head 1.13; access; symbols netbsd-8-3-RELEASE:1.10.38.1 netbsd-9-4-RELEASE:1.11 netbsd-10-0-RELEASE:1.13 netbsd-10-0-RC6:1.13 netbsd-10-0-RC5:1.13 netbsd-10-0-RC4:1.13 netbsd-10-0-RC3:1.13 netbsd-10-0-RC2:1.13 netbsd-10-0-RC1:1.13 netbsd-10:1.13.0.2 netbsd-10-base:1.13 netbsd-9-3-RELEASE:1.11 cjep_sun2x-base1:1.11 cjep_sun2x:1.11.0.14 cjep_sun2x-base:1.11 cjep_staticlib_x-base1:1.11 netbsd-9-2-RELEASE:1.11 cjep_staticlib_x:1.11.0.12 cjep_staticlib_x-base:1.11 netbsd-9-1-RELEASE:1.11 phil-wifi-20200421:1.11 phil-wifi-20200411:1.11 is-mlppp:1.11.0.10 is-mlppp-base:1.11 phil-wifi-20200406:1.11 netbsd-8-2-RELEASE:1.10.38.1 netbsd-9-0-RELEASE:1.11 netbsd-9-0-RC2:1.11 netbsd-9-0-RC1:1.11 phil-wifi-20191119:1.11 netbsd-9:1.11.0.8 netbsd-9-base:1.11 phil-wifi-20190609:1.11 netbsd-8-1-RELEASE:1.10 netbsd-8-1-RC1:1.10 pgoyette-compat-merge-20190127:1.11 pgoyette-compat-20190127:1.11 pgoyette-compat-20190118:1.11 pgoyette-compat-1226:1.11 pgoyette-compat-1126:1.11 pgoyette-compat-1020:1.11 pgoyette-compat-0930:1.11 pgoyette-compat-0906:1.11 netbsd-7-2-RELEASE:1.10 pgoyette-compat-0728:1.11 netbsd-8-0-RELEASE:1.10 phil-wifi:1.11.0.6 phil-wifi-base:1.11 pgoyette-compat-0625:1.11 netbsd-8-0-RC2:1.10 pgoyette-compat-0521:1.11 pgoyette-compat-0502:1.11 pgoyette-compat-0422:1.11 netbsd-8-0-RC1:1.10 pgoyette-compat-0415:1.11 pgoyette-compat-0407:1.11 pgoyette-compat-0330:1.11 pgoyette-compat-0322:1.11 pgoyette-compat-0315:1.11 netbsd-7-1-2-RELEASE:1.10 pgoyette-compat:1.11.0.4 pgoyette-compat-base:1.11 netbsd-7-1-1-RELEASE:1.10 matt-nb8-mediatek:1.10.0.40 matt-nb8-mediatek-base:1.10 perseant-stdc-iso10646:1.11.0.2 perseant-stdc-iso10646-base:1.11 netbsd-8:1.10.0.38 netbsd-8-base:1.10 prg-localcount2-base3:1.10 prg-localcount2-base2:1.10 prg-localcount2-base1:1.10 prg-localcount2:1.10.0.36 prg-localcount2-base:1.10 pgoyette-localcount-20170426:1.10 bouyer-socketcan-base1:1.10 pgoyette-localcount-20170320:1.10 netbsd-7-1:1.10.0.34 netbsd-7-1-RELEASE:1.10 netbsd-7-1-RC2:1.10 netbsd-7-nhusb-base-20170116:1.10 bouyer-socketcan:1.10.0.32 bouyer-socketcan-base:1.10 pgoyette-localcount-20170107:1.10 netbsd-7-1-RC1:1.10 pgoyette-localcount-20161104:1.10 netbsd-7-0-2-RELEASE:1.10 localcount-20160914:1.10 netbsd-7-nhusb:1.10.0.30 netbsd-7-nhusb-base:1.10 pgoyette-localcount-20160806:1.10 pgoyette-localcount-20160726:1.10 pgoyette-localcount:1.10.0.28 pgoyette-localcount-base:1.10 netbsd-7-0-1-RELEASE:1.10 netbsd-7-0:1.10.0.26 netbsd-7-0-RELEASE:1.10 netbsd-7-0-RC3:1.10 netbsd-7-0-RC2:1.10 netbsd-7-0-RC1:1.10 netbsd-5-2-3-RELEASE:1.8 netbsd-5-1-5-RELEASE:1.8 netbsd-6-0-6-RELEASE:1.10 netbsd-6-1-5-RELEASE:1.10 netbsd-7:1.10.0.24 netbsd-7-base:1.10 yamt-pagecache-base9:1.10 yamt-pagecache-tag8:1.10 netbsd-6-1-4-RELEASE:1.10 netbsd-6-0-5-RELEASE:1.10 tls-earlyentropy:1.10.0.22 tls-earlyentropy-base:1.10 riastradh-xf86-video-intel-2-7-1-pre-2-21-15:1.10 riastradh-drm2-base3:1.10 netbsd-6-1-3-RELEASE:1.10 netbsd-6-0-4-RELEASE:1.10 netbsd-5-2-2-RELEASE:1.8 netbsd-5-1-4-RELEASE:1.8 netbsd-6-1-2-RELEASE:1.10 netbsd-6-0-3-RELEASE:1.10 netbsd-5-2-1-RELEASE:1.8 netbsd-5-1-3-RELEASE:1.8 netbsd-6-1-1-RELEASE:1.10 riastradh-drm2-base2:1.10 riastradh-drm2-base1:1.10 riastradh-drm2:1.10.0.16 riastradh-drm2-base:1.10 netbsd-6-1:1.10.0.20 netbsd-6-0-2-RELEASE:1.10 netbsd-6-1-RELEASE:1.10 