Shadow hardening [LWN.net]

Shadow hardening

Posted Mar 29, 2012 8:00 UTC (Thu) by chojrak11 (guest, #52056)
In reply to: Shadow hardening by RobSeace
Parent article: Shadow hardening

Exactly. Here is the shadow entry with SHA-512 and custom number of rounds:

username:$6$rounds=100000$<salt>$<hash>:15418:0:99999:7:::

here the PAM configuration:
password required pam_unix.so obscure sha512 rounds=100000

and login.conf:
ENCRYPT_METHOD SHA512
SHA_CRYPT_MIN_ROUNDS 100000

After the admin increase number of rounds, next password change will adapt the setting.

(Log in to post comments)