Gentoo Archives: gentoo-dev

From: Sam James <sam@g.o>
To: gentoo-dev@l.g.o
Cc: pr@g.o, toolchain@g.o, Sam James <sam@g.o>
Subject: [gentoo-dev] [PATCH 1/2] 2021-06-30-libxcrypt-migration: mention PAM/md5crypt issues
Date: Tue, 20 Jul 2021 17:46:15
Message-Id: 20210720174547.1946438-1-sam@gentoo.org
1 Bug: https://bugs.gentoo.org/802267
2 Bug: https://bugs.gentoo.org/802807
3 Signed-off-by: Sam James <sam@g.o>
4 ---
5 .../2021-06-30-libxcrypt-migration.en.txt | 11 ++++++++++-
6 1 file changed, 10 insertions(+), 1 deletion(-)
7
8 diff --git a/2021-06-30-libxcrypt-migration/2021-06-30-libxcrypt-migration.en.txt b/2021-06-30-libxcrypt-migration/2021-06-30-libxcrypt-migration.en.txt
9 index 16b5596..5a78036 100644
10 --- a/2021-06-30-libxcrypt-migration/2021-06-30-libxcrypt-migration.en.txt
11 +++ b/2021-06-30-libxcrypt-migration/2021-06-30-libxcrypt-migration.en.txt
12 @@ -2,7 +2,7 @@ Title: migrating from glibc[crypt] to libxcrypt in ~arch
13 Author: Andreas K. Hüttel <dilfridge@g.o>
14 Author: Sam James <sam@g.o>
15 Posted: 2021-06-30
16 -Revision: 1
17 +Revision: 2
18 News-Item-Format: 2.0
19
20 The implementation of libcrypt.so within glibc has been deprecated
21 @@ -42,6 +42,15 @@ of steps described on the wiki (see below), but the outline is:
22 and enable it
23 * unmask ~virtual/libcrypt-2
24
25 +Please note that if you last changed your password before ~2008,
26 +it may using md5crypt or similar other weak mechanisms in /etc/shadow;
27 +a bug in PAM [0][1] may mean that you were unable to login. We recommend
28 +using `passwd` to change/refresh your passwrd so it is using modern
29 +methods. A new version of PAM has been added to the tree to resolve this issue.
30 +
31 For more information, please see:
32 * https://wiki.gentoo.org/wiki/Project:Toolchain/libcrypt_implementation
33 * https://bugs.gentoo.org/699422
34 +
35 +[0] https://bugs.gentoo.org/802267
36 +[1] https://bugs.gentoo.org/802807
37 --
38 2.32.0

Replies