netbsd-6-1-RC4:1.10 netbsd-6-1-RC3:1.10 agc-symver:1.10.0.18 agc-symver-base:1.10 netbsd-6-1-RC2:1.10 netbsd-6-1-RC1:1.10 yamt-pagecache-base8:1.10 netbsd-5-2:1.8.0.40 netbsd-6-0-1-RELEASE:1.10 yamt-pagecache-base7:1.10 netbsd-5-2-RELEASE:1.8 netbsd-5-2-RC1:1.8 matt-nb6-plus-nbase:1.10 yamt-pagecache-base6:1.10 netbsd-6-0:1.10.0.14 netbsd-6-0-RELEASE:1.10 netbsd-6-0-RC2:1.10 tls-maxphys:1.10.0.12 tls-maxphys-base:1.10 matt-nb6-plus:1.10.0.10 matt-nb6-plus-base:1.10 netbsd-6-0-RC1:1.10 yamt-pagecache-base5:1.10 yamt-pagecache-base4:1.10 netbsd-6:1.10.0.8 netbsd-6-base:1.10 netbsd-5-1-2-RELEASE:1.8 netbsd-5-1-1-RELEASE:1.8 yamt-pagecache-base3:1.10 yamt-pagecache-base2:1.10 yamt-pagecache:1.10.0.6 yamt-pagecache-base:1.10 cherry-xenmp:1.10.0.4 cherry-xenmp-base:1.10 bouyer-quota2-nbase:1.10 bouyer-quota2:1.10.0.2 bouyer-quota2-base:1.10 matt-mips64-premerge-20101231:1.10 matt-nb5-mips64-premerge-20101231:1.8 matt-nb5-pq3:1.8.0.38 matt-nb5-pq3-base:1.8 netbsd-5-1:1.8.0.36 netbsd-5-1-RELEASE:1.8 netbsd-5-1-RC4:1.8 matt-nb5-mips64-k15:1.8 netbsd-5-1-RC3:1.8 netbsd-5-1-RC2:1.8 netbsd-5-1-RC1:1.8 netbsd-5-0-2-RELEASE:1.8 matt-nb5-mips64-premerge-20091211:1.8 matt-premerge-20091211:1.9 matt-nb5-mips64-u2-k2-k4-k7-k8-k9:1.8 matt-nb4-mips64-k7-u2a-k9b:1.8 matt-nb5-mips64-u1-k1-k5:1.8 matt-nb5-mips64:1.8.0.34 netbsd-5-0-1-RELEASE:1.8 jym-xensuspend-nbase:1.8 netbsd-5-0:1.8.0.32 netbsd-5-0-RELEASE:1.8 netbsd-5-0-RC4:1.8 netbsd-5-0-RC3:1.8 netbsd-5-0-RC2:1.8 jym-xensuspend:1.8.0.30 jym-xensuspend-base:1.8 netbsd-5-0-RC1:1.8 netbsd-5:1.8.0.28 netbsd-5-base:1.8 matt-mips64-base2:1.8 matt-mips64:1.8.0.26 netbsd-4-0-1-RELEASE:1.8 wrstuden-revivesa-base-3:1.8 wrstuden-revivesa-base-2:1.8 wrstuden-fixsa-newbase:1.8 wrstuden-revivesa-base-1:1.8 yamt-pf42-base4:1.8 yamt-pf42-base3:1.8 hpcarm-cleanup-nbase:1.8 yamt-pf42-baseX:1.8 yamt-pf42-base2:1.8 wrstuden-revivesa:1.8.0.24 wrstuden-revivesa-base:1.8 yamt-pf42:1.8.0.22 yamt-pf42-base:1.8 mjf-devfs2:1.8.0.20 mjf-devfs2-base:1.8 keiichi-mipv6-nbase:1.8 keiichi-mipv6:1.8.0.18 keiichi-mipv6-base:1.8 matt-armv6-nbase:1.8 matt-armv6-prevmlocking:1.8 wrstuden-fixsa-base-1:1.8 netbsd-4-0:1.8.0.16 netbsd-4-0-RELEASE:1.8 cube-autoconf:1.8.0.14 cube-autoconf-base:1.8 netbsd-4-0-RC5:1.8 netbsd-4-0-RC4:1.8 netbsd-4-0-RC3:1.8 netbsd-4-0-RC2:1.8 netbsd-4-0-RC1:1.8 matt-armv6:1.8.0.12 matt-armv6-base:1.8 matt-mips64-base:1.8 hpcarm-cleanup:1.8.0.10 hpcarm-cleanup-base:1.8 netbsd-3-1-1-RELEASE:1.7 netbsd-3-0-3-RELEASE:1.7 wrstuden-fixsa:1.8.0.8 wrstuden-fixsa-base:1.8 abandoned-netbsd-4-base:1.8 abandoned-netbsd-4:1.8.0.4 netbsd-3-1:1.7.0.6 netbsd-3-1-RELEASE:1.7 netbsd-3-0-2-RELEASE:1.7 netbsd-3-1-RC4:1.7 netbsd-3-1-RC3:1.7 netbsd-3-1-RC2:1.7 netbsd-3-1-RC1:1.7 netbsd-4:1.8.0.6 netbsd-4-base:1.8 chap-midi-nbase:1.8 netbsd-3-0-1-RELEASE:1.7 chap-midi:1.8.0.2 chap-midi-base:1.8 netbsd-3-0:1.7.0.4 netbsd-3-0-RELEASE:1.7 netbsd-3-0-RC6:1.7 netbsd-3-0-RC5:1.7 netbsd-3-0-RC4:1.7 netbsd-3-0-RC3:1.7 netbsd-3-0-RC2:1.7 netbsd-3-0-RC1:1.7 netbsd-2-0-3-RELEASE:1.6 netbsd-2-1:1.6.0.6 netbsd-2-1-RELEASE:1.6 netbsd-2-1-RC6:1.6 netbsd-2-1-RC5:1.6 netbsd-2-1-RC4:1.6 netbsd-2-1-RC3:1.6 netbsd-2-1-RC2:1.6 netbsd-2-1-RC1:1.6 netbsd-2-0-2-RELEASE:1.6 netbsd-3:1.7.0.2 netbsd-3-base:1.7 netbsd-2-0-1-RELEASE:1.6 netbsd-2:1.6.0.4 