rpms
/
authselect
7
0
Fork 0
Code Issues Pull Requests Releases Activity

import authselect-1.2.6-1.el8

This commit is contained in:
CentOS Sources 2023-05-16 06:16:11 +00:00 committed by root
parent 889a2a82ed
commit ddaf7ae57e
5 changed files with 18856 additions and 85 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.authselect.metadata
View File

@ -1 +1 @@
4eb7fbb53b31d92f0fae17d6fd5e5da46bc8b434 SOURCES/authselect-1.2.5.tar.gz
9c2bb483de9209a00df4f69368245fdf3b8f635c SOURCES/authselect-1.2.6.tar.gz

2
.gitignore vendored
View File

@ -1 +1 @@
SOURCES/authselect-1.2.5.tar.gz
SOURCES/authselect-1.2.6.tar.gz

18726
SOURCES/0001-po-update-translations.patch Normal file
View File

File diff suppressed because it is too large Load Diff

190
SOURCES/0904-rhel8-Revert-yescrypt.patch
View File

@ -1,4 +1,4 @@
From 91cdfdc2a8a6af158fde0729597aa6e78c77d0e5 Mon Sep 17 00:00:00 2001
From a5d390b6c2a98854c6b5a53f49e3e76e86d7eb28 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina@redhat.com>
Date: Mon, 5 Dec 2022 19:03:00 +0100
Subject: [PATCH] rhel8: Revert yescrypt
@ -10,12 +10,13 @@ Subject: [PATCH] rhel8: Revert yescrypt
po/de.po | 4 ++--
po/es.po | 4 ++--
po/fa.po | 2 +-
po/fi.po | 2 +-
po/fi.po | 4 ++--
po/fr.po | 4 ++--
po/hu.po | 4 ++--
po/id.po | 2 +-
po/it.po | 4 ++--
po/ja.po | 4 ++--
po/ka.po | 4 ++--
po/ko.po | 4 ++--
po/nl.po | 4 ++--
po/pl.po | 4 ++--
@ -43,6 +44,7 @@ Subject: [PATCH] rhel8: Revert yescrypt
src/man/po/authselect-migration.7.adoc.de.po | 2 +-
src/man/po/authselect-migration.7.adoc.es.po | 2 +-
src/man/po/authselect-migration.7.adoc.fa.po | 2 +-
src/man/po/authselect-migration.7.adoc.fi.po | 2 +-
src/man/po/authselect-migration.7.adoc.fr.po | 2 +-
src/man/po/authselect-migration.7.adoc.hu.po | 2 +-
src/man/po/authselect-migration.7.adoc.it.po | 2 +-
@ -60,10 +62,10 @@ Subject: [PATCH] rhel8: Revert yescrypt
src/man/po/authselect-migration.7.adoc.uk.po | 4 ++--
src/man/po/authselect-migration.7.adoc.zh_CN.po | 2 +-
src/man/po/authselect-migration.7.adoc.zh_TW.po | 2 +-
56 files changed, 79 insertions(+), 79 deletions(-)
58 files changed, 83 insertions(+), 83 deletions(-)
diff --git a/po/authselect.pot b/po/authselect.pot
index 41335281ebd8392139d4c70e0237888dda4a7581..170b5599546536303dc23f199295fd486a72da8a 100644
index ebb39b01c03715ee9838421e4a433741d87ab901..c30807134393315fde32054aa174b870abfdfc4a 100644
--- a/po/authselect.pot
+++ b/po/authselect.pot
@@ -1535,7 +1535,7 @@ msgid "<name>"
@ -76,7 +78,7 @@ index 41335281ebd8392139d4c70e0237888dda4a7581..170b5599546536303dc23f199295fd48
#: src/compat/authcompat_Options.py:149
diff --git a/po/ca.po b/po/ca.po
index 84786d9a5dbe1995bc53340b3699f07fec096d74..b92fc4e21b3a57f9b1848c63eef7faa1be386b95 100644
index 3373e107538325092223d157cda4b1b40f6ab4db..75d91ec669a34b0b4f33ca3caedd4ff7df8e069d 100644
--- a/po/ca.po
+++ b/po/ca.po
@@ -1569,7 +1569,7 @@ msgid "<name>"
@ -89,7 +91,7 @@ index 84786d9a5dbe1995bc53340b3699f07fec096d74..b92fc4e21b3a57f9b1848c63eef7faa1
#: src/compat/authcompat_Options.py:149
diff --git a/po/cs.po b/po/cs.po
index 66255c9db3c1c1a98869ff88dcf99e7a2f36a163..5d92c6ef9228c374fc641fdeef856c6257b4720a 100644
index e95d7973060f69f708475fb44bff058d637ce010..28598d36533cf9ea237032eaa9c9b31c59023a10 100644
--- a/po/cs.po
+++ b/po/cs.po
@@ -1612,8 +1612,8 @@ msgid "<name>"
@ -104,7 +106,7 @@ index 66255c9db3c1c1a98869ff88dcf99e7a2f36a163..5d92c6ef9228c374fc641fdeef856c62
# auto translated by TM merge from project: authconfig, version: master, DocId: po/authconfig
#: src/compat/authcompat_Options.py:149
diff --git a/po/de.po b/po/de.po
index d15c0fc9b3db503641dcc733f767036c629113d5..ee2d0e8ced558da4425784e8a9f4694c967a0227 100644
