Webmin "system -> changepassword" create password in with DES hash
2022-05-11
2022-05-28
×
Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.
Ubuntu 22.04
Webmin from apt
When I change a user password with "system -> changepassword", new password is stored in DES format instead of $y$ type which refer to YESCRYPT.
Why ?
How to change that ?
Last edit: Dominic Pageau 2022-05-11
Hi,
This can be configured on System ⇾ Users and Groups ⇾ Configuration: New user options page with Password encryption method option.
Also, you can define the program directly for changing the password using System ⇾ Change Passwords ⇾ Configuration: Configurable options page.
Ubuntu 22.04
Webmin from apt
webmin 1.991
System ⇾ Users and Groups ⇾ Configuration: New user options page with Password encryption method is set to "Determine automatically"
available options are
- DES crypt
- MD5
- Blowfish
- SHA512
Yescrypt which is default in ubuntu 22.04 is missing ($y$ string in /etc/shadow). Does it fail to detect yescrypt and revert to DES ?
System ⇾ Change Passwords ⇾ Configuration: Configurable options is set to "Update system files directly" which it does with DES encryption.
Can I leave that to "Update system files directly" and force yescrypt or I need to use "passwd" command ?
EDIT:
When I use /usr/bin/passwd it now fail to change in /etc/samba/smbpasswd nevertheless "Change password in other modules" is checked
Last edit: Dominic Pageau 2022-05-11
You're right, this is new to Ubuntu 20 and 22. I'll update this ticket when it's implemented.
This has been implemented for inclusion to upcoming Webmin 1.995.