netbsd-2-base:1.6 netbsd-2-0-RELEASE:1.6 netbsd-2-0-RC5:1.6 netbsd-2-0-RC4:1.6 netbsd-2-0-RC3:1.6 netbsd-2-0-RC2:1.6 netbsd-2-0-RC1:1.6 netbsd-2-0:1.6.0.2 netbsd-2-0-base:1.6 netbsd-1-6-PATCH002-RELEASE:1.4 netbsd-1-6-PATCH002:1.4 netbsd-1-6-PATCH002-RC4:1.4 netbsd-1-6-PATCH002-RC3:1.4 netbsd-1-6-PATCH002-RC2:1.4 netbsd-1-6-PATCH002-RC1:1.4 netbsd-1-6-PATCH001:1.4 netbsd-1-6-PATCH001-RELEASE:1.4 netbsd-1-6-PATCH001-RC3:1.4 netbsd-1-6-PATCH001-RC2:1.4 netbsd-1-6-PATCH001-RC1:1.4 fvdl_fs64_base:1.6 netbsd-1-6-RELEASE:1.4 netbsd-1-6-RC3:1.4 netbsd-1-6-RC2:1.4 netbsd-1-6-RC1:1.4 netbsd-1-6:1.4.0.4 netbsd-1-6-base:1.4 netbsd-1-5-PATCH003:1.4.2.2 netbsd-1-5:1.4.0.2; locks; strict; comment @.\" @; 1.13 date 2021.10.26.20.44.45; author nia; state Exp; branches; next 1.12; commitid py5xPzpIjXwivmeD; 1.12 date 2021.10.12.11.08.14; author nia; state Exp; branches; next 1.11; commitid xhqbz98voxIsNvcD; 1.11 date 2017.07.03.21.30.59; author wiz; state Exp; branches; next 1.10; commitid OfTDvnrC1yx1sPXz; 1.10 date 2010.12.03.21.41.40; author jmmv; state Exp; branches 1.10.38.1; next 1.9; 1.9 date 2009.10.03.12.45.15; author zafer; state Exp; branches; next 1.8; 1.8 date 2005.09.05.03.37.15; author hubertf; state Exp; branches; next 1.7; 1.7 date 2004.07.02.00.05.23; author sjg; state Exp; branches; next 1.6; 1.6 date 2002.05.24.04.17.44; author itojun; state Exp; branches; next 1.5; 1.5 date 2002.05.24.04.02.48; author itojun; state Exp; branches; next 1.4; 1.4 date 2002.02.13.08.18.15; author ross; state Exp; branches 1.4.2.1 1.4.4.1; next 1.3; 1.3 date 2001.09.11.01.01.58; author wiz; state Exp; branches; next 1.2; 1.2 date 2000.07.06.13.13.53; author ad; state Exp; branches; next 1.1; 1.1 date 2000.07.06.11.23.11; author ad; state Exp; branches; next ; 1.10.38.1 date 2019.09.02.16.39.21; author martin; state Exp; branches; next ; commitid sfvI0Jm76dICpsBB; 1.4.2.1 date 2002.02.13.08.18.15; author he; state dead; branches; next 1.4.2.2; 1.4.2.2 date 2002.02.26.22.09.45; author he; state Exp; branches; next ; 1.4.4.1 date 2004.03.26.22.53.16; author jmc; state Exp; branches; next ; desc @@ 1.13 log @passwd.conf(5): switch default cipher for new user accounts to Argon2id As well as offering a dynamic amount of iterations and memory usage, which fits well with NetBSD's goal of running on a diverse range of hardware devices, Argon2id offers improved resistance to GPU-based password cracking and side channel attacks. @ text @.\" $NetBSD: passwd.conf.5,v 1.12 2021/10/12 11:08:14 nia Exp $ .\" .\" Copyright 1997 Niels Provos .\" All rights reserved. .\" .\" Redistribution and use in source and binary forms, with or without .\" modification, are permitted provided that the following conditions .\" are met: .\" 1. Redistributions of source code must retain the above copyright .\" notice, this list of conditions and the following disclaimer. .\" 2. Redistributions in binary form must reproduce the above copyright .\" notice, this list of conditions and the following disclaimer in the .\" documentation and/or other materials provided with the distribution. .\" 3. All advertising materials mentioning features or use of this software .\" must display the following acknowledgement: .\" This product includes software developed by Niels Provos. .