index d509b09fd15b9e1490e5ca86c6bc421a28819a48..89d5fa6c15d43baeae6fb9280f4a935eaf3bbb74 100644
--- a/po/de.po
+++ b/po/de.po
@@ -1598,8 +1598,8 @@ msgid "<name>"
@ -119,7 +121,7 @@ index d15c0fc9b3db503641dcc733f767036c629113d5..ee2d0e8ced558da4425784e8a9f4694c
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/es.po b/po/es.po
index a799ea3b03a9f36b8cb15ee2134ba5a243da549e..ecb9cb8dbafe9916d39d08fa6181312bba6268e9 100644
index 3868023cdaab1e638f6f555ff7b020175cba1665..af5cde80a00f366d5259f75e4af7c108d97a2006 100644
--- a/po/es.po
+++ b/po/es.po
@@ -1598,8 +1598,8 @@ msgid "<name>"
@ -134,7 +136,7 @@ index a799ea3b03a9f36b8cb15ee2134ba5a243da549e..ecb9cb8dbafe9916d39d08fa6181312b
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/fa.po b/po/fa.po
index d48012a0f75af480f24b8af481d40633c5ea7e03..d250d3c7d0de8be97ffefdcf3117237deb4429be 100644
index 2968bc3c3b6ab89f292299e5552b610f0b6805d6..aa678e68429fcc7fbfe9d510f141f13830d16fb0 100644
--- a/po/fa.po
+++ b/po/fa.po
@@ -1536,7 +1536,7 @@ msgid "<name>"
@ -147,20 +149,22 @@ index d48012a0f75af480f24b8af481d40633c5ea7e03..d250d3c7d0de8be97ffefdcf3117237d
#: src/compat/authcompat_Options.py:149
diff --git a/po/fi.po b/po/fi.po
index ae2b128cd60ba3e661496fc914c76721886146d2..e8d48f09b7e4864e7ff9e4d4b6f6e94e9824a93e 100644
index 2ae32ff908cee4decf5bc2b800fc588796faaf58..73905901dd97620a93ceb0e7d8d5f1f8b9081fa0 100644
--- a/po/fi.po
+++ b/po/fi.po
@@ -1544,7 +1544,7 @@ msgid "<name>"
msgstr ""
@@ -1583,8 +1583,8 @@ msgid "<name>"
msgstr "<nimi>"
#: src/compat/authcompat_Options.py:148
-msgid "<descrypt|bigcrypt|md5|sha256|sha512|yescrypt>"
-msgstr "<descrypt|bigcrypt|md5|sha256|sha512|yescrypt>"
+msgid "<descrypt|bigcrypt|md5|sha256|sha512>"
msgstr ""
+msgstr "<descrypt|bigcrypt|md5|sha256|sha512>"
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/fr.po b/po/fr.po
index 91adf6c4bb3df1897e53323da382194aebeaf70b..2815b29e74be3271fd0a1bc3211a568716de17af 100644
index e686cb374d711575590e5b29c97dfb641c24d894..461632132b74ef348d489b93301df5559a2a5607 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -1605,8 +1605,8 @@ msgid "<name>"
@ -175,7 +179,7 @@ index 91adf6c4bb3df1897e53323da382194aebeaf70b..2815b29e74be3271fd0a1bc3211a5687
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/hu.po b/po/hu.po
index 42c84addce849b483bdbf053f71bc685b8ec2a49..103c77387e6ce06d0e181b92f6722138eaedae21 100644
index 87f9c508512b4ee9fdd2e57970fb1a34018e32be..f1a49d908fd33043bce75b3ac00535f5dc1c046b 100644
--- a/po/hu.po
+++ b/po/hu.po
@@ -1589,8 +1589,8 @@ msgid "<name>"
@ -190,10 +194,10 @@ index 42c84addce849b483bdbf053f71bc685b8ec2a49..103c77387e6ce06d0e181b92f6722138
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/id.po b/po/id.po
index 09c5e4f4b88452c5ebfbf9f171306a8fa6a95728..9564863975069ece39343fbac1e03c7cd716ca46 100644
index a83e1e207f0ff16c556dc92aaf8078a4ad1f45ba..6a7e2a7478c5ad1ca3071bd697afe36b67c27824 100644
--- a/po/id.po
+++ b/po/id.po
@@ -1536,7 +1536,7 @@ msgid "<name>"
@@ -1538,7 +1538,7 @@ msgid "<name>"
msgstr ""
#: src/compat/authcompat_Options.py:148
@ -203,7 +207,7 @@ index 09c5e4f4b88452c5ebfbf9f171306a8fa6a95728..9564863975069ece39343fbac1e03c7c
#: src/compat/authcompat_Options.py:149
diff --git a/po/it.po b/po/it.po
index f0e990cb496dd6ec5bd849e86621c839e2d455b5..a511d308d5d07b9915eb361cf360b9a32a1ab8c4 100644
index 285726001b5522232143657305b0e9973f1fbfa4..7edbab7291cb0d3b4f23b874cd7f06c0cf9c200c 100644
--- a/po/it.po
+++ b/po/it.po
@@ -1583,8 +1583,8 @@ msgid "<name>"
@ -218,10 +222,10 @@ index f0e990cb496dd6ec5bd849e86621c839e2d455b5..a511d308d5d07b9915eb361cf360b9a3
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/ja.po b/po/ja.po
index 1e822c3a1d80e684abe085ea31cfe86fd4d5b677..ff35083da00ddd467cf4040a6673eb2c9490da35 100644
