]> git.ipfire.org Git - thirdparty/shadow.git/commitdiff
tests/system/etc/login.defs: set ENCRYPT_METHOD SHA512
authorIker Pedrosa <ipedrosa@redhat.com>
Mon, 20 Jul 2026 08:07:23 +0000 (10:07 +0200)
committerAlejandro Colomar <foss+github@alejandro-colomar.es>
Wed, 29 Jul 2026 08:45:55 +0000 (10:45 +0200)
Commit 609bd9194174d ("Remove support for DES") commented out
ENCRYPT_METHOD, which caused tests to use the container's default
password hashing. Linux-PAM still defaults to DES when the encryption
method isn't set in the configuration, but since the shadow code no
longer supports DES, tests fail.

Explicitly setting ENCRYPT_METHOD to SHA512 ensures tests use a
supported modern hashing algorithm regardless of container defaults

Fixes: 609bd9194174 (2026-07-17; "*/: Remove support for DES")
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
tests/system/etc/login.defs

index 45afa28708e02ddfe27865eff754dd1f6fd1f5d6..a94b6a65141a249c2794026dc7a837744e6f327e 100644 (file)
@@ -301,7 +301,7 @@ CHFN_RESTRICT               rwh
 # Note: If you use PAM, it is recommended to use a value consistent with
 # the PAM modules configuration.
 #
-#ENCRYPT_METHOD SHA512
+ENCRYPT_METHOD SHA512
 
 #
 # Only works if ENCRYPT_METHOD is set to SHA256 or SHA512.