yast to change passwords, but that means bring the employees into my office to change their own passwords.

I had the same problem. I guess it is due to the fix of long-hidden bug in blowfish library. My workaround was to change the password for the user from root account. It worked and after that the user could change the passwords again. There appears to have been a recent fix that came down with the updates yesterday. I just tested and it works fine now.

-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Mark Goldstein wrote:

Yep, I've seen Marcus's mail. But I'm the only user on my box, so after changing the password once from root CLI I got switched to new blowfish hash. So for me the problem has gone. But for real multiuser system the fix is definitely important.

Yes, there's currently about a dozen users on the system, with more to come. I certainly don't want them all coming into my office to change their password, especially since some of the "to come" bunch will be in another country. However, that fix does seem to work and I suppose another work around would be to use a different encryption method. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org