Loading...

XML

Word

Printable

Blocked:
False
Blocked Reason:

Hide

None

Show
None
Ready:
False
Documentation Type:

Release Notes
External issue URL:
https://projects.theforeman.org/issues/36650
PM Score:
0
Release Note Text:

Hide
.Root passwords are hashed by using SHA512

Satellite now uses the SHA512 algorithm to hash the root passwords of operating systems by default.
The new default is only applied to new operating system entries.
If you want to use the SHA512 algorithm in your existing operating systems, you have to change the algorithm manually and reprovision your hosts.

Show
.Root passwords are hashed by using SHA512 Satellite now uses the SHA512 algorithm to hash the root passwords of operating systems by default. The new default is only applied to new operating system entries. If you want to use the SHA512 algorithm in your existing operating systems, you have to change the algorithm manually and reprovision your hosts.
Release Note Type:
Enhancement
Release Note Status:
Done
Satellite Team:

Rocket
BZ Keywords:
- Unset
Intelligence Requested:
Market:

https://wiki.archlinux.org/title/SHA_password_hashes states that NSA has recommended SHA512 since RHEL 5. This means it's safe to do with wide compatibility. It should be noted that Fedora 35 has started to default to YESCRYPT. See ENCRYPT_METHOD in /etc/login.defs and https://www.fedoraproject.org/wiki/Changes/yescrypt_as_default_hashing_method_for_shadow for more info.