up vote 2 down vote favorite
share [g+] share [fb]

How can I force the passwd command to use MD5 hash and not to use crypt? I need to get the passwd command to talk to the ldap server (which it does) and use MD5 when I change passwords for the users.

link|improve this question
50% accept rate
feedback

3 Answers

up vote 2 down vote accepted

Assuming Linux: set value of ENCRYPT_METHOD in /etc/login.defs to MD5.

link|improve this answer
MD5 (was and) is the choosen ENCRYPT_METHOD in /etc/login.defs - but passwd still makes {crypt} hashes in the LDAP-base. – MyOnlyEye May 14 '11 at 8:30
And it says pam_password md5 in ldap.conf... – MyOnlyEye May 14 '11 at 8:36
Try this: fusionnetwork.us/index.php/articles/linux-tutorials/… the author reports a success. – Paweł Brodacki May 14 '11 at 8:48
This is beginning to annoy me... if I follow the tutorial pam_password exop gives me SSHA hashes - and if I change it back to pam_password md5 I get crypt hashes. WHY!? :-) – MyOnlyEye May 14 '11 at 10:16
1  
"pam_password exop" in /etc/ldap.conf makes passwd use the password policy from the ldap server (in my case SSHA). I changed the policy in the server to MD5 and it worked. Now changes password with passwd is made with the MD5 hash - and I can happily sync all my users (and passwords) with Google Apps! – MyOnlyEye May 14 '11 at 13:35
feedback
up vote 2 down vote

Set the following in your /etc/login.defs file:

MD5_CRYPT_ENAB yes
link|improve this answer
feedback
up vote 0 down vote

You can also use the authconfig command like so :

authconfig --enablemd5

juste search in the man page.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.