Subject: Re: /etc/passwd.conf
To: Jun-ichiro itojun Hagino <itojun@iijlab.net>
From: Jeremy C. Reed <reed@reedmedia.net>
List: tech-security
Date: 08/05/2003 08:03:36
On Tue, 5 Aug 2003, Jun-ichiro itojun Hagino wrote:
> given that DES is crackable in 3 seconds, i would like to propose the
> following change. you can still use DES password entries, it only
> affects newly-created entries (like by passwd(1)). what do people
> think? (ypcipher is kept to "old" for backward compat)
> diff -u -r1.2 passwd.conf
Why change in the passwd.conf instead of in src/lib/libutil/passwd.c?
> +default:
> + localcipher = blowfish,7
It seems like more operating systems support MD5; for compatibility, maybe
it should be used. Does anyone have a list of what hash/cipher
types work out of the box for various operating systems?
Jeremy C. Reed
http://bsd.reedmedia.net/