index 5adcfbd662be9c43fe0616f789bb8302d0d2daba..b9bc2b3c35bc2b230e8307f4910a5061ec8617ee 100644
--- a/po/ja.po
+++ b/po/ja.po
@@ -1597,8 +1597,8 @@ msgid "<name>"
@@ -1598,8 +1598,8 @@ msgid "<name>"
msgstr "<name>"
#: src/compat/authcompat_Options.py:148
@ -232,11 +236,26 @@ index 1e822c3a1d80e684abe085ea31cfe86fd4d5b677..ff35083da00ddd467cf4040a6673eb2c
# auto translated by TM merge from translation memory: authconfig, unique id: authconfig:6.2.8:authconfig:0bbce02e304562c295a1d57d66c296d3
#: src/compat/authcompat_Options.py:149
diff --git a/po/ka.po b/po/ka.po
index 905b582f4c11073786b21ebe945aa3cf1bc29643..1e744d48416a437d932762729082261855c8ab37 100644
--- a/po/ka.po
+++ b/po/ka.po
@@ -1573,8 +1573,8 @@ msgid "<name>"
msgstr "<name>"
#: src/compat/authcompat_Options.py:148
-msgid "<descrypt|bigcrypt|md5|sha256|sha512|yescrypt>"
-msgstr "<descrypt|bigcrypt|md5|sha256|sha512|yescrypt>"
+msgid "<descrypt|bigcrypt|md5|sha256|sha512>"
+msgstr "<descrypt|bigcrypt|md5|sha256|sha512>"
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/ko.po b/po/ko.po
index a927f441ea12b1e46dff5aa67fe5515a014b8033..54e0a48e76c2e5b9844b324cb0afc784e1676563 100644
index 3942b7023a2f88ce285000a1872d633390ef61d1..1aa3e183992037ef8794e8097f4f1bc288656bb0 100644
--- a/po/ko.po
+++ b/po/ko.po
@@ -1569,8 +1569,8 @@ msgid "<name>"
@@ -1570,8 +1570,8 @@ msgid "<name>"
msgstr "<name>"
#: src/compat/authcompat_Options.py:148
@ -248,7 +267,7 @@ index a927f441ea12b1e46dff5aa67fe5515a014b8033..54e0a48e76c2e5b9844b324cb0afc784
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/nl.po b/po/nl.po
index 5bb5a5ed60cc3003b915a1351d7fb3e1382d982a..36b784899acc4d0a2d0a51eb01e96d845183f850 100644
index 380270a84415b7de1bb9a58e08da8310df02eef1..a5d0dbf4d32bf1001305178e77d5237dad1cab73 100644
--- a/po/nl.po
+++ b/po/nl.po
@@ -1598,8 +1598,8 @@ msgid "<name>"
@ -263,7 +282,7 @@ index 5bb5a5ed60cc3003b915a1351d7fb3e1382d982a..36b784899acc4d0a2d0a51eb01e96d84
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/pl.po b/po/pl.po
index 81616c6e966f358d73acb82698484c71d923dab7..c3e5874bb39a3a71ff0f0ac416acfa0700a41b43 100644
index 9b6627cc766c1e0a0db70187e13a57760dbb30c9..13553c81d1c57f22c5225aa0c017242abba15bf6 100644
--- a/po/pl.po
+++ b/po/pl.po
@@ -1609,8 +1609,8 @@ msgid "<name>"
@ -278,7 +297,7 @@ index 81616c6e966f358d73acb82698484c71d923dab7..c3e5874bb39a3a71ff0f0ac416acfa07
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/pt.po b/po/pt.po
index 6b1d1ab3902f7669bcfa020867bf5cc22fe6975d..ce750eeea43ff9735f2238394790b0f8e9b7421a 100644
index ad02a0b94911380ec4824446a5c7abfe4cd1fa6e..90d2aa3a506551571e5bfaa003b4aa2362a6a5a3 100644
--- a/po/pt.po
+++ b/po/pt.po
@@ -1536,7 +1536,7 @@ msgid "<name>"
@ -291,7 +310,7 @@ index 6b1d1ab3902f7669bcfa020867bf5cc22fe6975d..ce750eeea43ff9735f2238394790b0f8
#: src/compat/authcompat_Options.py:149
diff --git a/po/pt_BR.po b/po/pt_BR.po
index ef4af00a59773fd821cc3ae48e212084a90db5b6..99e1279c264efaf4b92d579a290e6e26cc7bf26d 100644
index 3ccd6679eaa68bc94ae8ac80cec4b81dd099a22c..8442acf18eed52de25222a95142df8389d57a72c 100644
--- a/po/pt_BR.po
+++ b/po/pt_BR.po
@@ -1592,8 +1592,8 @@ msgid "<name>"
@ -306,10 +325,10 @@ index ef4af00a59773fd821cc3ae48e212084a90db5b6..99e1279c264efaf4b92d579a290e6e26
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/ru.po b/po/ru.po
index 43a9bfbf5a018bdf30fc8ab696233a3af313607e..9532210c63d9176a8d15d0884c8ab008d82b8a41 100644
index 49190028c7ce89e2a33b0d72f0ae4f185f251ffc..d23284d29df8503e8e8afca6ac60dc0f89f7e886 100644
--- a/po/ru.po
+++ b/po/ru.po
@@ -1589,8 +1589,8 @@ msgid "<name>"
@@ -1590,8 +1590,8 @@ msgid "<name>"
msgstr "<name>"
#: src/compat/authcompat_Options.py:148
@ -321,7 +340,7 @@ index 43a9bfbf5a018bdf30fc8ab696233a3af313607e..9532210c63d9176a8d15d0884c8ab008
