#305 Password hashes are stored in opasswd as MD5

[Ladadadada]

Passwords are stored using MD5 in /etc/security/opasswd even when /etc/shadow is using SHA512 hashes.

Relevant line from the configuration files:

password sufficient pam_unix.so sha512 remember=4 shadow use_authtok

[Ladadadada]

I'm not sure which versions this is valid for but CentOS reports that I have 0.99.6.2-4.el5 installed. The most recent code seems to have Goodcrypt_md5() sprinkled through it which looks suspiciously like it might be the culprit.

[Tomas Mraz]

Please just use the pam_pwhistory module instead of the remember option of pam_unix.

[Thorsten Kukuk]

0.99.6 id pretty old, stable code trees are 1.0 and 1.1. 1.1.0 contains pam_pwhistory.