Actually, md5 should work fine.  It works for me...

Admittedly, we should expand the prefixs that are accepted as 'pre-crypted':
($result =~ /^\$1\$/) || ($result =~ /^\$5\$/) || ($result =~ /^\$6\$/)

So $1$, $5$, and $6$ should be fine.  If it is something else and doesn't work, 
let me know.

For reference, the 'sub crydb' in Template.pm is the part that decides whether 
to crypt or pass through.

Also, though it won't help xCAT at large much, confluent implements symmetric 
encryption of all the credentials that it copes with.  Granted the key by 
default is essentially in the clear, but the plan is to have the ability to opt 
in to locking that key up.

From: Christian Caruthers [mailto:[email protected]]
Sent: Monday, March 23, 2015 1:01 PM
To: xCAT Users Mailing list ([email protected])
Subject: [xcat-user] xCAT encrypt password in passwd table

Looking here:

http://sourceforge.net/p/xcat/wiki/Encrypted_root_password_in_passwd.tab/

I see that I can encrypt the root password, but this explicitly says md5 
doesn't work. Is there a better way to do this using a more secure hashing 
method?

Regards,
Christian Caruthers
Senior Consultant - System x Linux HPC
Mobile: 757-289-9872

------------------------------------------------------------------------------
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the 
conversation now. http://goparallel.sourceforge.net/
_______________________________________________
xCAT-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/xcat-user

Reply via email to