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/si.po b/po/si.po
index ba802552d4a85ddbf0379f3332905012a5698b71..800908cdaa1601abacda71d28e51e90ac413b502 100644
index 39f5a79298a22cc38cbba427d976a64347d6b51d..eaf4b3c08a31f275c51f8f52078df993992e7dbb 100644
--- a/po/si.po
+++ b/po/si.po
@@ -1536,7 +1536,7 @@ msgid "<name>"
@ -334,7 +353,7 @@ index ba802552d4a85ddbf0379f3332905012a5698b71..800908cdaa1601abacda71d28e51e90a
#: src/compat/authcompat_Options.py:149
diff --git a/po/sv.po b/po/sv.po
index fb1ef0ce4fcff97605c8d1c4d024e5b5ab9020c0..dde9aff07469fbf4beca6801a0353cf5bd2045d0 100644
index 3a2c2479aebc170906f52769b8403b3a8fd29f58..e2b1c49bcc3464375a4d0987a221c39d2faa48c4 100644
--- a/po/sv.po
+++ b/po/sv.po
@@ -1579,8 +1579,8 @@ msgid "<name>"
@ -349,11 +368,11 @@ index fb1ef0ce4fcff97605c8d1c4d024e5b5ab9020c0..dde9aff07469fbf4beca6801a0353cf5
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/tr.po b/po/tr.po
index 60f0c6ce5a9f54cb814371151460e592c38bb1e7..44496ef5cb70d35310acfb86330e77583090b1ca 100644
index 9be388fbbde21396666502662b964bc475098980..0aaa54335877ddadf13d4da7ad3277b1eccd0a09 100644
--- a/po/tr.po
+++ b/po/tr.po
@@ -1588,8 +1588,8 @@ msgid "<name>"
msgstr "<isim>"
@@ -1589,8 +1589,8 @@ msgid "<name>"
msgstr "<ad>"
#: src/compat/authcompat_Options.py:148
-msgid "<descrypt|bigcrypt|md5|sha256|sha512|yescrypt>"
@ -364,7 +383,7 @@ index 60f0c6ce5a9f54cb814371151460e592c38bb1e7..44496ef5cb70d35310acfb86330e7758
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/uk.po b/po/uk.po
index 1371122dcea19b739df2dc2b28c718865ae19cc0..b86461559972bc2b1e8a4e366770a140e4b93296 100644
index c66594f1bff7c0c0c1dd8aec8d8131f88ad23d06..bc4c93b8f63e6fafa67b2ee6c55edf2d927f0491 100644
--- a/po/uk.po
+++ b/po/uk.po
@@ -1591,8 +1591,8 @@ msgid "<name>"
@ -379,7 +398,7 @@ index 1371122dcea19b739df2dc2b28c718865ae19cc0..b86461559972bc2b1e8a4e366770a140
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/zh_CN.po b/po/zh_CN.po
index 3adf18b416c1bf62a14eff55ae5a64cabd524e44..1a52f39a9e79166a561811de13749204da637308 100644
index 75ec7d808811187b7722121966aaa55236dbc7d4..6c109a0d8556a8b5fd93e03ae543f3d3e909a6b8 100644
--- a/po/zh_CN.po
+++ b/po/zh_CN.po
@@ -1559,8 +1559,8 @@ msgid "<name>"
@ -394,7 +413,7 @@ index 3adf18b416c1bf62a14eff55ae5a64cabd524e44..1a52f39a9e79166a561811de13749204
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/zh_TW.po b/po/zh_TW.po
index 808a7d442a105c19ca58c2cbba325ccb2b16841c..ee387ad19bbf0bd500522fa939d19655a36fc493 100644
index 89fefedabe611f789fb65aaef0a8b1421fca41ef..0562435441f57f7426964ee5639d97930a3c9b55 100644
--- a/po/zh_TW.po
+++ b/po/zh_TW.po
@@ -1562,8 +1562,8 @@ msgid "<name>"
@ -409,111 +428,111 @@ index 808a7d442a105c19ca58c2cbba325ccb2b16841c..ee387ad19bbf0bd500522fa939d19655
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/profiles/minimal/password-auth b/profiles/minimal/password-auth
index accd020eba3c8101ea0173b73faade109590c08f..823cc7d2dc49b529c922877b1d5a4ae355e9672b 100644
index 858c21f588fb0a76e30b7ecb122f1f332d18a294..8c4cb37f848a01889724ec8c56f1b819facb330d 100644
--- a/profiles/minimal/password-auth
+++ b/profiles/minimal/password-auth
@@ -10,7 +10,7 @@ account required pam_faillock.so
account required pam_unix.so
@@ -12,7 +12,7 @@ account required pam_unix.so
password requisite pam_pwquality.so
password [default=1 ignore=ignore success=ok] pam_localuser.so {include if "with-pwhistory"}
password requisite pam_pwhistory.so use_authtok {include if "with-pwhistory"}
-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok
+password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok
password required pam_deny.so
session optional pam_keyinit.so revoke
