Nessus user passwords

[Jared M Breland]

I mean just any special characters.  Eg., !@#$%^&*()_+-=

If I wanted to enter a user password as something like qwER12#$, should
Nessus accept that, both in the user setup utility (which it does for me)
and logging in from the client (which it does not for me)?

And yes, the passwords are hashed.

--
Jared Breland                 International Paper
jared.breland at ipaper.com      Information Security
901-419-5077                  http://irm.ipaper.com/



                                                                           
             "George Theall"                                               
             <theall at tifaware.                                             
             com>                                                       To 
             Sent by:                  nessus at list.nessus.org              
             nessus-bounces at li                                          cc 
             st.nessus.org                                                 
                                                                   Subject 
                                       Re: Nessus user passwords           
             08/31/2004 12:17                                              
             PM                                                            
                                                                           
                                                                           
                                                                           
                                                                           




On Mon, Aug 30, 2004 at 01:14:03PM -0500, Jared M Breland wrote:

>    Does nessus/nessusd support special characters in user passwords?

What exactly do you mean by "special characters"? Are you talking about
unprintable characters or those like "\" or "/"? I'm not aware of any
restrictions in Nessus, although I'm sure there are in practice,
especially if you're referring to unprintable characters.

Also, are passwords being stored by Nessus as plaintext or MD5 hashes?
Check for /usr/local/var/nessus/users/$user/auth/{hash,password} or
something similar.

George
--
theall at tifaware.com
(See attached file: att02q2e.dat)
_______________________________________________
Nessus mailing list
Nessus at list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
-------------- next part --------------
A non-text attachment was scrubbed...
Name: att02q2e.dat
Type: application/octet-stream
Size: 196 bytes
Desc: not available
Url : http://mail.nessus.org/pipermail/nessus/attachments/20040831/c8d32546/attachment.obj