|
|
@@ -45,7 +45,7 @@
|
|
|
|
|
|
<para>Prepare Shadow for compilation:</para>
|
|
|
|
|
|
-<screen><userinput>./configure --libdir=/lib --enable-shared --without-selinux</userinput></screen>
|
|
|
+<screen><userinput>./configure --libdir=/lib --sysconfdir=/etc --enable-shared --without-selinux</userinput></screen>
|
|
|
|
|
|
<variablelist>
|
|
|
<title>The meaning of the configure options:</title>
|
|
|
@@ -88,54 +88,33 @@ convert-mans UTF-8 EUC-JP man/ja/*.?
|
|
|
convert-mans UTF-8 KOI8-R man/ru/*.?
|
|
|
convert-mans UTF-8 ISO-8859-9 man/tr/*.?</userinput></screen>
|
|
|
|
|
|
- <para>Compile the package:</para>
|
|
|
-
|
|
|
-<screen><userinput>make</userinput></screen>
|
|
|
-
|
|
|
- <para>This package does not come with a test suite.</para>
|
|
|
-
|
|
|
- <para>Install the package:</para>
|
|
|
-
|
|
|
-<screen><userinput>make install</userinput></screen>
|
|
|
-
|
|
|
- <para id="shadow-limits-login_access">Shadow uses two files to configure
|
|
|
- authentication settings for the system. Install these two configuration
|
|
|
- files:</para>
|
|
|
-
|
|
|
- <indexterm zone="shadow-limits-login_access">
|
|
|
- <primary sortas="e-/etc/limits">/etc/limits</primary>
|
|
|
- </indexterm>
|
|
|
-
|
|
|
- <indexterm zone="shadow-limits-login_access">
|
|
|
- <primary sortas="e-/etc/login.access">/etc/login.access</primary>
|
|
|
- </indexterm>
|
|
|
-
|
|
|
-<screen><userinput>cp -v etc/{limits,login.access} /etc</userinput></screen>
|
|
|
-
|
|
|
<para id="shadow-login_defs">Instead of using the default
|
|
|
<emphasis>crypt</emphasis> method, use the more secure
|
|
|
<emphasis>MD5</emphasis> method of password encryption, which also allows
|
|
|
passwords longer than 8 characters. It is also necessary to change the
|
|
|
obsolete <filename class="directory">/var/spool/mail</filename> location
|
|
|
for user mailboxes that Shadow uses by default to the <filename
|
|
|
- class="directory">/var/mail</filename> location used currently. Both of
|
|
|
- these can be accomplished by changing the relevant configuration file
|
|
|
- while copying it to its destination:</para>
|
|
|
-
|
|
|
- <indexterm zone="shadow-login_defs">
|
|
|
- <primary sortas="e-/etc/login.defs">/etc/login.defs</primary>
|
|
|
- </indexterm>
|
|
|
+ class="directory">/var/mail</filename> location used currently.</para>
|
|
|
|
|
|
-<screen><userinput>sed -e's@#MD5_CRYPT_ENAB.no@MD5_CRYPT_ENAB yes@' \
|
|
|
- -e 's@/var/spool/mail@/var/mail@' \
|
|
|
- etc/login.defs > /etc/login.defs</userinput></screen>
|
|
|
+<screen><userinput>sed -i -e 's@#MD5_CRYPT_ENAB.no@MD5_CRYPT_ENAB yes@' \
|
|
|
+ -e 's@/var/spool/mail@/var/mail@' etc/login.defs</userinput></screen>
|
|
|
|
|
|
<note>
|
|
|
<para>If you built Shadow with Cracklib support, run the following:</para>
|
|
|
|
|
|
-<screen role="nodump"><userinput>sed -i 's@DICTPATH.*@DICTPATH\t/lib/cracklib/pw_dict@' /etc/login.defs</userinput></screen>
|
|
|
+<screen role="nodump"><userinput>sed -i 's@DICTPATH.*@DICTPATH\t/lib/cracklib/pw_dict@' etc/login.defs</userinput></screen>
|
|
|
</note>
|
|
|
|
|
|
+ <para>Compile the package:</para>
|
|
|
+
|
|
|
+<screen><userinput>make</userinput></screen>
|
|
|
+
|
|
|
+ <para>This package does not come with a test suite.</para>
|
|
|
+
|
|
|
+ <para>Install the package:</para>
|
|
|
+
|
|
|
+<screen><userinput>make install</userinput></screen>
|
|
|
+
|
|
|
<para>Move a misplaced program to its proper location:</para>
|
|
|
|
|
|
<screen><userinput>mv -v /usr/bin/passwd /bin</userinput></screen>
|
|
|
@@ -146,13 +125,6 @@ convert-mans UTF-8 ISO-8859-9 man/tr/*.?</userinput></screen>
|
|
|
rm -v /lib/libshadow.so
|
|
|
ln -sfv ../../lib/libshadow.so.0 /usr/lib/libshadow.so</userinput></screen>
|
|
|
|
|
|
- <para>The <parameter>-D</parameter> option of the
|
|
|
- <command>useradd</command> program requires the <filename
|
|
|
- class="directory">/etc/default</filename> directory for it to work
|
|
|
- properly:</para>
|
|
|
-
|
|
|
-<screen><userinput>mkdir -v /etc/default</userinput></screen>
|
|
|
-
|
|
|
</sect2>
|
|
|
|
|
|
<sect2 id="conf-shadow" role="configuration">
|
Matthew Burgess