\" 4. The name of the author may not be used to endorse or promote products .\" derived from this software without specific prior written permission. .\" .\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR .\" IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES .\" OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. .\" IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, .\" INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT .\" NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, .\" DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY .\" THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" .Dd October 26, 2021 .Dt PASSWD.CONF 5 .Os .Sh NAME .Nm passwd.conf .Nd password encryption configuration file .Sh SYNOPSIS .Nm .Sh DESCRIPTION The .Pa /etc/passwd.conf file, consisting of .Dq stanzas , describes the configuration of the password cipher used to encrypt local or YP passwords. .Pp There are default, user and group specific stanzas. If no user or group stanza to a specific option is available, the default stanza is used. .Pp To differentiate between user and group stanzas, groups are prefixed with a single colon .Pq Sq \&: . .Pp Some fields and their possible values that can appear in this file are: .Bl -tag -width localcipher .It Sy localcipher The cipher to use for local passwords. .Pp Possible values are: .Dq argon2d, , .Dq argon2i, , .Dq argon2id, , .Dq old , .Dq newsalt, , .Dq md5 , .Dq sha1, , and .Dq blowfish, . .Pp For .Dq argon2d , .Dq argon2i , and .Dq argon2id , optional hardness parameters can be specified as described in the manual for .Xr pwhash 1 . .Pp For .Dq newsalt the value of rounds is a 24-bit integer with a minimum of 7250 rounds. .Pp For .Dq sha1 the value of rounds is a 32-bit integer, 0 means use the default of 24680. .Pp For .Dq blowfish the value can be between 4 and 31. It specifies the base 2 logarithm of the number of rounds. .Pp If not specified, the default value is .Dq old . .It Sy ypcipher The cipher to use for YP passwords. .Pp The possible values are the same as for localcipher. .Pp If not specified, the default value is .Dq old . .El .Pp To retrieve information from this file use .Xr pw_getconf 3 . .Sh FILES .Bl -tag -width /etc/passwd.conf -compact .It Pa /etc/passwd.conf .El .Sh EXAMPLES Use SHA1 as the local cipher and old-style DES as the YP cipher. Use blowfish with 2^5 rounds for root: .Bd -literal default: localcipher = sha1 ypcipher = old root: localcipher = blowfish,5 .Ed .Sh SEE ALSO .Xr passwd 1 , .Xr pwhash 1 , .Xr pw_getconf 3 , .Xr passwd 5 .Sh HISTORY The .Nm configuration file first appeared in .Nx 1.6 . .Pp The default value of .Sy localcipher was set to .Dq sha1 in .Pa /etc/passwd.conf starting from .Nx 6.0 . .Pp The default value of .Sy localcipher was set to .Dq argon2id in .Pa /etc/passwd.conf starting from .Nx 10.0 . @ 1.12 log @passwd.conf.5: document using argon2 @ text @d1 1 a1 1 .\" $NetBSD: passwd.conf.5,v 1.11 2017/07/03 21:30:59 wiz Exp $ d31 1 a31 1 .Dd October 12, 2021 d142 9 @ 1.11 log @Remove workaround for ancient HTML generation code. @ text @d1 1 a1 1 .\" $NetBSD: passwd.conf.5,v 1.10 2010/12/03 21:41:40 jmmv Exp $ d31 1 a31 1 .Dd December 3, 2010 d62 3 d71 10 d84 1 d89 1 @ 1.10 log @Document what the default values for localcipher and ypcipher are. @ text @d1 1 a1 1 .