From: unruh@invalid.ca   
      
   On 2012-06-09, Bit Twister wrote:   
   > On Sat, 9 Jun 2012 16:13:21 +0000 (UTC), Bit Twister wrote:   
   >> Anyone know the system configuration file which defines the hash   
   >> function used to hash/encript the user passwords?   
   >   
   > Research so far would indicate several files would have to be changed   
   > and you would have to know the id of the hash function desired.   
   >   
   > For the curious, as root, try   
   > grep -R 2a /etc/pam.d/*   
   > That assumes Mandriva 2011.x or Mageia 2   
   >   
   > Anyone know about a pam management tool? :(   
      
   I think, but am not sure, that this is the requirement that pam puts on   
   the password, not the configuration of what kind of password should be   
   used. Ie, Unless your password is of that type, pam may complain, but it   
   does nothing to say what the default for generating the hash is.   
      
   As I said before, If you are worried, increase your password length by a   
   few characters ( say at least 10 characters.) And make sure that you use   
   the full set of printable characters ( lower, upper, puctuation,   
   numbers) in your password. The problem is brute forcing, and that is   
   easily swamped by longer passwords.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)   
|