Re: Passwd cipher for YP

2015-11-20 Thread Theo de Raadt
> On Thu, Nov 19, 2015 at 03:36:43PM -0700, Theo de Raadt wrote: > > > I am rather late to this thread... > > > > > > On Thursday 15 October 2015 15:46:47, Raimo Niskanen wrote: > > > > > > Are there more password ciphers planned for the future e.g > > > > > > sha256 and sha512?> > > > > > > > >

Re: Passwd cipher for YP

2015-11-20 Thread Артур Истомин
On Thu, Nov 19, 2015 at 03:36:43PM -0700, Theo de Raadt wrote: > > I am rather late to this thread... > > > > On Thursday 15 October 2015 15:46:47, Raimo Niskanen wrote: > > > > > Are there more password ciphers planned for the future e.g > > > > > sha256 and sha512?> > > > > > > > > > > > > No,

Re: Passwd cipher for YP

2015-11-19 Thread Stefan Fritsch
I am rather late to this thread... On Thursday 15 October 2015 15:46:47, Raimo Niskanen wrote: > > > Are there more password ciphers planned for the future e.g > > > sha256 and sha512?> > > > > > > No, we will not be adding those. > > > > > > > > Those simple hashes do not provide the

Re: Passwd cipher for YP

2015-11-19 Thread Theo de Raadt
> I am rather late to this thread... > > On Thursday 15 October 2015 15:46:47, Raimo Niskanen wrote: > > > > Are there more password ciphers planned for the future e.g > > > > sha256 and sha512?> > > > > > > > > > No, we will not be adding those. > > > > > > > > > > > > Those simple hashes do

Re: Passwd cipher for YP

2015-10-15 Thread Stuart Henderson
On 2015-10-15, Raimo Niskanen wrote: > On Wed, Oct 14, 2015 at 09:10:55PM -0600, Devin Reade wrote: >> --On Wednesday, October 14, 2015 08:51:06 AM -0600 Theo de Raadt >> wrote: >> >> >> Do you have any other tips on how to handle logins

Re: Passwd cipher for YP

2015-10-15 Thread Raimo Niskanen
On Wed, Oct 14, 2015 at 09:10:55PM -0600, Devin Reade wrote: > --On Wednesday, October 14, 2015 08:51:06 AM -0600 Theo de Raadt > wrote: > > >> Do you have any other tips on how to handle logins in a mixed OS YP > >> network? > > > > These days, I would recommend using

Re: Passwd cipher for YP

2015-10-15 Thread Raimo Niskanen
On Wed, Oct 14, 2015 at 08:51:06AM -0600, Theo de Raadt wrote: > > I just found out that ypcipher=old is no longer supported in login.conf. > > That is correct. > > We have deprecated and removed the legacy ciphers. Passing such simple > hashes over ethernet in 2015 is not best practice. > > >

Re: Passwd cipher for YP

2015-10-14 Thread Theo de Raadt
> I just found out that ypcipher=old is no longer supported in login.conf. That is correct. We have deprecated and removed the legacy ciphers. Passing such simple hashes over ethernet in 2015 is not best practice. > Since I have a mixed platform lab network using YP (FreeBSD servers) I am >

Passwd cipher for YP

2015-10-14 Thread Raimo Niskanen
Hi misc@ I just found out that ypcipher=old is no longer supported in login.conf. Since I have a mixed platform lab network using YP (FreeBSD servers) I am curious if anyone has some experience of how portable blowfish is as a cipher for YP passwords. FreeBSD man pages say that they support it.

Re: Passwd cipher for YP

2015-10-14 Thread Raimo Niskanen
Some answers from myself after experimenting and finding Wikipedia :/ On Wed, Oct 14, 2015 at 02:36:09PM +0200, Raimo Niskanen wrote: > Hi misc@ > > I just found out that ypcipher=old is no longer supported in login.conf. > > Since I have a mixed platform lab network using YP (FreeBSD servers)

Re: Passwd cipher for YP

2015-10-14 Thread Devin Reade
--On Wednesday, October 14, 2015 08:51:06 AM -0600 Theo de Raadt wrote: Do you have any other tips on how to handle logins in a mixed OS YP network? These days, I would recommend using YP in fewer places. I wrote the code, but even I don't use it. Each time I make