>Number:         3198
>Category:       bin
>Synopsis:       passwd prints poorly formatted warning for lowercase passwords
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    bin-bug-people (Utility Bug People)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Feb  7 00:20:01 1997
>Last-Modified:
>Originator:     Dave Huang
>Organization:
Name: Dave Huang     |   Mammal, mammal / their names are called /
INet: khym@bga.com   |   they raise a paw / the bat, the cat /
FurryMUCK: Dahan     |   dolphin and dog / koala bear and hog -- TMBG
Dahan: Hani G Y+C 21 Y++ L+++ W- C++ T++ A+ E+ S++ V++ F- Q+++ P+ B+ PA+ PL++
>Release:        NetBSD-current as of February 6, 1997
>Environment:
	
System: NetBSD host4.alterity.com 1.2B NetBSD 1.2B (SPIFF) #9: Wed Jan 29 23:52:00 CST 1997 khym@host4.alterity.com:/usr/src.local/sys/arch/i386/compile/SPIFF i386


>Description:
If you enter an all lowercase password, the passwd command will print a
warning message suggesting that you choose a better password. However, the
warning ends up looking something like this:

Please don't use an all-lower case                                   password.
Unusual capitalization,
                                     control characters or digits are                                suggested.


>How-To-Repeat:
Run passwd and enter a string consisting of at least 6 lowercase letters as
your new password.

>Fix:
diff -ur /usr/src/usr.bin/passwd/local_passwd.c ./local_passwd.c
--- /usr/src/usr.bin/passwd/local_passwd.c	Sun Dec 29 06:36:43 1996
+++ ./local_passwd.c	Tue Feb  4 00:43:43 1997
@@ -101,10 +101,10 @@
 		}
 		for (t = p; *t && islower(*t); ++t);
 		if (!*t && ++tries < 2) {
-			(void)printf("Please don't use an all-lower case\
-				     password.\nUnusual capitalization,
-				     control characters or digits are\
-				     suggested.\n");
+			(void)printf("Please don't use an all-lower case "
+				     "password.\nUnusual capitalization, "
+				     "control characters or digits are "
+				     "suggested.\n");
 			continue;
 		}
 		(void)strcpy(buf, p);
diff -ur /usr/src/usr.bin/passwd/yp_passwd.c ./yp_passwd.c
--- /usr/src/usr.bin/passwd/yp_passwd.c	Sun Dec 29 06:36:44 1996
+++ ./yp_passwd.c	Tue Feb  4 00:43:27 1997
@@ -222,10 +222,10 @@
 		}
 		for (t = p; *t && islower(*t); ++t);
 		if (!*t && ++tries < 2) {
-			(void)printf("Please don't use an all-lower case\
-				     password.\nUnusual capitalization,
-				     control characters or digits are\
-				     suggested.\n");
+			(void)printf("Please don't use an all-lower case "
+				     "password.\nUnusual capitalization, "
+				     "control characters or digits are "
+				     "suggested.\n");
 			continue;
 		}
 		(void)strcpy(buf, p);
>Audit-Trail:
>Unformatted: