Compare commits

...

No commits in common. "imports/c8s/authselect-1.2.5-2.el8_7" and "c8" have entirely different histories.

7 changed files with 27981 additions and 125 deletions

View File

@ -1 +0,0 @@
4eb7fbb53b31d92f0fae17d6fd5e5da46bc8b434 SOURCES/authselect-1.2.5.tar.gz

2
.gitignore vendored
View File

@ -1 +1 @@
SOURCES/authselect-1.2.5.tar.gz
SOURCES/authselect-1.2.6.tar.gz

File diff suppressed because it is too large Load Diff

View File

@ -0,0 +1,48 @@
From c7fbbc569d150b09878ccf6e8e0e031d0f41224d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina@redhat.com>
Date: Thu, 29 Jun 2023 14:07:25 +0200
Subject: [PATCH 2/7] profiles: do not try to change password via sssd for
local users
Steps to reproduce:
1. Create local user and set passsword
2. Log in as the local user
3. Run passwd and provide wrong password as "Current password"
"Current password" prompt should be printed only once.
Resolves: https://github.com/authselect/authselect/issues/338
(cherry picked from commit c9cc4b23badeb5e2fe3a38fa5b0649b3d7b0a718)
(cherry picked from commit 7fbb0454f2adfd8de44e17e1784eab79fce2232f)
---
profiles/sssd/password-auth | 1 +
profiles/sssd/system-auth | 1 +
2 files changed, 2 insertions(+)
diff --git a/profiles/sssd/password-auth b/profiles/sssd/password-auth
index 5ea280a..7fe23f2 100644
--- a/profiles/sssd/password-auth
+++ b/profiles/sssd/password-auth
@@ -25,6 +25,7 @@ password requisite pam_pwquality.so local_
password [default=1 ignore=ignore success=ok] pam_localuser.so {include if "with-pwhistory"}
password requisite pam_pwhistory.so use_authtok {include if "with-pwhistory"}
password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok
+password [success=1 default=ignore] pam_localuser.so
password sufficient pam_sss.so use_authtok
password required pam_deny.so
diff --git a/profiles/sssd/system-auth b/profiles/sssd/system-auth
index fd1e31c..ce2e266 100644
--- a/profiles/sssd/system-auth
+++ b/profiles/sssd/system-auth
@@ -32,6 +32,7 @@ password requisite pam_pwquality.so local_
password [default=1 ignore=ignore success=ok] pam_localuser.so {include if "with-pwhistory"}
password requisite pam_pwhistory.so use_authtok {include if "with-pwhistory"}
password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok
+password [success=1 default=ignore] pam_localuser.so
password sufficient pam_sss.so use_authtok
password required pam_deny.so
--
2.40.1

File diff suppressed because it is too large Load Diff

View File

@ -1,21 +1,26 @@
From 91cdfdc2a8a6af158fde0729597aa6e78c77d0e5 Mon Sep 17 00:00:00 2001
From c40bbcc77373120915033ab24d5ab149920666a4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina@redhat.com>
Date: Mon, 5 Dec 2022 19:03:00 +0100
Subject: [PATCH] rhel8: Revert yescrypt
Subject: [PATCH 7/7] rhel8: Revert yescrypt
Patch-name: 0904-rhel8-Revert-yescrypt.patch
Patch-id: 904
From-dist-git-commit: 4793c5170d11c5d4ce4c6c7b0e8902429e1011fc
---
po/af.po | 2 +-
po/authselect.pot | 2 +-
po/ca.po | 2 +-
po/cs.po | 4 ++--
po/de.po | 4 ++--
po/es.po | 4 ++--
po/fa.po | 2 +-
po/fi.po | 2 +-
po/fi.po | 4 ++--
po/fr.po | 4 ++--
po/hu.po | 4 ++--
po/id.po | 2 +-
po/it.po | 4 ++--
po/ja.po | 4 ++--
po/ka.po | 4 ++--
po/ko.po | 4 ++--
po/nl.po | 4 ++--
po/pl.po | 4 ++--
@ -43,12 +48,13 @@ Subject: [PATCH] rhel8: Revert yescrypt
src/man/po/authselect-migration.7.adoc.de.po | 2 +-
src/man/po/authselect-migration.7.adoc.es.po | 2 +-
src/man/po/authselect-migration.7.adoc.fa.po | 2 +-
src/man/po/authselect-migration.7.adoc.fr.po | 2 +-
src/man/po/authselect-migration.7.adoc.fi.po | 4 ++--
src/man/po/authselect-migration.7.adoc.fr.po | 4 ++--
src/man/po/authselect-migration.7.adoc.hu.po | 2 +-
src/man/po/authselect-migration.7.adoc.it.po | 2 +-
src/man/po/authselect-migration.7.adoc.ja.po | 4 ++--
src/man/po/authselect-migration.7.adoc.ko.po | 4 ++--
src/man/po/authselect-migration.7.adoc.nl.po | 2 +-
src/man/po/authselect-migration.7.adoc.nl.po | 4 ++--
src/man/po/authselect-migration.7.adoc.pl.po | 2 +-
src/man/po/authselect-migration.7.adoc.pot | 2 +-
src/man/po/authselect-migration.7.adoc.pt.po | 2 +-
@ -60,10 +66,23 @@ Subject: [PATCH] rhel8: Revert yescrypt
src/man/po/authselect-migration.7.adoc.uk.po | 4 ++--
src/man/po/authselect-migration.7.adoc.zh_CN.po | 2 +-
src/man/po/authselect-migration.7.adoc.zh_TW.po | 2 +-
56 files changed, 79 insertions(+), 79 deletions(-)
59 files changed, 87 insertions(+), 87 deletions(-)
diff --git a/po/af.po b/po/af.po
index e305029..b4f0418 100644
--- a/po/af.po
+++ b/po/af.po
@@ -1575,7 +1575,7 @@ msgid "<name>"
msgstr ""
#: src/compat/authcompat_Options.py:148
-msgid "<descrypt|bigcrypt|md5|sha256|sha512|yescrypt>"
+msgid "<descrypt|bigcrypt|md5|sha256|sha512>"
msgstr ""
#: src/compat/authcompat_Options.py:149
diff --git a/po/authselect.pot b/po/authselect.pot
index 41335281ebd8392139d4c70e0237888dda4a7581..170b5599546536303dc23f199295fd486a72da8a 100644
index ebb39b0..c308071 100644
--- a/po/authselect.pot
+++ b/po/authselect.pot
@@ -1535,7 +1535,7 @@ msgid "<name>"
@ -76,7 +95,7 @@ index 41335281ebd8392139d4c70e0237888dda4a7581..170b5599546536303dc23f199295fd48
#: src/compat/authcompat_Options.py:149
diff --git a/po/ca.po b/po/ca.po
index 84786d9a5dbe1995bc53340b3699f07fec096d74..b92fc4e21b3a57f9b1848c63eef7faa1be386b95 100644
index 3373e10..75d91ec 100644
--- a/po/ca.po
+++ b/po/ca.po
@@ -1569,7 +1569,7 @@ msgid "<name>"
@ -89,11 +108,11 @@ index 84786d9a5dbe1995bc53340b3699f07fec096d74..b92fc4e21b3a57f9b1848c63eef7faa1
#: src/compat/authcompat_Options.py:149
diff --git a/po/cs.po b/po/cs.po
index 66255c9db3c1c1a98869ff88dcf99e7a2f36a163..5d92c6ef9228c374fc641fdeef856c6257b4720a 100644
index 48929b6..b9150b7 100644
--- a/po/cs.po
+++ b/po/cs.po
@@ -1612,8 +1612,8 @@ msgid "<name>"
msgstr "<name>"
@@ -1600,8 +1600,8 @@ msgid "<name>"
msgstr "<jméno>"
#: src/compat/authcompat_Options.py:148
-msgid "<descrypt|bigcrypt|md5|sha256|sha512|yescrypt>"
@ -104,10 +123,10 @@ index 66255c9db3c1c1a98869ff88dcf99e7a2f36a163..5d92c6ef9228c374fc641fdeef856c62
# auto translated by TM merge from project: authconfig, version: master, DocId: po/authconfig
#: src/compat/authcompat_Options.py:149
diff --git a/po/de.po b/po/de.po
index d15c0fc9b3db503641dcc733f767036c629113d5..ee2d0e8ced558da4425784e8a9f4694c967a0227 100644
index 07eab1e..746d167 100644
--- a/po/de.po
+++ b/po/de.po
@@ -1598,8 +1598,8 @@ msgid "<name>"
@@ -1600,8 +1600,8 @@ msgid "<name>"
msgstr "<name>"
#: src/compat/authcompat_Options.py:148
@ -119,7 +138,7 @@ index d15c0fc9b3db503641dcc733f767036c629113d5..ee2d0e8ced558da4425784e8a9f4694c
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/es.po b/po/es.po
index a799ea3b03a9f36b8cb15ee2134ba5a243da549e..ecb9cb8dbafe9916d39d08fa6181312bba6268e9 100644
index 3868023..af5cde8 100644
--- a/po/es.po
+++ b/po/es.po
@@ -1598,8 +1598,8 @@ msgid "<name>"
@ -134,10 +153,10 @@ index a799ea3b03a9f36b8cb15ee2134ba5a243da549e..ecb9cb8dbafe9916d39d08fa6181312b
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/fa.po b/po/fa.po
index d48012a0f75af480f24b8af481d40633c5ea7e03..d250d3c7d0de8be97ffefdcf3117237deb4429be 100644
index 7776891..d74c1cd 100644
--- a/po/fa.po
+++ b/po/fa.po
@@ -1536,7 +1536,7 @@ msgid "<name>"
@@ -1537,7 +1537,7 @@ msgid "<name>"
msgstr ""
#: src/compat/authcompat_Options.py:148
@ -147,20 +166,22 @@ index d48012a0f75af480f24b8af481d40633c5ea7e03..d250d3c7d0de8be97ffefdcf3117237d
#: src/compat/authcompat_Options.py:149
diff --git a/po/fi.po b/po/fi.po
index ae2b128cd60ba3e661496fc914c76721886146d2..e8d48f09b7e4864e7ff9e4d4b6f6e94e9824a93e 100644
index 2ae32ff..7390590 100644
--- a/po/fi.po
+++ b/po/fi.po
@@ -1544,7 +1544,7 @@ msgid "<name>"
msgstr ""
@@ -1583,8 +1583,8 @@ msgid "<name>"
msgstr "<nimi>"
#: src/compat/authcompat_Options.py:148
-msgid "<descrypt|bigcrypt|md5|sha256|sha512|yescrypt>"
-msgstr "<descrypt|bigcrypt|md5|sha256|sha512|yescrypt>"
+msgid "<descrypt|bigcrypt|md5|sha256|sha512>"
msgstr ""
+msgstr "<descrypt|bigcrypt|md5|sha256|sha512>"
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/fr.po b/po/fr.po
index 91adf6c4bb3df1897e53323da382194aebeaf70b..2815b29e74be3271fd0a1bc3211a568716de17af 100644
index a40cf4c..d526c5d 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -1605,8 +1605,8 @@ msgid "<name>"
@ -175,10 +196,10 @@ index 91adf6c4bb3df1897e53323da382194aebeaf70b..2815b29e74be3271fd0a1bc3211a5687
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/hu.po b/po/hu.po
index 42c84addce849b483bdbf053f71bc685b8ec2a49..103c77387e6ce06d0e181b92f6722138eaedae21 100644
index 758be29..e18d6bf 100644
--- a/po/hu.po
+++ b/po/hu.po
@@ -1589,8 +1589,8 @@ msgid "<name>"
@@ -1590,8 +1590,8 @@ msgid "<name>"
msgstr "<név>"
#: src/compat/authcompat_Options.py:148
@ -190,10 +211,10 @@ index 42c84addce849b483bdbf053f71bc685b8ec2a49..103c77387e6ce06d0e181b92f6722138
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/id.po b/po/id.po
index 09c5e4f4b88452c5ebfbf9f171306a8fa6a95728..9564863975069ece39343fbac1e03c7cd716ca46 100644
index a83e1e2..6a7e2a7 100644
--- a/po/id.po
+++ b/po/id.po
@@ -1536,7 +1536,7 @@ msgid "<name>"
@@ -1538,7 +1538,7 @@ msgid "<name>"
msgstr ""
#: src/compat/authcompat_Options.py:148
@ -203,10 +224,10 @@ index 09c5e4f4b88452c5ebfbf9f171306a8fa6a95728..9564863975069ece39343fbac1e03c7c
#: src/compat/authcompat_Options.py:149
diff --git a/po/it.po b/po/it.po
index f0e990cb496dd6ec5bd849e86621c839e2d455b5..a511d308d5d07b9915eb361cf360b9a32a1ab8c4 100644
index 9427893..4b27ef2 100644
--- a/po/it.po
+++ b/po/it.po
@@ -1583,8 +1583,8 @@ msgid "<name>"
@@ -1585,8 +1585,8 @@ msgid "<name>"
msgstr "<name>"
#: src/compat/authcompat_Options.py:148
@ -218,10 +239,10 @@ index f0e990cb496dd6ec5bd849e86621c839e2d455b5..a511d308d5d07b9915eb361cf360b9a3
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/ja.po b/po/ja.po
index 1e822c3a1d80e684abe085ea31cfe86fd4d5b677..ff35083da00ddd467cf4040a6673eb2c9490da35 100644
index fe83406..7ea9ae8 100644
--- a/po/ja.po
+++ b/po/ja.po
@@ -1597,8 +1597,8 @@ msgid "<name>"
@@ -1598,8 +1598,8 @@ msgid "<name>"
msgstr "<name>"
#: src/compat/authcompat_Options.py:148
@ -232,11 +253,26 @@ index 1e822c3a1d80e684abe085ea31cfe86fd4d5b677..ff35083da00ddd467cf4040a6673eb2c
# auto translated by TM merge from translation memory: authconfig, unique id: authconfig:6.2.8:authconfig:0bbce02e304562c295a1d57d66c296d3
#: src/compat/authcompat_Options.py:149
diff --git a/po/ka.po b/po/ka.po
index ef2e7c6..e19c0ab 100644
--- a/po/ka.po
+++ b/po/ka.po
@@ -1573,8 +1573,8 @@ msgid "<name>"
msgstr "<name>"
#: src/compat/authcompat_Options.py:148
-msgid "<descrypt|bigcrypt|md5|sha256|sha512|yescrypt>"
-msgstr "<descrypt|bigcrypt|md5|sha256|sha512|yescrypt>"
+msgid "<descrypt|bigcrypt|md5|sha256|sha512>"
+msgstr "<descrypt|bigcrypt|md5|sha256|sha512>"
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/ko.po b/po/ko.po
index a927f441ea12b1e46dff5aa67fe5515a014b8033..54e0a48e76c2e5b9844b324cb0afc784e1676563 100644
index 52d2cac..eb768fe 100644
--- a/po/ko.po
+++ b/po/ko.po
@@ -1569,8 +1569,8 @@ msgid "<name>"
@@ -1570,8 +1570,8 @@ msgid "<name>"
msgstr "<name>"
#: src/compat/authcompat_Options.py:148
@ -248,11 +284,11 @@ index a927f441ea12b1e46dff5aa67fe5515a014b8033..54e0a48e76c2e5b9844b324cb0afc784
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/nl.po b/po/nl.po
index 5bb5a5ed60cc3003b915a1351d7fb3e1382d982a..36b784899acc4d0a2d0a51eb01e96d845183f850 100644
index 1bd2a9b..ba50b52 100644
--- a/po/nl.po
+++ b/po/nl.po
@@ -1598,8 +1598,8 @@ msgid "<name>"
msgstr "<name>"
@@ -1602,8 +1602,8 @@ msgid "<name>"
msgstr "<naam>"
#: src/compat/authcompat_Options.py:148
-msgid "<descrypt|bigcrypt|md5|sha256|sha512|yescrypt>"
@ -263,7 +299,7 @@ index 5bb5a5ed60cc3003b915a1351d7fb3e1382d982a..36b784899acc4d0a2d0a51eb01e96d84
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/pl.po b/po/pl.po
index 81616c6e966f358d73acb82698484c71d923dab7..c3e5874bb39a3a71ff0f0ac416acfa0700a41b43 100644
index 9b6627c..13553c8 100644
--- a/po/pl.po
+++ b/po/pl.po
@@ -1609,8 +1609,8 @@ msgid "<name>"
@ -278,7 +314,7 @@ index 81616c6e966f358d73acb82698484c71d923dab7..c3e5874bb39a3a71ff0f0ac416acfa07
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/pt.po b/po/pt.po
index 6b1d1ab3902f7669bcfa020867bf5cc22fe6975d..ce750eeea43ff9735f2238394790b0f8e9b7421a 100644
index ad02a0b..90d2aa3 100644
--- a/po/pt.po
+++ b/po/pt.po
@@ -1536,7 +1536,7 @@ msgid "<name>"
@ -291,7 +327,7 @@ index 6b1d1ab3902f7669bcfa020867bf5cc22fe6975d..ce750eeea43ff9735f2238394790b0f8
#: src/compat/authcompat_Options.py:149
diff --git a/po/pt_BR.po b/po/pt_BR.po
index ef4af00a59773fd821cc3ae48e212084a90db5b6..99e1279c264efaf4b92d579a290e6e26cc7bf26d 100644
index a1215bb..544b8e9 100644
--- a/po/pt_BR.po
+++ b/po/pt_BR.po
@@ -1592,8 +1592,8 @@ msgid "<name>"
@ -306,10 +342,10 @@ index ef4af00a59773fd821cc3ae48e212084a90db5b6..99e1279c264efaf4b92d579a290e6e26
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/ru.po b/po/ru.po
index 43a9bfbf5a018bdf30fc8ab696233a3af313607e..9532210c63d9176a8d15d0884c8ab008d82b8a41 100644
index 4919002..d23284d 100644
--- a/po/ru.po
+++ b/po/ru.po
@@ -1589,8 +1589,8 @@ msgid "<name>"
@@ -1590,8 +1590,8 @@ msgid "<name>"
msgstr "<name>"
#: src/compat/authcompat_Options.py:148
@ -321,7 +357,7 @@ index 43a9bfbf5a018bdf30fc8ab696233a3af313607e..9532210c63d9176a8d15d0884c8ab008
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/si.po b/po/si.po
index ba802552d4a85ddbf0379f3332905012a5698b71..800908cdaa1601abacda71d28e51e90ac413b502 100644
index 39f5a79..eaf4b3c 100644
--- a/po/si.po
+++ b/po/si.po
@@ -1536,7 +1536,7 @@ msgid "<name>"
@ -334,10 +370,10 @@ index ba802552d4a85ddbf0379f3332905012a5698b71..800908cdaa1601abacda71d28e51e90a
#: src/compat/authcompat_Options.py:149
diff --git a/po/sv.po b/po/sv.po
index fb1ef0ce4fcff97605c8d1c4d024e5b5ab9020c0..dde9aff07469fbf4beca6801a0353cf5bd2045d0 100644
index 9292b1f..cc70f2d 100644
--- a/po/sv.po
+++ b/po/sv.po
@@ -1579,8 +1579,8 @@ msgid "<name>"
@@ -1580,8 +1580,8 @@ msgid "<name>"
msgstr "<namn>"
#: src/compat/authcompat_Options.py:148
@ -349,11 +385,11 @@ index fb1ef0ce4fcff97605c8d1c4d024e5b5ab9020c0..dde9aff07469fbf4beca6801a0353cf5
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/tr.po b/po/tr.po
index 60f0c6ce5a9f54cb814371151460e592c38bb1e7..44496ef5cb70d35310acfb86330e77583090b1ca 100644
index 9be388f..0aaa543 100644
--- a/po/tr.po
+++ b/po/tr.po
@@ -1588,8 +1588,8 @@ msgid "<name>"
msgstr "<isim>"
@@ -1589,8 +1589,8 @@ msgid "<name>"
msgstr "<ad>"
#: src/compat/authcompat_Options.py:148
-msgid "<descrypt|bigcrypt|md5|sha256|sha512|yescrypt>"
@ -364,7 +400,7 @@ index 60f0c6ce5a9f54cb814371151460e592c38bb1e7..44496ef5cb70d35310acfb86330e7758
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/uk.po b/po/uk.po
index 1371122dcea19b739df2dc2b28c718865ae19cc0..b86461559972bc2b1e8a4e366770a140e4b93296 100644
index c66594f..bc4c93b 100644
--- a/po/uk.po
+++ b/po/uk.po
@@ -1591,8 +1591,8 @@ msgid "<name>"
@ -379,7 +415,7 @@ index 1371122dcea19b739df2dc2b28c718865ae19cc0..b86461559972bc2b1e8a4e366770a140
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/zh_CN.po b/po/zh_CN.po
index 3adf18b416c1bf62a14eff55ae5a64cabd524e44..1a52f39a9e79166a561811de13749204da637308 100644
index 75ec7d8..6c109a0 100644
--- a/po/zh_CN.po
+++ b/po/zh_CN.po
@@ -1559,8 +1559,8 @@ msgid "<name>"
@ -394,7 +430,7 @@ index 3adf18b416c1bf62a14eff55ae5a64cabd524e44..1a52f39a9e79166a561811de13749204
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/po/zh_TW.po b/po/zh_TW.po
index 808a7d442a105c19ca58c2cbba325ccb2b16841c..ee387ad19bbf0bd500522fa939d19655a36fc493 100644
index 89fefed..0562435 100644
--- a/po/zh_TW.po
+++ b/po/zh_TW.po
@@ -1562,8 +1562,8 @@ msgid "<name>"
@ -409,111 +445,111 @@ index 808a7d442a105c19ca58c2cbba325ccb2b16841c..ee387ad19bbf0bd500522fa939d19655
#: src/compat/authcompat_Options.py:149
msgid "<URL>"
diff --git a/profiles/minimal/password-auth b/profiles/minimal/password-auth
index accd020eba3c8101ea0173b73faade109590c08f..823cc7d2dc49b529c922877b1d5a4ae355e9672b 100644
index 858c21f..8c4cb37 100644
--- a/profiles/minimal/password-auth
+++ b/profiles/minimal/password-auth
@@ -10,7 +10,7 @@ account required pam_faillock.so
account required pam_unix.so
@@ -12,7 +12,7 @@ account required pam_unix.so
password requisite pam_pwquality.so
password [default=1 ignore=ignore success=ok] pam_localuser.so {include if "with-pwhistory"}
password requisite pam_pwhistory.so use_authtok {include if "with-pwhistory"}
-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok
+password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok
password required pam_deny.so
session optional pam_keyinit.so revoke
diff --git a/profiles/minimal/system-auth b/profiles/minimal/system-auth
index accd020eba3c8101ea0173b73faade109590c08f..823cc7d2dc49b529c922877b1d5a4ae355e9672b 100644
index 858c21f..8c4cb37 100644
--- a/profiles/minimal/system-auth
+++ b/profiles/minimal/system-auth
@@ -10,7 +10,7 @@ account required pam_faillock.so
account required pam_unix.so
@@ -12,7 +12,7 @@ account required pam_unix.so
password requisite pam_pwquality.so
password [default=1 ignore=ignore success=ok] pam_localuser.so {include if "with-pwhistory"}
password requisite pam_pwhistory.so use_authtok {include if "with-pwhistory"}
-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok
+password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok
password required pam_deny.so
session optional pam_keyinit.so revoke
diff --git a/profiles/nis/password-auth b/profiles/nis/password-auth
index f181a58ab7792c7e1a4234e677cbb7e3d0a6548d..b567cc3af624be3627a3143e74c63dd943edacbd 100644
index 56a51d9..56b19a6 100644
--- a/profiles/nis/password-auth
+++ b/profiles/nis/password-auth
@@ -13,7 +13,7 @@ account required pam_faillock.so
account required pam_unix.so broken_shadow
@@ -15,7 +15,7 @@ account required pam_unix.so broken_shad
password requisite pam_pwquality.so {if not "with-nispwquality":local_users_only}
password [default=1 ignore=ignore success=ok] pam_localuser.so {include if "with-pwhistory"}
password requisite pam_pwhistory.so use_authtok {include if "with-pwhistory"}
-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok nis
+password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok nis
password required pam_deny.so
session optional pam_keyinit.so revoke
diff --git a/profiles/nis/system-auth b/profiles/nis/system-auth
index bc3f402435aafb5294dbae94096b184af51cf914..23f4238937483ffec6229a9da02da076c2966404 100644
index 74cf6ec..5d5010a 100644
--- a/profiles/nis/system-auth
+++ b/profiles/nis/system-auth
@@ -14,7 +14,7 @@ account required pam_faillock.so
account required pam_unix.so broken_shadow
@@ -16,7 +16,7 @@ account required pam_unix.so broken_shad
password requisite pam_pwquality.so {if not "with-nispwquality":local_users_only}
password [default=1 ignore=ignore success=ok] pam_localuser.so {include if "with-pwhistory"}
password requisite pam_pwhistory.so use_authtok {include if "with-pwhistory"}
-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok nis
+password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok nis
password required pam_deny.so
session optional pam_keyinit.so revoke
diff --git a/profiles/sssd/password-auth b/profiles/sssd/password-auth
index 3e33dcc09f68055f2f87709e638005929bd577b3..c8b516da1a618326c779acfb9792c53d539fced7 100644
index 5b235de..b64f048 100644
--- a/profiles/sssd/password-auth
+++ b/profiles/sssd/password-auth
@@ -22,7 +22,7 @@ account [default=bad success=ok user_unknown=ignore] pam_sss.so
account required pam_permit.so
@@ -24,7 +24,7 @@ account required pam_permit.so
password requisite pam_pwquality.so local_users_only
password [default=1 ignore=ignore success=ok] pam_localuser.so {include if "with-pwhistory"}
password requisite pam_pwhistory.so use_authtok {include if "with-pwhistory"}
-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok
+password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok
password [success=1 default=ignore] pam_localuser.so
password sufficient pam_sss.so use_authtok
password required pam_deny.so
diff --git a/profiles/sssd/system-auth b/profiles/sssd/system-auth
index a43341120f55bad3fb07dfea1c04453d0a278329..5b99887d1c1563486121f23e7aacc96423c6365f 100644
index 22e87d8..d338719 100644
--- a/profiles/sssd/system-auth
+++ b/profiles/sssd/system-auth
@@ -29,7 +29,7 @@ account [default=bad success=ok user_unknown=ignore] pam_sss.so
account required pam_permit.so
@@ -31,7 +31,7 @@ account required pam_permit.so
password requisite pam_pwquality.so local_users_only
password [default=1 ignore=ignore success=ok] pam_localuser.so {include if "with-pwhistory"}
password requisite pam_pwhistory.so use_authtok {include if "with-pwhistory"}
-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok
+password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok
password [success=1 default=ignore] pam_localuser.so
password sufficient pam_sss.so use_authtok
password required pam_deny.so
diff --git a/profiles/winbind/password-auth b/profiles/winbind/password-auth
index 58705f3b15165c8d8bd4938889e3fb4d89c1a528..a8e5270a7b6d7221651aeb7a05c994d9f1944bba 100644
index 8b260fa..4944b42 100644
--- a/profiles/winbind/password-auth
+++ b/profiles/winbind/password-auth
@@ -19,7 +19,7 @@ account [default=bad success=ok user_unknown=ignore] pam_winbind.so {if "wit
account required pam_permit.so
@@ -21,7 +21,7 @@ account required pam_permit.so
password requisite pam_pwquality.so local_users_only
password [default=1 ignore=ignore success=ok] pam_localuser.so {include if "with-pwhistory"}
password requisite pam_pwhistory.so use_authtok {include if "with-pwhistory"}
-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok
+password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok
password sufficient pam_winbind.so {if "with-krb5":krb5_auth} use_authtok
password required pam_deny.so
diff --git a/profiles/winbind/system-auth b/profiles/winbind/system-auth
index 994c342441a0ed2738765a9fa7f6cc84f692d1d8..094eef88da26223e600849469b2d45df179bd06a 100644
index 33aa13e..afe27d7 100644
--- a/profiles/winbind/system-auth
+++ b/profiles/winbind/system-auth
@@ -20,7 +20,7 @@ account [default=bad success=ok user_unknown=ignore] pam_winbind.so {if "wit
account required pam_permit.so
@@ -22,7 +22,7 @@ account required pam_permit.so
password requisite pam_pwquality.so local_users_only
password [default=1 ignore=ignore success=ok] pam_localuser.so {include if "with-pwhistory"}
password requisite pam_pwhistory.so use_authtok {include if "with-pwhistory"}
-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok
+password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok
password sufficient pam_winbind.so {if "with-krb5":krb5_auth} use_authtok
password required pam_deny.so
diff --git a/src/compat/authcompat_Options.py b/src/compat/authcompat_Options.py
index d26dedabdfb9519861076b58cddd0dd0eb04b7cb..94301462a4965d7237dbc673fedb6b36cbeac348 100644
index 5c8b21b..5c97fee 100644
--- a/src/compat/authcompat_Options.py
+++ b/src/compat/authcompat_Options.py
@@ -145,7 +145,7 @@ class Options:
@ -526,10 +562,10 @@ index d26dedabdfb9519861076b58cddd0dd0eb04b7cb..94301462a4965d7237dbc673fedb6b36
Option.UnsupportedValued("smartcardmodule", _("<module>")),
Option.UnsupportedValued("smbsecurity", _("<user|server|domain|ads>")),
diff --git a/src/man/authselect-migration.7.adoc b/src/man/authselect-migration.7.adoc
index 3513a7e7cd3d7cc0045167e8224248c5be90ab2c..a321d97a36099387ae7314cc46b65f0c635db786 100644
index 888cd4e..ee493ee 100644
--- a/src/man/authselect-migration.7.adoc
+++ b/src/man/authselect-migration.7.adoc
@@ -91,7 +91,7 @@ configuration file for required services.
@@ -90,7 +90,7 @@ configuration file for required services.
NOTE: Authconfig options `--enableshadow` and `--passalgo=sha512` were often
used to make sure that passwords are stored in `/etc/shadow` using `sha512`
@ -539,7 +575,7 @@ index 3513a7e7cd3d7cc0045167e8224248c5be90ab2c..a321d97a36099387ae7314cc46b65f0c
You can just omit these options.
diff --git a/src/man/po/authselect-migration.7.adoc.ca.po b/src/man/po/authselect-migration.7.adoc.ca.po
index 08b11b78b5b3aa80dc87abf7ce46840c3aa4c802..12f14d69827b7022236b5e15e792cf718a76ef63 100644
index 08b11b7..12f14d6 100644
--- a/src/man/po/authselect-migration.7.adoc.ca.po
+++ b/src/man/po/authselect-migration.7.adoc.ca.po
@@ -185,7 +185,7 @@ msgstr ""
@ -552,7 +588,7 @@ index 08b11b78b5b3aa80dc87abf7ce46840c3aa4c802..12f14d69827b7022236b5e15e792cf71
"You can just omit these options."
msgstr ""
diff --git a/src/man/po/authselect-migration.7.adoc.cs.po b/src/man/po/authselect-migration.7.adoc.cs.po
index d11809b0c89c0c25927385c23092d09febf6a6a6..caf570bf8dd29c2a4018dc33c6a6ac8f07f88828 100644
index d11809b..caf570b 100644
--- a/src/man/po/authselect-migration.7.adoc.cs.po
+++ b/src/man/po/authselect-migration.7.adoc.cs.po
@@ -242,7 +242,7 @@ msgstr ""
@ -565,7 +601,7 @@ index d11809b0c89c0c25927385c23092d09febf6a6a6..caf570bf8dd29c2a4018dc33c6a6ac8f
"You can just omit these options."
msgstr ""
diff --git a/src/man/po/authselect-migration.7.adoc.de.po b/src/man/po/authselect-migration.7.adoc.de.po
index c166a0f6b3ecaa15f6bd691092c5534a75b0ab8b..fff88c84af35494e65b6587efe78ff09d75f350f 100644
index c166a0f..fff88c8 100644
--- a/src/man/po/authselect-migration.7.adoc.de.po
+++ b/src/man/po/authselect-migration.7.adoc.de.po
@@ -193,7 +193,7 @@ msgstr ""
@ -578,7 +614,7 @@ index c166a0f6b3ecaa15f6bd691092c5534a75b0ab8b..fff88c84af35494e65b6587efe78ff09
"You can just omit these options."
msgstr ""
diff --git a/src/man/po/authselect-migration.7.adoc.es.po b/src/man/po/authselect-migration.7.adoc.es.po
index 8cb3584e586ef6ba922d88f3582f437cabac5290..5403cde5d4ea05c0ea720d42706b15d331c2cae2 100644
index 8cb3584..5403cde 100644
--- a/src/man/po/authselect-migration.7.adoc.es.po
+++ b/src/man/po/authselect-migration.7.adoc.es.po
@@ -241,7 +241,7 @@ msgstr ""
@ -591,10 +627,10 @@ index 8cb3584e586ef6ba922d88f3582f437cabac5290..5403cde5d4ea05c0ea720d42706b15d3
"You can just omit these options."
msgstr ""
diff --git a/src/man/po/authselect-migration.7.adoc.fa.po b/src/man/po/authselect-migration.7.adoc.fa.po
index 3212410cbe63b92370ab032b90d975e6f3351af3..8ffb506d4d0f80227d739477c9e6740ce1a50aeb 100644
index b902c0c..db37728 100644
--- a/src/man/po/authselect-migration.7.adoc.fa.po
+++ b/src/man/po/authselect-migration.7.adoc.fa.po
@@ -185,7 +185,7 @@ msgstr ""
@@ -189,7 +189,7 @@ msgstr ""
msgid ""
"Authconfig options `--enableshadow` and `--passalgo=sha512` were often used "
"to make sure that passwords are stored in `/etc/shadow` using `sha512` "
@ -603,11 +639,32 @@ index 3212410cbe63b92370ab032b90d975e6f3351af3..8ffb506d4d0f80227d739477c9e6740c
"it cannot be changed through an option (only by creating a custom profile). "
"You can just omit these options."
msgstr ""
