Web lists-archives.com

Re: password hash in shadow file




On 14/03/18 09:20, tomas@xxxxxxxxxx wrote:
> On Tue, Mar 13, 2018 at 07:36:19PM +0100, Sven Hartge wrote:
> 
>> But on that note: I wonder of one could create a PAM module which will
>> do just that on successful login. Once you *know* you have the right
>> password (and the PAM system has that knowledge including the plain text
>> password the user entered) just rehash it and update /etc/shadow.
> 
>> This will gradually upgrade all hashes once a user uses an account.
> 
> That would be downright sneaky :-)

That's quite common for web apps, isn't it? Not with PAM though, presumably.

Richard


Attachment: signature.asc
Description: OpenPGP digital signature