Hi! I use a standard SuSE 7.3, so passwords are stored in shadow. I wonder if they are encrypted with des or md5? The reason for my question is that I want to migrate the accounts to ldap, and to use the unix passwords in the ldap tree for mac os x clients. Os x doesn't support md5, so I have to make sure that we use des for user accounts. I even don't know where the encryption is configured, or is it defined at compile time in the shadow utilities? Thank you, CU Lars.
On Fri, 2002-08-23 at 16:48, Lars O.Grobe wrote:
Hi!
I use a standard SuSE 7.3, so passwords are stored in shadow. I wonder if they are encrypted with des or md5? Default is des AFAIK, can be changed via pam.
The reason for my question is that I want to migrate the accounts to ldap, and to use the unix passwords in the ldap tree for mac os x clients. Os x doesn't support md5, so I have to make sure that we use des for user accounts. I even don't know where the encryption is configured, or is it defined at compile time in the shadow utilities?
Thank you, CU Lars.
-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here
-- ---------------------------------------- Raymond Leach Internet Infrastructure Knowledge Factory Tel: +27-11-445-8100 Fax: +27-11-445-8101 www: http://www.knowledgefactory.co.za ---------------------------------------- "It is a man's own fault if his mind grows torpid in old age." - Samual Jackson
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SuSE 7.3 defaults to UNIX crypt passwords. That can be changed using pam (look in /etc/pam.d). From what I gather, this isn't considered the most secure password format, but it is the default format used by OS X. OS X v10.2 (Jaguar) supports pam, so you should be able to change this. If you use the RFC2307 LDAP mappings that come with OS X v10.2 (using LDAPv3), and set up a SuSE linux server running Openldap 2 (which supports LDAPv3), everything should work fine by default. OS X maps passwords to the userPassword attribute in the LDAP directory. I have this working right now. SuSE 7.3 PPC running on several B&W G3s. End users can change their password using the OS X GUI and it will update to the openldap directory on the SuSE Linux server. If you try to throw Samba into the mix on the Linux servers, it gets more complicated. But that is another story. On Friday 23 August 2002 07:48 am, Lars O.Grobe wrote:
Hi!
I use a standard SuSE 7.3, so passwords are stored in shadow. I wonder if they are encrypted with des or md5?
The reason for my question is that I want to migrate the accounts to ldap, and to use the unix passwords in the ldap tree for mac os x clients. Os x doesn't support md5, so I have to make sure that we use des for user accounts. I even don't know where the encryption is configured, or is it defined at compile time in the shadow utilities?
Thank you, CU Lars.
- -- Bill Akers Director of Network Operations UCLA Graduate School of Education and Information Studies akers@ucla.edu -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE9ZlqbHuBhMoY9pyIRAnuLAJ4rA1NryGk9EUtMyt9gf6hUBYCUTACeIg83 mFupu8xlFTe4qTFz2VxwDuw= =Ef9a -----END PGP SIGNATURE-----
participants (3)
-
Bill Akers -
Lars O.Grobe -
Ray Leach