diff --git a/src/man/po/authselect-migration.7.adoc.fi.po b/src/man/po/authselect-migration.7.adoc.fi.po
index 14c6894..79ff561 100644
--- a/src/man/po/authselect-migration.7.adoc.fi.po
+++ b/src/man/po/authselect-migration.7.adoc.fi.po
@@ -252,14 +252,14 @@ msgstr ""
msgid ""
"Authconfig options `--enableshadow` and `--passalgo=sha512` were often used "
"to make sure that passwords are stored in `/etc/shadow` using `sha512` "
-"algorithm. *The authselect profiles now use the yescrypt hashing method* and "
+"algorithm. *The authselect profiles now use the sha512 hashing method* and "
"it cannot be changed through an option (only by creating a custom profile). "
"You can just omit these options."
msgstr ""
"Authconfig-asetuksia `--enableshadow` ja `--passalgo=sha512` käytettiin "
"usein varmistamaan, että salasanat on tallennettu hakemistoon `/etc/shadow` "
"käyttämällä `sha512`-algoritmia. *Authselect-profiilit käyttävät nyt "
-"yescrypt-hajautusmenetelmää*, eikä sitä voi muuttaa valinnalla (onnistuu "
+"sha512-hajautusmenetelmää*, eikä sitä voi muuttaa valinnalla (onnistuu "
"vain luomalla mukautettu profiili). Voit jättää nämä vaihtoehdot pois."
#. type: Block title
diff --git a/src/man/po/authselect-migration.7.adoc.fr.po b/src/man/po/authselect-migration.7.adoc.fr.po
index 92f688c2a6b88826de4f3dc4ac8dac0fc0373f46..567b0a25e5613172b078ce3614c6ec9a95ded539 100644
index cf3fcf9..55a7386 100644
--- a/src/man/po/authselect-migration.7.adoc.fr.po
+++ b/src/man/po/authselect-migration.7.adoc.fr.po
@@ -258,7 +258,7 @@ msgstr ""
@@ -259,14 +259,14 @@ msgstr ""
msgid ""
"Authconfig options `--enableshadow` and `--passalgo=sha512` were often used "
"to make sure that passwords are stored in `/etc/shadow` using `sha512` "
@ -616,8 +673,16 @@ index 92f688c2a6b88826de4f3dc4ac8dac0fc0373f46..567b0a25e5613172b078ce3614c6ec9a
"it cannot be changed through an option (only by creating a custom profile). "
"You can just omit these options."
msgstr ""
"Les options dAuthconfig '--enableshadow' et '--passalgo=sha512' ont souvent "
"été utilisées pour sassurer que les mots de passe sont stockés dans '/etc/"
"shadow' en utilisant lalgorithme 'sha512'. *Les profils authselect "
-"utilisent maintenant la méthode de hachage yescrypt* et elle ne peut pas "
+"utilisent maintenant la méthode de hachage sha512* et elle ne peut pas "
"être modifiée via une option (uniquement en créant un profil personnalisé). "
"Vous pouvez simplement omettre ces options."
diff --git a/src/man/po/authselect-migration.7.adoc.hu.po b/src/man/po/authselect-migration.7.adoc.hu.po
index a058b221b3324f6ed120a05fefcd3fe46af7e08b..368476a43138b2952baad7a0691e064d452715d5 100644
index a058b22..368476a 100644
--- a/src/man/po/authselect-migration.7.adoc.hu.po
+++ b/src/man/po/authselect-migration.7.adoc.hu.po
@@ -189,7 +189,7 @@ msgstr ""
@ -630,10 +695,10 @@ index a058b221b3324f6ed120a05fefcd3fe46af7e08b..368476a43138b2952baad7a0691e064d
"You can just omit these options."
msgstr ""
diff --git a/src/man/po/authselect-migration.7.adoc.it.po b/src/man/po/authselect-migration.7.adoc.it.po
index 74c7fe127c6d6cbb7cf6913b6ccce5bfbf24f2ac..a1203206af368b766aea96c484be3bcb65c8d4b1 100644
index f28d362..d09af60 100644
--- a/src/man/po/authselect-migration.7.adoc.it.po
+++ b/src/man/po/authselect-migration.7.adoc.it.po
@@ -185,7 +185,7 @@ msgstr ""
@@ -189,7 +189,7 @@ msgstr ""
msgid ""
"Authconfig options `--enableshadow` and `--passalgo=sha512` were often used "
"to make sure that passwords are stored in `/etc/shadow` using `sha512` "
@ -643,7 +708,7 @@ index 74c7fe127c6d6cbb7cf6913b6ccce5bfbf24f2ac..a1203206af368b766aea96c484be3bcb
"You can just omit these options."
msgstr ""
diff --git a/src/man/po/authselect-migration.7.adoc.ja.po b/src/man/po/authselect-migration.7.adoc.ja.po
index 782e094c5f7c06a7d0fb340cf38d0c3b2f9a56ec..a8da7e2a23ef8f43e95df47a462bce919748ab19 100644
index 782e094..a8da7e2 100644
--- a/src/man/po/authselect-migration.7.adoc.ja.po
+++ b/src/man/po/authselect-migration.7.adoc.ja.po
@@ -246,13 +246,13 @@ msgstr ""
@ -663,10 +728,10 @@ index 782e094c5f7c06a7d0fb340cf38d0c3b2f9a56ec..a8da7e2a23ef8f43e95df47a462bce91
"せん(カスタムプロファイルを作成する場合のみ)。 これらのオプションは省略でき"
"ます。"
diff --git a/src/man/po/authselect-migration.7.adoc.ko.po b/src/man/po/authselect-migration.7.adoc.ko.po
index 5b36c536524e5b35cb9334af35e657f24fd903b9..4bb4256dda532f870b644e856704060bc35c6110 100644
index 9704e0b..338bc33 100644
--- a/src/man/po/authselect-migration.7.adoc.ko.po
+++ b/src/man/po/authselect-migration.7.adoc.ko.po
@@ -248,13 +248,13 @@ msgstr ""
@@ -249,13 +249,13 @@ msgstr ""
msgid ""
"Authconfig options `--enableshadow` and `--passalgo=sha512` were often used "
"to make sure that passwords are stored in `/etc/shadow` using `sha512` "
@ -683,10 +748,10 @@ index 5b36c536524e5b35cb9334af35e657f24fd903b9..4bb4256dda532f870b644e856704060b
"들 옵션을 생략 할 수 있습니다."
diff --git a/src/man/po/authselect-migration.7.adoc.nl.po b/src/man/po/authselect-migration.7.adoc.nl.po
index 691355231e8b425959738ce5b85112d7e7a69999..365b80858f2ef2395ca0cd80cc39d143810cdb9f 100644
index 15573ef..b587fa4 100644
--- a/src/man/po/authselect-migration.7.adoc.nl.po
+++ b/src/man/po/authselect-migration.7.adoc.nl.po
@@ -253,7 +253,7 @@ msgstr ""
@@ -257,14 +257,14 @@ msgstr ""
msgid ""
"Authconfig options `--enableshadow` and `--passalgo=sha512` were often used "
"to make sure that passwords are stored in `/etc/shadow` using `sha512` "
@ -695,8 +760,16 @@ index 691355231e8b425959738ce5b85112d7e7a69999..365b80858f2ef2395ca0cd80cc39d143
"it cannot be changed through an option (only by creating a custom profile). "
"You can just omit these options."
msgstr ""
"De authconfig-opties '--enableshadow' and '--passalgo=sha512' werden vaak "
"gebruikt om te verzekeren dat wachtwoorden worden opgeslagen in /etc/shadow "
"met gebruik van het sha512-algoritme. *De authselect-profielen gebruiken "
-"thans hashing met yescrypt.* Dit kan niet met een optie worden gewijzigd, "
+"thans hashing met sha512.* Dit kan niet met een optie worden gewijzigd, "
"maar alleen door een eigen profiel aan te maken. U kunt de voornoemde opties "
"gewoon weglaten."
diff --git a/src/man/po/authselect-migration.7.adoc.pl.po b/src/man/po/authselect-migration.7.adoc.pl.po
index e0e629a8dda40061e2c9d4a17554c848df1e341a..d229fb7e2fd5654682b2fdac1409746606026e02 100644
index e0e629a..d229fb7 100644
--- a/src/man/po/authselect-migration.7.adoc.pl.po
+++ b/src/man/po/authselect-migration.7.adoc.pl.po
@@ -191,7 +191,7 @@ msgstr ""
@ -709,7 +782,7 @@ index e0e629a8dda40061e2c9d4a17554c848df1e341a..d229fb7e2fd5654682b2fdac14097466
"You can just omit these options."
msgstr ""
diff --git a/src/man/po/authselect-migration.7.adoc.pot b/src/man/po/authselect-migration.7.adoc.pot
index c35b730bd1a90533ba0c75365e2408a94c3809a9..bed94984e506d2fe73cbaf8c5d1116ff762612d9 100644
index c35b730..bed9498 100644
--- a/src/man/po/authselect-migration.7.adoc.pot
+++ b/src/man/po/authselect-migration.7.adoc.pot
@@ -188,7 +188,7 @@ msgstr ""
@ -722,7 +795,7 @@ index c35b730bd1a90533ba0c75365e2408a94c3809a9..bed94984e506d2fe73cbaf8c5d1116ff
"You can just omit these options."
msgstr ""
diff --git a/src/man/po/authselect-migration.7.adoc.pt.po b/src/man/po/authselect-migration.7.adoc.pt.po
index 982c6292b1defd4a9ed6ca30d1dea2d7cf2a65a5..e67478b75a0d7f333f44a0e6db20607e80dbb93a 100644
index 982c629..e67478b 100644
--- a/src/man/po/authselect-migration.7.adoc.pt.po
+++ b/src/man/po/authselect-migration.7.adoc.pt.po
@@ -192,7 +192,7 @@ msgstr ""
@ -735,7 +808,7 @@ index 982c6292b1defd4a9ed6ca30d1dea2d7cf2a65a5..e67478b75a0d7f333f44a0e6db20607e
"You can just omit these options."
msgstr ""
diff --git a/src/man/po/authselect-migration.7.adoc.pt_BR.po b/src/man/po/authselect-migration.7.adoc.pt_BR.po
index 51584e7df2ba411cbbc8dd27cab108b7ab157474..a63b8fb623fd06c83fc920405ed6e45cb93d6889 100644
index 51584e7..a63b8fb 100644
--- a/src/man/po/authselect-migration.7.adoc.pt_BR.po
+++ b/src/man/po/authselect-migration.7.adoc.pt_BR.po
@@ -198,7 +198,7 @@ msgstr ""
@ -748,7 +821,7 @@ index 51584e7df2ba411cbbc8dd27cab108b7ab157474..a63b8fb623fd06c83fc920405ed6e45c
"You can just omit these options."
msgstr ""
diff --git a/src/man/po/authselect-migration.7.adoc.ru.po b/src/man/po/authselect-migration.7.adoc.ru.po
index 469f4639230a977eebe5261f2b6aea9470db33c5..fd0eb1ad827962c2674a6cdda4c479d805177af0 100644
index 469f463..fd0eb1a 100644
--- a/src/man/po/authselect-migration.7.adoc.ru.po
+++ b/src/man/po/authselect-migration.7.adoc.ru.po
@@ -256,14 +256,14 @@ msgstr ""
@ -769,7 +842,7 @@ index 469f4639230a977eebe5261f2b6aea9470db33c5..fd0eb1ad827962c2674a6cdda4c479d8
"эти параметры."
diff --git a/src/man/po/authselect-migration.7.adoc.si.po b/src/man/po/authselect-migration.7.adoc.si.po
index 0dbdb2c6357cbd2172c25eee157feadd57b0b9ae..5f88382d7aa4c92908b8b6821d75d085ab2a3358 100644
index 0dbdb2c..5f88382 100644
--- a/src/man/po/authselect-migration.7.adoc.si.po
+++ b/src/man/po/authselect-migration.7.adoc.si.po
@@ -188,7 +188,7 @@ msgstr ""
@ -782,7 +855,7 @@ index 0dbdb2c6357cbd2172c25eee157feadd57b0b9ae..5f88382d7aa4c92908b8b6821d75d085
"You can just omit these options."
msgstr ""
diff --git a/src/man/po/authselect-migration.7.adoc.sv.po b/src/man/po/authselect-migration.7.adoc.sv.po
index b3087eac46223df0ad9115eafccc426b34ebac99..397e901892f9df42ab2f7721f988427f62198e42 100644
index b3087ea..397e901 100644
--- a/src/man/po/authselect-migration.7.adoc.sv.po
+++ b/src/man/po/authselect-migration.7.adoc.sv.po
@@ -253,13 +253,13 @@ msgstr ""
@ -802,10 +875,10 @@ index b3087eac46223df0ad9115eafccc426b34ebac99..397e901892f9df42ab2f7721f988427f
"profil). Du kan helt enkelt utelämna dessa flaggor."
diff --git a/src/man/po/authselect-migration.7.adoc.tr.po b/src/man/po/authselect-migration.7.adoc.tr.po
index b68b5df326df7c3164c53204079238778d52faf5..399ea1f0a9df659745919d36c38bd885431e0bca 100644
index 35e5d5c..157f7d2 100644
--- a/src/man/po/authselect-migration.7.adoc.tr.po
+++ b/src/man/po/authselect-migration.7.adoc.tr.po
@@ -257,13 +257,13 @@ msgstr ""
@@ -258,13 +258,13 @@ msgstr ""
msgid ""
"Authconfig options `--enableshadow` and `--passalgo=sha512` were often used "
"to make sure that passwords are stored in `/etc/shadow` using `sha512` "
@ -822,7 +895,7 @@ index b68b5df326df7c3164c53204079238778d52faf5..399ea1f0a9df659745919d36c38bd885
"(yalnızca özel bir profil oluşturarak değiştirilebilir). Bu seçenekleri "
"yalnızca atlayabilirsiniz."
diff --git a/src/man/po/authselect-migration.7.adoc.uk.po b/src/man/po/authselect-migration.7.adoc.uk.po
index 5a1b8a3aa5e8ce8dfbe40b0545187878dea09dbd..98d9841724a90e207818ea179e5870fdf870ca40 100644
index 5a1b8a3..98d9841 100644
--- a/src/man/po/authselect-migration.7.adoc.uk.po
+++ b/src/man/po/authselect-migration.7.adoc.uk.po
@@ -257,14 +257,14 @@ msgstr ""
@ -843,10 +916,10 @@ index 5a1b8a3aa5e8ce8dfbe40b0545187878dea09dbd..98d9841724a90e207818ea179e5870fd
"використовувати ці параметри."
diff --git a/src/man/po/authselect-migration.7.adoc.zh_CN.po b/src/man/po/authselect-migration.7.adoc.zh_CN.po
index c3c8b9a0185094d91a968b8049f425b4a80c14d5..a0ebf52d93689e866f6258490e61d6cf4c8bfeb1 100644
index 6f5e562..2b95ca4 100644
--- a/src/man/po/authselect-migration.7.adoc.zh_CN.po
+++ b/src/man/po/authselect-migration.7.adoc.zh_CN.po
@@ -189,7 +189,7 @@ msgstr ""
@@ -190,7 +190,7 @@ msgstr ""
msgid ""
"Authconfig options `--enableshadow` and `--passalgo=sha512` were often used "
"to make sure that passwords are stored in `/etc/shadow` using `sha512` "
@ -856,7 +929,7 @@ index c3c8b9a0185094d91a968b8049f425b4a80c14d5..a0ebf52d93689e866f6258490e61d6cf
"You can just omit these options."
msgstr ""
diff --git a/src/man/po/authselect-migration.7.adoc.zh_TW.po b/src/man/po/authselect-migration.7.adoc.zh_TW.po
index 43ab062724a5e7fb86c17384f4b0dde32a5053c5..e7112be1df8ad569e1c90a8c7a0744a800283347 100644
index 43ab062..e7112be 100644
--- a/src/man/po/authselect-migration.7.adoc.zh_TW.po
+++ b/src/man/po/authselect-migration.7.adoc.zh_TW.po
@@ -189,7 +189,7 @@ msgstr ""
@ -869,5 +942,5 @@ index 43ab062724a5e7fb86c17384f4b0dde32a5053c5..e7112be1df8ad569e1c90a8c7a0744a8
"You can just omit these options."
msgstr ""
--
2.38.1
2.40.1

View File

@ -2,7 +2,7 @@
%define _empty_manifest_terminate_build 0
Name: authselect
Version: 1.2.5
Version: 1.2.6
Release: 2%{?dist}
Summary: Configures authentication and identity sources from supported profiles
URL: https://github.com/authselect/authselect
@ -12,6 +12,10 @@ Source0: %{url}/archive/%{version}/%{name}-%{version}.tar.gz
%global makedir %{_builddir}/%{name}-%{version}
Patch0001: 0001-po-update-translations.patch
Patch0002: 0002-profiles-do-not-try-to-change-password-via-sssd-for-.patch
Patch0003: 0003-po-update-translations.patch
# Downstream only
Patch0901: 0901-rhel8-remove-mention-of-Fedora-Change-page-in-compat.patch
Patch0902: 0902-rhel8-remove-ecryptfs-support.patch
@ -90,11 +94,7 @@ you develop a front-end for the authselect library.
%prep
%setup -q
for p in %patches ; do
%__patch -p1 -i $p
done
%autosetup -p1
%build
autoreconf -if
@ -265,6 +265,15 @@ if [ -f %{validfile} ]; then
%__rm -f %{validfile}
fi
# Keep nss-altfiles for all rpm-ostree based systems.
# See https://github.com/authselect/authselect/issues/48
if test -e /run/ostree-booted; then
for PROFILE in `ls %{_datadir}/authselect/default`; do
%{_bindir}/authselect create-profile $PROFILE --vendor --base-on $PROFILE --symlink-pam --symlink-dconf --symlink=REQUIREMENTS --symlink=README &> /dev/null
%__sed -ie "s/^\(passwd\|group\):\(.*\)systemd\(.*\)/\1:\2systemd altfiles\3/g" %{_datadir}/authselect/vendor/$PROFILE/nsswitch.conf &> /dev/null
done
fi
# Apply any changes to profiles (validates configuration first internally)
%{_bindir}/authselect apply-changes &> /dev/null
@ -293,8 +302,15 @@ exit 0
exit 0
%changelog
* Wed Dec 7 2022 Pavel Březina <pbrezina@redhat.com> - 1.2.5-2
- Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151229)
* Thu Aug 3 2023 Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
- Fix Japanese translations (RHBZ #2216755)
- Update translations (RHBZ #2189557)
- Do not prompt for password twice when changing password of local user (RHBZ #2179607)
* Thu Dec 1 2022 Pavel Březina <pbrezina@redhat.com> - 1.2.6-1
- Rebase to 1.2.6 (RHBZ #2142805)
- Update translations (RHBZ #2139696)
- Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151140)
* Thu May 5 2022 Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
- Rebase to 1.2.5 (RHBZ #2080238)