[utils/shadow] bcrypt breaks things like web login and pam login
Nobody has claimed this yet.
- Dominant language
- Makefile
- Stars
- 4.6k
- Forks
- 4k
- Avg merge
- 3d 12h
- Merged PRs (30d)
- 134
Description
Maintainer: unknown (none stated)
Environment: tree wide
Description: In #12490 there's a issue on whether shadow should use bcrypt to generate password hash, which is fixed by #12530, later #12577 makes shadow uses libxcrypt so the bcrypt is always available and preferred. However it seems that packages like rpcd and libpam don't use libxcrypt so they may fail when password is hashed by bcrypt. Although manually specifying hashing algorithm is a solution, it's better to change the default behavior.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Read the context in #12490, #12530, and #12577, then inspect how shadow, rpcd, and libpam handle password hashes. Determine the intended default behavior and verify that web login and PAM login continue to accept passwords generated by shadow without manual algorithm selection.
Written by the indexing model from the issue text.
Assessment
- Domain
- authentication
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100