shadow: Update to version 4.11.1 and fix bug 12762

[people/pmueller/ipfire-2.x.git] / config / shadow / login.defs

diff --git a/config/shadow/login.defs b/config/shadow/login.defs
index d99597aa6710583aab045086833d46e064fbf10e..a9559d6c42960fa66a9effe2189373a402ba8038 100644 (file)
--- a/config/shadow/login.defs
+++ b/config/shadow/login.defs
@@ -251,13 +251,16 @@ CHFN_RESTRICT             rwh
 # If set to MD5, MD5-based algorithm will be used for encrypting password
 # If set to SHA256, SHA256-based algorithm will be used for encrypting password
 # If set to SHA512, SHA512-based algorithm will be used for encrypting password
+# If set to BCRYPT, BCRYPT-based algorithm will be used for encrypting password
+# If set to YESCRYPT, YESCRYPT-based algorithm will be used for encrypting password
 # If set to DES, DES-based algorithm will be used for encrypting password (default)
+# MD5 and DES should not be used for new hashes, see crypt(5) for recommendations.
 # Overrides the MD5_CRYPT_ENAB option
 #
 # Note: If you use PAM, it is recommended to use a value consistent with
 # the PAM modules configuration.
 #
-ENCRYPT_METHOD SHA512
+ENCRYPT_METHOD YESCRYPT
 
 #
 # Only works if ENCRYPT_METHOD is set to SHA256 or SHA512.