bin/40994: usermod -l change password so user is unable to login

[shinden%linux.pl@localhost]

>Number:         40994
>Category:       bin
>Synopsis:       usermod -l change password so user is unable to login
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Mar 11 12:15:00 +0000 2009
>Originator:     Daniel Horecki
>Release:        NetBSD 5.0_RC2
>Organization:
>Environment:
NetBSD myrkr.stars 5.0_RC2 NetBSD 5.0_RC2 (MORR) #10: Mon Feb 23 12:17:50 CET 
2009  
sh%myrkr.stars@localhost:/home/sh/src/netbsd-5/obj/sys/arch/i386/compile/MORR 
i386

>Description:
When username is changed using usermod, first characters of password is 
overwritten by number of chars from username. E.g.:

myrkr# grep ^te /etc/master.passwd
test:jUF5HP4dYXGew:1007:100::0:0::/home/te:/bin/ksh
myrkr# usermod -l testujemy test
myrkr# grep ^te /etc/master.passwd
testujemy:ujemyP4dYXGew:1007:100::0:0::/home/te:/bin/ksh

>How-To-Repeat:
Change username to something longer than previous name.
>Fix:
Not now, will send patch when it will be ready.