|
@@ -8,8 +8,8 @@ way.</para>
|
|
<screen>&buildtime; &shadow-time;
|
|
<screen>&buildtime; &shadow-time;
|
|
&diskspace; &shadow-compsize;</screen>
|
|
&diskspace; &shadow-compsize;</screen>
|
|
|
|
|
|
-&aa-shadowpwd-down;
|
|
|
|
-&aa-shadowpwd-dep;
|
|
|
|
|
|
+&aa-shadow-down;
|
|
|
|
+&aa-shadow-dep;
|
|
|
|
|
|
<sect2><title> </title><para> </para></sect2>
|
|
<sect2><title> </title><para> </para></sect2>
|
|
|
|
|
|
@@ -50,7 +50,7 @@ system. Install these two config files:</para>
|
|
<screen><userinput>cp etc/{limits,login.access} /etc</userinput></screen>
|
|
<screen><userinput>cp etc/{limits,login.access} /etc</userinput></screen>
|
|
|
|
|
|
<para>We want to change the password method to enable MD5 passwords which are
|
|
<para>We want to change the password method to enable MD5 passwords which are
|
|
-theoretically more secure than the default "crypt" method and also allow
|
|
|
|
|
|
+theoretically more secure than the default crypt method and also allow
|
|
password lengths greater than 8 characters. We also need to change the old
|
|
password lengths greater than 8 characters. We also need to change the old
|
|
<filename class="directory">/var/spool/mail</filename> location for user
|
|
<filename class="directory">/var/spool/mail</filename> location for user
|
|
mailboxes to the current location at
|
|
mailboxes to the current location at
|
|
@@ -92,11 +92,46 @@ Shadow:</para>
|
|
|
|
|
|
</sect2>
|
|
</sect2>
|
|
|
|
|
|
-&c6-cf-shadowpwd;
|
|
|
|
-&c6-cf-password;
|
|
|
|
|
|
+<sect2><title> </title><para> </para></sect2>
|
|
|
|
+
|
|
|
|
+<sect2><title>Configuring Shadow</title>
|
|
|
|
+
|
|
|
|
+<para>This package contains utilities to modify users' passwords, add
|
|
|
|
+or delete users and groups, and the like. We're not going to explain what
|
|
|
|
+'password shadowing' means. A full explanation can be found in the
|
|
|
|
+<filename>doc/HOWTO</filename>
|
|
|
|
+file within the unpacked Shadow source tree. There's one
|
|
|
|
+thing to keep in mind if you decide to use Shadow support: programs that
|
|
|
|
+need to verify passwords (for example xdm, ftp daemons, pop3 daemons) need
|
|
|
|
+to be 'shadow-compliant', that is they need to be able to work with
|
|
|
|
+shadowed passwords.</para>
|
|
|
|
+
|
|
|
|
+<para>To enable shadowed passwords, run the following command:</para>
|
|
|
|
+
|
|
|
|
+<screen><userinput>/usr/sbin/pwconv</userinput></screen>
|
|
|
|
+
|
|
|
|
+<para>And to enable shadowed group passwords, run the following
|
|
|
|
+command:</para>
|
|
|
|
+
|
|
|
|
+<screen><userinput>/usr/sbin/grpconv</userinput></screen>
|
|
|
|
+
|
|
|
|
+<para>Under normal circumstances, you won't have created any passwords yet.
|
|
|
|
+However, if returning to this section to enable shadowing, you should reset any
|
|
|
|
+current user passwords with the <command>passwd</command> command or any
|
|
|
|
+group passwords with the <command>gpasswd</command> command.</para>
|
|
|
|
+</sect2>
|
|
|
|
+
|
|
|
|
+<sect2>
|
|
|
|
+<title>Setting the root password</title>
|
|
|
|
+
|
|
|
|
+<para>Choose a password for user root and set it via:</para>
|
|
|
|
+
|
|
|
|
+<screen><userinput>passwd root</userinput></screen>
|
|
|
|
+
|
|
|
|
+</sect2>
|
|
|
|
|
|
-&aa-shadowpwd-shortdesc;
|
|
|
|
-&aa-shadowpwd-desc;
|
|
|
|
|
|
+&aa-shadow-shortdesc;
|
|
|
|
+&aa-shadow-desc;
|
|
|
|
|
|
</sect1>
|
|
</sect1>
|
|
|
|
|