diff --git a/profiles/minimal/system-auth b/profiles/minimal/system-auth
index accd020eba3c8101ea0173b73faade109590c08f..823cc7d2dc49b529c922877b1d5a4ae355e9672b 100644
index 858c21f588fb0a76e30b7ecb122f1f332d18a294..8c4cb37f848a01889724ec8c56f1b819facb330d 100644
--- a/profiles/minimal/system-auth
+++ b/profiles/minimal/system-auth
@@ -10,7 +10,7 @@ account required pam_faillock.so
account required pam_unix.so
@@ -12,7 +12,7 @@ account required pam_unix.so
password requisite pam_pwquality.so
password [default=1 ignore=ignore success=ok] pam_localuser.so {include if "with-pwhistory"}
password requisite pam_pwhistory.so use_authtok {include if "with-pwhistory"}
-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok
+password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok
password required pam_deny.so
session optional pam_keyinit.so revoke
diff --git a/profiles/nis/password-auth b/profiles/nis/password-auth
index f181a58ab7792c7e1a4234e677cbb7e3d0a6548d..b567cc3af624be3627a3143e74c63dd943edacbd 100644
index 56a51d9eebb2987da340805ddb4e4a6752ebdeb2..56b19a6b9b0e6185942d74bf17d7bca89f829488 100644
--- a/profiles/nis/password-auth
+++ b/profiles/nis/password-auth
@@ -13,7 +13,7 @@ account required pam_faillock.so
account required pam_unix.so broken_shadow
@@ -15,7 +15,7 @@ account required pam_unix.so broken_shad
password requisite pam_pwquality.so {if not "with-nispwquality":local_users_only}
password [default=1 ignore=ignore success=ok] pam_localuser.so {include if "with-pwhistory"}
password requisite pam_pwhistory.so use_authtok {include if "with-pwhistory"}
-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok nis
+password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok nis
password required pam_deny.so
session optional pam_keyinit.so revoke
diff --git a/profiles/nis/system-auth b/profiles/nis/system-auth
index bc3f402435aafb5294dbae94096b184af51cf914..23f4238937483ffec6229a9da02da076c2966404 100644
index 74cf6ece9ce0b1b64b122fd2309ebf5d496c4787..5d5010a712c3228d6610358770a5ba8ed20c707a 100644
--- a/profiles/nis/system-auth
+++ b/profiles/nis/system-auth
@@ -14,7 +14,7 @@ account required pam_faillock.so
account required pam_unix.so broken_shadow
@@ -16,7 +16,7 @@ account required pam_unix.so broken_shad
password requisite pam_pwquality.so {if not "with-nispwquality":local_users_only}
password [default=1 ignore=ignore success=ok] pam_localuser.so {include if "with-pwhistory"}
password requisite pam_pwhistory.so use_authtok {include if "with-pwhistory"}
-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok nis
+password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok nis
password required pam_deny.so
session optional pam_keyinit.so revoke
diff --git a/profiles/sssd/password-auth b/profiles/sssd/password-auth
index 3e33dcc09f68055f2f87709e638005929bd577b3..c8b516da1a618326c779acfb9792c53d539fced7 100644
index da95481a26c53d35c4db496c98663615bc6af45f..fab4a2c2341cdaf2e00e761cde03fd4c11d86155 100644
--- a/profiles/sssd/password-auth
+++ b/profiles/sssd/password-auth
@@ -22,7 +22,7 @@ account [default=bad success=ok user_unknown=ignore] pam_sss.so
account required pam_permit.so
@@ -24,7 +24,7 @@ account required pam_permit.so
password requisite pam_pwquality.so local_users_only
password [default=1 ignore=ignore success=ok] pam_localuser.so {include if "with-pwhistory"}
password requisite pam_pwhistory.so use_authtok {include if "with-pwhistory"}
-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok
+password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok
password sufficient pam_sss.so use_authtok
password required pam_deny.so
diff --git a/profiles/sssd/system-auth b/profiles/sssd/system-auth
index a43341120f55bad3fb07dfea1c04453d0a278329..5b99887d1c1563486121f23e7aacc96423c6365f 100644
