passwords and crypt?

[Roger Keays <rogerk@ieee.org>]

Hi all,

I'm not sure if this is common knowledge or not, but I have just noticed 
the effects of having the first two letters of your password the same as 
the first two in your login name... You can use any extension of your 
password!!

e.g., on my Woody box I added a user called 'ron' and his password was 
'roniosko'. He could login in with 'ronioskos', 'ronioskoasdfasd' and so 
forth!

I tried a few more and had the same results. This is something to do 
with the random salt right?

Can anyone else reproduce this?

Cheers,

Roger