emo/shadow
1
0
Fork 0
Code Issues Pull Requests Packages Releases Activity
e638841f5a
shadow/man/login.defs.d/ENCRYPT_METHOD.xml

34 lines
1.2 KiB
XML
Raw Normal View History

* man/*.xml, man/login.defs.d/*.xml: Added copyright and licence header.
2008-10-11 17:14:43 +05:30
<!--
Update licensing info Closes #238 Update all files to list SPDX license shortname. Most files are BSD 3 clause license. The exceptions are: serge@sl ~/src/shadow$ git grep SPDX-License | grep -v BSD-3-Clause contrib/atudel:# SPDX-License-Identifier: BSD-4-Clause lib/tcbfuncs.c: * SPDX-License-Identifier: 0BSD libmisc/salt.c: * SPDX-License-Identifier: Unlicense src/login_nopam.c: * SPDX-License-Identifier: Unlicense src/nologin.c: * SPDX-License-Identifier: BSD-2-Clause src/vipw.c: * SPDX-License-Identifier: GPL-2.0-or-later Signed-off-by: Serge Hallyn <serge@hallyn.com>
2021-12-05 21:05:27 +05:30
SPDX-FileCopyrightText: 2007 - 2008, Nicolas François
SPDX-License-Identifier: BSD-3-Clause
* man/*.xml, man/login.defs.d/*.xml: Added copyright and licence header.
2008-10-11 17:14:43 +05:30
-->
Put each variable description in an external entities. This will permit to reference them in the various utils manpages.
2007-11-27 03:41:23 +05:30
<varlistentry>
<term><option>ENCRYPT_METHOD</option> (string)</term>
<listitem>
<para>
This defines the system default encryption algorithm for encrypting
passwords (if no algorithm are specified on the command line).
</para>
<para>
It can take one of these values:
* man/login.defs.d/ENCRYPT_METHOD.xml: Avoid using sub-lists. They break the groff formatting.
2009-08-21 20:32:32 +05:30
<replaceable>DES</replaceable> (default),
<replaceable>MD5</replaceable><phrase condition="sha_crypt">,
<replaceable>SHA256</replaceable>,
<replaceable>SHA512</replaceable></phrase>.
login.defs: warn about weak choices According to crypt(5), MD5 and DES should not be used for new hashes. Also the default number of SHA rounds chosen by libc is orders of magnitude too low for modern hardware. Let's warn the users about weak choices. Signed-off-by: Topi Miettinen <toiwoton@gmail.com>
2020-04-10 16:39:55 +05:30
MD5 and DES should not be used for new hashes, see
<refentrytitle>crypt</refentrytitle><manvolnum>5</manvolnum>
for recommendations.
Put each variable description in an external entities. This will permit to reference them in the various utils manpages.
2007-11-27 03:41:23 +05:30
</para>
<para>
Note: this parameter overrides the <option>MD5_CRYPT_ENAB</option>
variable.
</para>
* man/login.defs.d/ENCRYPT_METHOD.xml, man/login.defs.d/MD5_CRYPT_ENAB.xml, man/login.defs.d/SHA_CRYPT_MIN_ROUNDS.xml: Updated note for PAM enabled versions. These variables are only used for group passwords in this case.
2009-05-09 18:46:10 +05:30
<para condition="pam">
Note: This only affect the generation of group passwords.
The generation of user passwords is done by PAM and subject to the
PAM configuration. It is recommended to set this variable
consistently with the PAM configuration.
Put each variable description in an external entities. This will permit to reference them in the various utils manpages.
2007-11-27 03:41:23 +05:30
</para>
</listitem>
</varlistentry>
Reference in New Issue Copy Permalink