Mailing List Archive

There shouldn't be any in /etc/passwd.

In /etc/shadow, the passwords are hashed with MD5.

C

On Fri, 15 Oct 2004 13:19:23 -0400 (EDT), Ajai Khattri <ajai@bway.net> wrote:
>
> What encryption algorithm is used in the password field of /etc/passwd?
>
> --
>
> --
> gentoo-user@gentoo.org mailing list
>
>

--
gentoo-user@gentoo.org mailing list

I think you can actually choose...
http://www.linuxsecurity.org/tips/tip-6.html


----- Original Message -----
From: Chris Snell <cmsnell@gmail.com>
Date: Friday, October 15, 2004 1:43 pm
Subject: Re: [gentoo-user] Password encrypted by?

> There shouldn't be any in /etc/passwd.
>
> In /etc/shadow, the passwords are hashed with MD5.
>
> C
>
> On Fri, 15 Oct 2004 13:19:23 -0400 (EDT), Ajai Khattri
> <ajai@bway.net> wrote:
> >
> > What encryption algorithm is used in the password field of
> /etc/passwd?>
> > --
> >
> > --
> > gentoo-user@gentoo.org mailing list
> >
> >
>
> --
> gentoo-user@gentoo.org mailing list
>
>


--
gentoo-user@gentoo.org mailing list

On Fri, 15 Oct 2004, Chris Snell wrote:

> There shouldn't be any in /etc/passwd.
>
> In /etc/shadow, the passwords are hashed with MD5.

Sorry, you're right, I meant /etc/shadow.

I am working on getting libnss-mysql working on a server.
I thought the default algorithm for MySQL was also MD5 but I see the
computed hashes in MySQL do not match the entries in the shadow file even
if I use the MD5() function in MySQL. Any ideas anyone?


--



--
gentoo-user@gentoo.org mailing list

http://dev.mysql.com/doc/mysql/en/Encryption_functions.html

See the ENCRYPT function
Defines the unix style of passwords being encrypted with crypt and salts, etc...


----- Original Message -----
From: Ajai Khattri <ajai@bway.net>
Date: Friday, October 15, 2004 2:02 pm
Subject: Re: [gentoo-user] Password encrypted by?

> On Fri, 15 Oct 2004, Chris Snell wrote:
>
> > There shouldn't be any in /etc/passwd.
> >
> > In /etc/shadow, the passwords are hashed with MD5.
>
> Sorry, you're right, I meant /etc/shadow.
>
> I am working on getting libnss-mysql working on a server.
> I thought the default algorithm for MySQL was also MD5 but I see the
> computed hashes in MySQL do not match the entries in the shadow
> file even
> if I use the MD5() function in MySQL. Any ideas anyone?
>
>
> --
>
>
>
> --
> gentoo-user@gentoo.org mailing list
>
>


--
gentoo-user@gentoo.org mailing list

Ajai Khattri wrote:

>What encryption algorithm is used in the password field of /etc/passwd?
>
>
>
As I understand it, the password data is stored seperately in
/etc/shadow. And the passwords are 'encrypted' in the md5 hash (in case
you don't know, a hash, is like encryption, but one way only)

Alex S.

--
gentoo-user@gentoo.org mailing list

On 15 Oct 2004, at 11:02, Ajai Khattri wrote:
> On Fri, 15 Oct 2004, Chris Snell wrote:
>> There shouldn't be any in /etc/passwd.
>>
>> In /etc/shadow, the passwords are hashed with MD5.
>
> Sorry, you're right, I meant /etc/shadow.
>
> I am working on getting libnss-mysql working on a server.
> I thought the default algorithm for MySQL was also MD5 but I see the
> computed hashes in MySQL do not match the entries in the shadow file
> even
> if I use the MD5() function in MySQL.

That's because /etc/shadow uses a salt with its password hashing (to
prevent some wordlist attacks).