index 9e25476e9f0ffbfbf852ded84f62217db45655cb..4a03851dfb32a8622ea464a79f8b429f97e2165a 100644
--- a/profiles/sssd/system-auth
+++ b/profiles/sssd/system-auth
@@ -29,7 +29,7 @@ account [default=bad success=ok user_unknown=ignore] pam_sss.so
account required pam_permit.so
@@ -31,7 +31,7 @@ account required pam_permit.so
password requisite pam_pwquality.so local_users_only
password [default=1 ignore=ignore success=ok] pam_localuser.so {include if "with-pwhistory"}
password requisite pam_pwhistory.so use_authtok {include if "with-pwhistory"}
-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok
+password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok
password sufficient pam_sss.so use_authtok
password required pam_deny.so
diff --git a/profiles/winbind/password-auth b/profiles/winbind/password-auth
index 58705f3b15165c8d8bd4938889e3fb4d89c1a528..a8e5270a7b6d7221651aeb7a05c994d9f1944bba 100644
index 8b260fa06f5ed8494d1f6fac74517d3a54622693..4944b4213d83acc6f18e6078d9d5d95d8e30950c 100644
--- a/profiles/winbind/password-auth
+++ b/profiles/winbind/password-auth
@@ -19,7 +19,7 @@ account [default=bad success=ok user_unknown=ignore] pam_winbind.so {if "wit
account required pam_permit.so
@@ -21,7 +21,7 @@ account required pam_permit.so
password requisite pam_pwquality.so local_users_only
password [default=1 ignore=ignore success=ok] pam_localuser.so {include if "with-pwhistory"}
password requisite pam_pwhistory.so use_authtok {include if "with-pwhistory"}
-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok
+password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok
password sufficient pam_winbind.so {if "with-krb5":krb5_auth} use_authtok
password required pam_deny.so
diff --git a/profiles/winbind/system-auth b/profiles/winbind/system-auth
index 994c342441a0ed2738765a9fa7f6cc84f692d1d8..094eef88da26223e600849469b2d45df179bd06a 100644
index 33aa13efb92405393236c3511ebb351facd916f0..afe27d7b0864e66b9a91a582d0c6f94cc37f1af7 100644
--- a/profiles/winbind/system-auth
+++ b/profiles/winbind/system-auth
@@ -20,7 +20,7 @@ account [default=bad success=ok user_unknown=ignore] pam_winbind.so {if "wit
account required pam_permit.so
@@ -22,7 +22,7 @@ account required pam_permit.so
password requisite pam_pwquality.so local_users_only
password [default=1 ignore=ignore success=ok] pam_localuser.so {include if "with-pwhistory"}
password requisite pam_pwhistory.so use_authtok {include if "with-pwhistory"}
-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok
+password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok
password sufficient pam_winbind.so {if "with-krb5":krb5_auth} use_authtok
password required pam_deny.so
diff --git a/src/compat/authcompat_Options.py b/src/compat/authcompat_Options.py
index d26dedabdfb9519861076b58cddd0dd0eb04b7cb..94301462a4965d7237dbc673fedb6b36cbeac348 100644
index 5c8b21b55014198d6d9dfc98bd807c3c922b06f4..5c97fee5ca9d12816e6d308f2319e0c7329db4cf 100644
--- a/src/compat/authcompat_Options.py
+++ b/src/compat/authcompat_Options.py
@@ -145,7 +145,7 @@ class Options:
@ -526,10 +545,10 @@ index d26dedabdfb9519861076b58cddd0dd0eb04b7cb..94301462a4965d7237dbc673fedb6b36
Option.UnsupportedValued("smartcardmodule", _("<module>")),
Option.UnsupportedValued("smbsecurity", _("<user|server|domain|ads>")),
diff --git a/src/man/authselect-migration.7.adoc b/src/man/authselect-migration.7.adoc
index 3513a7e7cd3d7cc0045167e8224248c5be90ab2c..a321d97a36099387ae7314cc46b65f0c635db786 100644
index 888cd4e5a0750d4e1aa5898887f5f7fd42472741..ee493ee06de1ed5406b14115055a72b916c86f7f 100644
--- a/src/man/authselect-migration.7.adoc
+++ b/src/man/authselect-migration.7.adoc
@@ -91,7 +91,7 @@ configuration file for required services.