\" $NetBSD: passwd.conf.5,v 1.9 2009/10/03 12:45:15 zafer Exp $ d63 1 a63 1 .Dq newsalt,\*[Lt]rounds\*[Gt] , d65 1 a65 1 .Dq sha1,\*[Lt]rounds\*[Gt] , d67 1 a67 1 .Dq blowfish,\*[Lt]rounds\*[Gt] . @ 1.10.38.1 log @Pull up following revision(s) (requested by sevan in ticket #1351): share/man/man4/man4.amiga/grf.4: revision 1.7 share/man/man4/si.4: revision 1.11 share/man/man8/man8.sparc/boot.8: revision 1.32 share/man/man5/nsswitch.conf.5: revision 1.29 share/man/man5/mixerctl.conf.5: revision 1.7 share/man/man8/man8.vax/boot.8: revision 1.14 share/man/man4/man4.vax/dn.4: revision 1.12 share/man/man8/man8.vax/drtest.8: revision 1.16 share/man/man8/sysinst.8: revision 1.6 share/man/man4/ip.4: revision 1.37 share/man/man5/boot.cfg.5: revision 1.28 share/man/man1/cd.1: revision 1.10 share/man/man4/usb.4: revision 1.106 share/man/man4/man4.vax/ix.4: revision 1.17 share/man/man7/security.7: revision 1.15 share/man/man7/hier.7: revision 1.123 share/man/man8/afterboot.8: revision 1.58 share/man/man1/man1.x68k/bellctrl.1: revision 1.14 share/man/man4/se.4: revision 1.6 share/man/man4/utoppy.4: revision 1.7 share/man/man4/midi.4: revision 1.32 share/man/man4/cfb.4: revision 1.5 share/man/man4/man4.sparc/magma.4: revision 1.12 share/man/man4/audio.4: revision 1.80 share/man/man4/isic.4: revision 1.18 share/man/man1/cd.1: revision 1.7 share/man/man4/envsys.4: revision 1.51 share/man/man1/cd.1: revision 1.8 share/man/man1/cd.1: revision 1.9 share/man/man3/fast_divide32.3: revision 1.9 share/man/man4/pci.4: revision 1.97 share/man/man5/ranlib.5: revision 1.7 share/man/man3/__arraycount.3: revision 1.7 share/man/man4/isa.4: revision 1.46 share/man/man8/man8.atari/ahdilabel.8: revision 1.14 share/man/man4/chipsfb.4: revision 1.6 share/man/man8/man8.macppc/boot.8: revision 1.8 share/man/man5/passwd.5: revision 1.33 share/man/man8/man8.macppc/ofwboot.8: revision 1.14 share/man/man8/compat_linux.8: revision 1.38 share/man/man4/iop.4: revision 1.22 share/man/man4/ddb.4: revision 1.167 share/man/man4/termios.4: revision 1.37 share/man/man8/compat_freebsd.8: revision 1.18 share/man/man5/ar.5: revision 1.9 share/man/man7/release.7: revision 1.37 share/man/man5/core.5: revision 1.31 share/man/man4/ahd.4: revision 1.6 share/man/man4/man4.vax/ad.4: revision 1.12 share/man/man4/pppoe.4: revision 1.39 share/man/man5/locale.alias.5: revision 1.3 share/man/man8/man8.amiga/installboot.8: revision 1.23 share/man/man4/etherip.4: revision 1.8 share/man/man3/queue.3: revision 1.57 share/man/man5/genassym.cf.5: revision 1.13 share/man/man4/mpls.4: revision 1.10 share/man/man1/wait.1: revision 1.5 share/man/man5/capfile.5: revision 1.4 share/man/man4/man4.alpha/ttwopci.4: revision 1.6 share/man/man4/man4.atari/rtc.4: revision 1.8 share/man/man4/gpiosim.4: revision 1.6 share/man/man3/bitstring.3: revision 1.18 share/man/man4/isdntel.4: revision 1.8 share/man/man4/ai.4: revision 1.9 share/man/man8/man8.hppa/boot.8: revision 1.2 share/man/man4/uyurex.4: revision 1.6 share/man/man8/man8.alpha/mkbootimage.8: revision 1.9 share/man/man4/bpf.4: revision 1.56 share/man/man4/man4.amiga/mfcs.4: revision 1.8 share/man/man4/cmpci.4: revision 1.9 share/man/man8/man8.vax/format.8: revision 1.14 share/man/man8/compat_svr4.8: revision 1.27 