>          pam (1.0.1-1) unstable; urgency=low
>          .
>            * New upstream version.
>              - pam_unix now supports SHA-256 and SHA-512 password hashes.
>                Closes: #484249, LP: #245786.

Thank you for this new version!

However there are 2 problems with SHA password hashes:

 - they are not documented in the pam_unix manpage.  Fortunately, they
are documented in /usr/share/doc/libpam-doc/html/sag-pam_unix.html.

 - they do not work.  I replaced "md5" with "sha512"
in /etc/pam.d/common-password, ran "passwd SOME_ACCOUNT" as root and
checked /etc/shadow.  The hashed password looks like an old DES hash.
Same problem with sha256.

Therefore I am going to reopen this bug...

-- 
Laurent Bonnaud.
http://www.lis.inpg.fr/pages_perso/bonnaud/

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to