Bug 443898

Summary:	PAM can not authenticate against blowfish hashes FutureFeature
Product:	[Fedora] Fedora	Reporter:	hoffer53
Component:	pam	Assignee:	Tomas Mraz <tmraz>
Status:	CLOSED NOTABUG	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	low
Version:	rawhide
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2008-04-23 22:24:29 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description hoffer53 2008-04-23 22:11:14 UTC

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14

Description of problem:
FutureFeature
It would be nice to include SUSE's pam_unix2 and libxcrypt into the Fedora distro in order to allow for easier transition from *BSD and also to allow for stronger password hashes.  The pam_unix2 plugin is backwards compatible with md5 and DES password hashes, so integration into a future version should not be too difficult.

The packages can be found in the current source distro of SUSE as well as here:
ftp://ftp.suse.com/pub/people/kukuk/libxcrypt/
ftp://ftp.suse.com/pub/people/kukuk/pam/pam_unix2
Make and install libxcrypt, then make and install pam_unix2.
Change all pam_unix.so occurrences in /etc/pam.d/* to read pam_unix2.so.

Version-Release number of selected component (if applicable):


How reproducible:
Always


Steps to Reproduce:
This is an enhancement.

Actual Results:


Expected Results:


Additional info:

Comment 1 Tomas Mraz 2008-04-23 22:24:29 UTC

We have already support for SHA256 and SHA512 password hashes which are strong
enough and I do not see any serious reason for having pam_unix2 in Fedora. Also
new packages get into Fedora this way:
http://fedoraproject.org/wiki/PackageMaintainers