On 9/26/07, Andreas Grabner <andr...@vianova.cc> wrote:
Hello,
I have just figured out that only the first 8 characters of passwords
are significant and the rest is irrelevant. Have i missed some
configuration? I think this is a security issue.
In my experience, this would indicate that you're encrpting passwords
with the CRYPT function, try using SHA or MD5 instead to avoid the 8
character limitation, but bear in mind that you loose a certain amount
of system portability with your passwords which may or may not be an
issue.
HTH,
Lisa.