@@ -90,7 +90,7 @@ configuration file for required services.
NOTE: Authconfig options `--enableshadow` and `--passalgo=sha512` were often
used to make sure that passwords are stored in `/etc/shadow` using `sha512`
@ -599,6 +618,19 @@ index 3212410cbe63b92370ab032b90d975e6f3351af3..8ffb506d4d0f80227d739477c9e6740c
"Authconfig options `--enableshadow` and `--passalgo=sha512` were often used "
"to make sure that passwords are stored in `/etc/shadow` using `sha512` "
-"algorithm. *The authselect profiles now use the yescrypt hashing method* and "
+"algorithm. *The authselect profiles now use the sha512 hashing method* and "
"it cannot be changed through an option (only by creating a custom profile). "
"You can just omit these options."
msgstr ""
diff --git a/src/man/po/authselect-migration.7.adoc.fi.po b/src/man/po/authselect-migration.7.adoc.fi.po
index 5a4aa6d1e8c0f767cb98cd47376d476104439ec5..6f5d26ebb7ee709e5e0589ca5bc2002110d71f01 100644
--- a/src/man/po/authselect-migration.7.adoc.fi.po
+++ b/src/man/po/authselect-migration.7.adoc.fi.po
@@ -189,7 +189,7 @@ msgstr ""
msgid ""
"Authconfig options `--enableshadow` and `--passalgo=sha512` were often used "
"to make sure that passwords are stored in `/etc/shadow` using `sha512` "
-"algorithm. *The authselect profiles now use the yescrypt hashing method* and "
+"algorithm. *The authselect profiles now use the sha512 hashing method* and "
"it cannot be changed through an option (only by creating a custom profile). "
"You can just omit these options."
@ -630,10 +662,10 @@ index a058b221b3324f6ed120a05fefcd3fe46af7e08b..368476a43138b2952baad7a0691e064d
"You can just omit these options."
msgstr ""
diff --git a/src/man/po/authselect-migration.7.adoc.it.po b/src/man/po/authselect-migration.7.adoc.it.po
index 74c7fe127c6d6cbb7cf6913b6ccce5bfbf24f2ac..a1203206af368b766aea96c484be3bcb65c8d4b1 100644
index f28d362d8c7a0986259f2cfff1583e9b4dd19f88..d09af609ce7afcb47601358ba4d4f114cee306eb 100644
--- a/src/man/po/authselect-migration.7.adoc.it.po
+++ b/src/man/po/authselect-migration.7.adoc.it.po
@@ -185,7 +185,7 @@ msgstr ""
@@ -189,7 +189,7 @@ msgstr ""
msgid ""
"Authconfig options `--enableshadow` and `--passalgo=sha512` were often used "
"to make sure that passwords are stored in `/etc/shadow` using `sha512` "
@ -663,10 +695,10 @@ index 782e094c5f7c06a7d0fb340cf38d0c3b2f9a56ec..a8da7e2a23ef8f43e95df47a462bce91
"せん(カスタムプロファイルを作成する場合のみ）。 これらのオプションは省略でき"
"ます。"
diff --git a/src/man/po/authselect-migration.7.adoc.ko.po b/src/man/po/authselect-migration.7.adoc.ko.po
index 5b36c536524e5b35cb9334af35e657f24fd903b9..4bb4256dda532f870b644e856704060bc35c6110 100644
index a57401b4ff8ef7da06a7ff5c28d3ed6a51b2f13b..3bd1936b9e577e0ccbb35da1fff19aa5121b48c8 100644
--- a/src/man/po/authselect-migration.7.adoc.ko.po
+++ b/src/man/po/authselect-migration.7.adoc.ko.po
@@ -248,13 +248,13 @@ msgstr ""
@@ -249,13 +249,13 @@ msgstr ""
msgid ""
"Authconfig options `--enableshadow` and `--passalgo=sha512` were often used "
"to make sure that passwords are stored in `/etc/shadow` using `sha512` "
@ -802,10 +834,10 @@ index b3087eac46223df0ad9115eafccc426b34ebac99..397e901892f9df42ab2f7721f988427f
"profil). Du kan helt enkelt utelämna dessa flaggor."
