[Pam-mysql-general] /etc/shadow -> mysql-pam Migration

[Georg W. <geo...@pi...>]

Dear List,

we want to migrate the authentification mechanism in our organization
from one central /etc/shadow file to pam-mysql. The problem I see here
is that we use all different kind of hashes mixed in /etc/shadow (grown
structures and such) ranging from DES to MD5. We would like to avoid
forcing all users to retype their passwords.

Is it possible to just copy the hash fields from /etc/shadow in the
respective MySQL columns, set crypt=Y and continue using it that way?
How could we then enforce new / changed passwords would use SHA1?

Sorry if this is documented somewhere, but I found it pretty hard to get
documentation for pam-mysql from the pam-mysl homepage.


Kind Regards,
Georg 'oxff' Wicherski