share/man/man4/crypto.4: revision 1.26 share/man/man4/userconf.4: revision 1.13 share/man/man4/agp.4: revision 1.17 share/man/man9/man9.i386/bioscall.9: revision 1.10 share/man/man4/uftdi.4: revision 1.20 share/man/man4/radio.4: revision 1.13 share/man/man4/mfb.4: revision 1.5 share/man/man7/ascii.7: revision 1.8 share/man/man4/man4.vax/dl.4: revision 1.13 share/man/man4/ral.4: revision 1.12 share/man/man4/unix.4: revision 1.26 share/man/man4/edc.4: revision 1.12 share/man/man4/pim.4: revision 1.5 share/man/man8/compat_ultrix.8: revision 1.21 share/man/man4/dge.4: revision 1.11 share/man/man8/diskless.8: revision 1.32 share/man/man5/passwd.conf.5: revision 1.11 share/man/man8/man8.acorn26/boot26.8: revision 1.8 share/man/man4/man4.vax/hy.4: revision 1.12 share/man/man4/plip.4: revision 1.4 share/man/man4/sc.4: revision 1.8 share/man/man4/ec.4: revision 1.14 share/man/man4/man4.sgimips/giopci.4: revision 1.9 share/man/man7/sysctl.7: revision 1.114 share/man/man3/bits.3: revision 1.18 share/man/man4/we.4: revision 1.19 share/man/man8/compat_sunos.8: revision 1.21 share/man/man4/ip6.4: revision 1.31 share/man/man4/acpilid.4: revision 1.8 share/man/man4/man4.dreamcast/aica.4: revision 1.6 share/man/man4/mfi.4: revision 1.12 share/man/man4/ugen.4: revision 1.32 share/man/man4/jme.4: revision 1.7 share/man/man4/man4.sparc64/intro.4: revision 1.5 share/man/man4/zyd.4: revision 1.5 share/man/man4/gre.4: revision 1.45 share/man/man3/bitmap.3: revision 1.10 share/man/man4/man4.vax/cons.4: revision 1.12 share/man/man3/gcq.3: revision 1.4 share/man/man4/man4.hppa/pdc.4: revision 1.3 share/man/man4/multicast.4: revision 1.8 share/man/man4/man4.sparc/intro.4: revision 1.27 share/man/man4/ath.4: revision 1.32 share/man/man4/ym.4: revision 1.19 share/man/man3/iso646.3: revision 1.6 share/man/man4/btsco.4: revision 1.13 share/man/man4/man4.i386/ndis.4: revision 1.6 share/man/man4/pad.4: revision 1.6 share/man/man4/strip.4: revision 1.16 share/man/man8/man8.x86/boot.8: revision 1.12 share/man/man4/amr.4: revision 1.15 share/man/man4/ieee80211.4: revision 1.5 share/man/man4/options.4: revision 1.467 share/man/man5/link.5: revision 1.24 share/man/man8/man8.cobalt/boot.8: revision 1.10 share/man/man5/stab.5: revision 1.15 share/man/man3/tree.3: revision 1.12 share/man/man4/route.4: revision 1.31 share/man/man4/man4.sun3/leds.4: revision 1.13 share/man/man4/bluetooth.4: revision 1.20 share/man/man4/man4.i386/pcibios.4: revision 1.19 share/man/man5/veriexec.5: revision 1.8 share/man/man7/operator.7: revision 1.12 share/man/man4/man4.hp300/dcl.4: revision 1.13 share/man/man4/man4.i386/intro.4: revision 1.31 share/man/man5/ld.so.conf.5: revision 1.21 share/man/man8/man8.alpha/boot.8: revision 1.16 share/man/man4/bio.4: revision 1.13 share/man/man4/man4.sun2/leds.4: revision 1.10 share/man/man8/man8.x86/mbr.8: revision 1.4 share/man/man8/man8.mvme68k/boot.8: revision 1.9 share/man/man4/man4.alpha/ttwoga.4: revision 1.6 share/man/man4/ahc.4: revision 1.34 Direct reader to shell documentation generally, rather than csh(1) specifically. Mention variables OLDPWD and PWD. Move the text that explains that cd(1) is a shell built-in to the very beginning of the description where it can be seen prominently. Improve formatting. - Remove workaround for ancient HTML generation code. Use EXIT STATUS and .Ex. @ text @d1 1 a1 1 .