Re: Security trough paranoia
On Sun, Apr 01, 2001 at 04:38:49PM +1000, Brian May wrote:
> >>>>> "Matt" == Matt Zimmerman <mdz@debian.org> writes:
>
> Matt> Is there any (currently implemented) way to switch from
> Matt> crypt to md5, supporting crypt passwords already in the
> Matt> database, but adding new passwords using md5? This would
> Matt> allow administrators to make a smooth transition.
>
> I believe that is the only way supported.
>
> ie. either password can be read from the file, but by default only
> crypt is written. This default can be changed by editing the PAM
> files.
In that case, the only reason not to use md5 passwords by default is if the
system in question is a NIS _server_, not a client as has been implied before.
I agree that md5 should be the default.
--
- mdz
Reply to: