Red Hat Bugzilla – Bug 218629
shadow-utils does not use MD5 encryption by default.
Last modified: 2009-11-30 09:34:12 EST
Description of problem:
System is setup to use MD5 encryption by default, but shadow-utils doesn't
reflect it. This affects newusers and chpasswd at least.
# echo "someUser:newPassword" | chpasswd
# echo "newUser:password:600:600:::/bin/bash" | newusers
and see /etc/shadow
fix: add "MD5_CRYPT_ENAB yes" to /etc/login.defs
This request was evaluated by Red Hat Product Management for inclusion in a Red
Hat Enterprise Linux major release. Product Management has requested further
review of this request by Red Hat Engineering, for potential inclusion in a Red
Hat Enterprise Linux Major release. This request is not yet committed for
(In reply to comment #0)
> # echo "newUser:password:600:600:::/bin/bash" | newusers
> and see /etc/shadow
newUser's password doesn't start with MD5 prefix "$1$".
This still is not in RHEL. Could you change it to RHEL5 non-beta?
This request was evaluated by Red Hat Product Management for
inclusion in a Red Hat Enterprise Linux release. Since this
bugzilla is in a component that is not approved for the current
release, it has been closed with resolution deferred. You may
reopen this bugzilla for consideration in the next release.
Moved to 5.2 so resetting flags to ?. Keeping PM_ACK and proposal for FasTrack.
Engineering feedback: shadowutils don't qualify for FasTrack in 5.2 as changes
are too intrusive.
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.