\" $NetBSD: passwd.conf.5,v 1.10 2010/12/03 21:41:40 jmmv Exp $ d63 1 a63 1 .Dq newsalt, , d65 1 a65 1 .Dq sha1, , d67 1 a67 1 .Dq blowfish, . @ 1.9 log @remove trailing whitespace. (hi wiz!) @ text @d1 1 a1 1 .\" $NetBSD: passwd.conf.5,v 1.8 2005/09/05 03:37:15 hubertf Exp $ d31 1 a31 1 .Dd September 4, 2005 d60 1 d79 3 d84 1 d86 3 d98 1 a98 1 Use MD5 as the local cipher and old-style DES as the YP cipher. d102 1 a102 1 localcipher = md5 d118 9 @ 1.8 log @Mention pwhash(1) in a few places, suggested in PR 31125 by Stefan Schumacher. @ text @d1 1 a1 1 .\" $NetBSD: passwd.conf.5,v 1.7 2004/07/02 00:05:23 sjg Exp $ d73 1 a73 1 of 24680. @ 1.7 log @Add support for SHA1 hashed passwords. The algorithm used is essentially PBKDF1 from RFC 2898 but using hmac_sha1 rather than SHA1 directly (suggested by smb@@research.att.com). * The format of the encrypted password is: * $$$$ * * where: * is "sha1" * is an unsigned int identifying how many rounds * have been applied to . The number * should vary slightly for each password to make * it harder to generate a dictionary of * pre-computed hashes. See crypt_sha1_iterations. * up to 64 bytes of random data, 8 bytes is * currently considered more than enough. * the hashed password. hmac.c implementes HMAC as defined in RFC 2104 and includes a unit test for both hmac_sha1 and hmac_sha1 using a selection of the Known Answer Tests from RFC 2202. It is worth noting that to be FIPS compliant the hmac key (password) should be 10-20 chars. @ text @d1 1 a1 1 .\" $NetBSD: passwd.conf.5,v 1.6 2002/05/24 04:17:44 itojun Exp $ d31 1 a31 1 .Dd June 30, 2000 d102 1 @ 1.6 log @have an example with blowfish password. @ text @d1 1 a1 1 .\" $NetBSD: passwd.conf.5,v 1.5 2002/05/24 04:02:48 itojun Exp $ d64 1 d71 4 @ 1.5 log @support bcrypt password. can be chosen by "blowfish" keyword in passwd.conf. from openbsd @ text @d1 1 a1 1 .\" $NetBSD: passwd.conf.5,v 1.4 2002/02/13 08:18:15 ross Exp $ d85 2 a86 1 Use MD5 as the local cipher and old-style DES as the YP cipher: d91 3 @ 1.4 log @Generate <>& symbolically. I'm avoiding .../dist/... directories for now. @ text @d1 1 a1 1 .\" $NetBSD: passwd.conf.5,v 1.3 2001/09/11 01:01:58 wiz Exp $ d63 1 d65 1 a65 1 .Dq md5 . d69 4 @ 1.4.2.1 log @file passwd.conf.5 was added on branch netbsd-1-5 on 2002-02-26 22:09:45 +0000 @ text @d1 94 @ 1.4.2.2 log @Pull up revisions 1.1-1.4 (requested by jonathan): Add support for local MD5-encrypted passwords. @ text @a0 94 .\" $NetBSD: passwd.conf.5,v 1.4.2.1 2002/02/26 22:09:45 he Exp $ .\" .\" Copyright 1997 Niels Provos .\" All rights reserved. .\" .\" Redistribution and use in source and binary forms, with or without .\" modification, are permitted provided that the following conditions .\" are met: .\" 1. Redistributions of source code must retain the above copyright .\" notice, this list of conditions and the following disclaimer. .\" 2. Redistributions in binary form must reproduce the above copyright .\" notice, this list of conditions and the following disclaimer in the .\" documentation and/or other materials provided with the distribution. .\" 3. All advertising materials mentioning features or use of this software .\" must display the following acknowledgement: .