diff --git a/src/man/po/authselect-migration.7.adoc.tr.po b/src/man/po/authselect-migration.7.adoc.tr.po
index b68b5df326df7c3164c53204079238778d52faf5..399ea1f0a9df659745919d36c38bd885431e0bca 100644
index 35e5d5c21609d1f68c5e89a5eaf54a4c456e48e3..157f7d2e4d1a53c27de1673409e658f696b083b6 100644
--- a/src/man/po/authselect-migration.7.adoc.tr.po
+++ b/src/man/po/authselect-migration.7.adoc.tr.po
@@ -257,13 +257,13 @@ msgstr ""
@@ -258,13 +258,13 @@ msgstr ""
msgid ""
"Authconfig options `--enableshadow` and `--passalgo=sha512` were often used "
"to make sure that passwords are stored in `/etc/shadow` using `sha512` "
@ -843,10 +875,10 @@ index 5a1b8a3aa5e8ce8dfbe40b0545187878dea09dbd..98d9841724a90e207818ea179e5870fd
"використовувати ці параметри."
diff --git a/src/man/po/authselect-migration.7.adoc.zh_CN.po b/src/man/po/authselect-migration.7.adoc.zh_CN.po
index c3c8b9a0185094d91a968b8049f425b4a80c14d5..a0ebf52d93689e866f6258490e61d6cf4c8bfeb1 100644
index 6f5e562f5026e32623952154298df7ca950c7fdb..2b95ca4d2316644af9d299a4b4757a30ae68dc2f 100644
--- a/src/man/po/authselect-migration.7.adoc.zh_CN.po
+++ b/src/man/po/authselect-migration.7.adoc.zh_CN.po
@@ -189,7 +189,7 @@ msgstr ""
@@ -190,7 +190,7 @@ msgstr ""
msgid ""
"Authconfig options `--enableshadow` and `--passalgo=sha512` were often used "
"to make sure that passwords are stored in `/etc/shadow` using `sha512` "

21
SPECS/authselect.spec
View File

@ -2,8 +2,8 @@
%define _empty_manifest_terminate_build 0
Name: authselect
Version: 1.2.5
Release: 2%{?dist}
Version: 1.2.6
Release: 1%{?dist}
Summary: Configures authentication and identity sources from supported profiles
URL: https://github.com/authselect/authselect
@ -12,6 +12,8 @@ Source0: %{url}/archive/%{version}/%{name}-%{version}.tar.gz
%global makedir %{_builddir}/%{name}-%{version}
Patch0001: 0001-po-update-translations.patch
# Downstream only
Patch0901: 0901-rhel8-remove-mention-of-Fedora-Change-page-in-compat.patch
Patch0902: 0902-rhel8-remove-ecryptfs-support.patch
@ -265,6 +267,15 @@ if [ -f %{validfile} ]; then
%__rm -f %{validfile}
fi
# Keep nss-altfiles for all rpm-ostree based systems.
# See https://github.com/authselect/authselect/issues/48
if test -e /run/ostree-booted; then
for PROFILE in `ls %{_datadir}/authselect/default`; do
%{_bindir}/authselect create-profile $PROFILE --vendor --base-on $PROFILE --symlink-pam --symlink-dconf --symlink=REQUIREMENTS --symlink=README &> /dev/null
%__sed -ie "s/^\(passwd\|group\):\(.*\)systemd\(.*\)/\1:\2systemd altfiles\3/g" %{_datadir}/authselect/vendor/$PROFILE/nsswitch.conf &> /dev/null
done
fi
# Apply any changes to profiles (validates configuration first internally)
%{_bindir}/authselect apply-changes &> /dev/null
@ -293,8 +304,10 @@ exit 0
exit 0
%changelog
* Wed Dec 7 2022 Pavel Březina <pbrezina@redhat.com> - 1.2.5-2
- Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151229)
* Thu Dec 1 2022 Pavel Březina <pbrezina@redhat.com> - 1.2.6-1
- Rebase to 1.2.6 (RHBZ #2142805)
- Update translations (RHBZ #2139696)
- Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151140)
* Thu May 5 2022 Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
- Rebase to 1.2.5 (RHBZ #2080238)