\" This product includes software developed by Niels Provos. .\" 4. The name of the author may not be used to endorse or promote products .\" derived from this software without specific prior written permission. .\" .\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR .\" IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES .\" OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. .\" IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, .\" INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT .\" NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, .\" DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY .\" THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" .Dd June 30, 2000 .Dt PASSWD.CONF 5 .Os .Sh NAME .Nm passwd.conf .Nd password encryption configuration file .Sh SYNOPSIS .Nm .Sh DESCRIPTION The .Pa /etc/passwd.conf file, consisting of .Dq stanzas , describes the configuration of the password cipher used to encrypt local or YP passwords. .Pp There are default, user and group specific stanzas. If no user or group stanza to a specific option is available, the default stanza is used. .Pp To differentiate between user and group stanzas, groups are prefixed with a single colon .Pq Sq \&: . .Pp Some fields and their possible values that can appear in this file are: .Bl -tag -width localcipher .It Sy localcipher The cipher to use for local passwords. Possible values are: .Dq old , .Dq newsalt,\*[Lt]rounds\*[Gt] , and .Dq md5 . For .Dq newsalt the value of rounds is a 24-bit integer with a minimum of 7250 rounds. .It Sy ypcipher The cipher to use for YP passwords. The possible values are the same as for localcipher. .El .Pp To retrieve information from this file use .Xr pw_getconf 3 . .Sh FILES .Bl -tag -width /etc/passwd.conf -compact .It Pa /etc/passwd.conf .El .Sh EXAMPLES Use MD5 as the local cipher and old-style DES as the YP cipher: .Bd -literal default: localcipher = md5 ypcipher = old .Ed .Sh SEE ALSO .Xr passwd 1 , .Xr pw_getconf 3 , .Xr passwd 5 .Sh HISTORY The .Nm configuration file first appeared in .Nx 1.6 . @ 1.4.4.1 log @Pullup rev 1.5-1.6 (requested by provos in ticket #1386) Introduce bcrypt password scheme. Adds the arc4random API for creating cryptographically strong random numbers. @ text @d1 1 a1 1 .\" $NetBSD: passwd.conf.5,v 1.4 2002/02/13 08:18:15 ross Exp $ a62 1 .Dq md5 , d64 1 a64 1 .Dq blowfish,\*[Lt]rounds\*[Gt] . a67 4 For .Dq blowfish the value can be between 4 and 31. It specifies the base 2 logarithm of the number of rounds. d80 1 a80 2 Use MD5 as the local cipher and old-style DES as the YP cipher. Use blowfish with 2^5 rounds for root: a84 3 root: localcipher = blowfish,5 @ 1.3 log @Sort SEE ALSO correctly; trade empty lines for .Pp; drop superfluous .Pp's; correct oder of sections; even comment in some .Xr's in one case. @ text @d1 1 a1 1 .\" $NetBSD: passwd.conf.5,v 1.2 2000/07/06 13:13:53 ad Exp $ d62 1 a62 1 .Dq newsalt, , @ 1.2 log @Use ':' as group prefix; suggested by hubertf. @ text @d1 1 a1 1 .\" $NetBSD: passwd.conf.5,v 1.1 2000/07/06 11:23:11 ad Exp $ d75 4 a78 1 .Pp a85 4 .Sh FILES .Bl -tag -width /etc/passwd.conf -compact .It Pa /etc/passwd.conf .El @ 1.1 log @Documentation for passwd.conf. @ text @d1 1 a1 1 .\" $NetBSD$ d53 2 a54 2 with a single dot .Pq Sq \&. . @