晚安
我使用chpasswd.cgi通过web更改密码,问题是当我将密码更改为123456789时,它将不起作用。我正在将一个代理服务器迁移到一个新的代理服务器,我有超过2k的密码。
我注意到crypt()将密码限制在8位,我有一些密码超出了这一限制。我试着查看/etc/pam.d/common-password,但我认为这与我想要什么无关。
晚安
我使用chpasswd.cgi通过web更改密码,问题是当我将密码更改为123456789时,它将不起作用。我正在将一个代理服务器迁移到一个新的代理服务器,我有超过2k的密码。
我注意到crypt()将密码限制在8位,我有一些密码超出了这一限制。我试着查看/etc/pam.d/common-password,但我认为这与我想要什么无关。
如果您的脚本继承了默认的哈希类型,那么在/etc/login.defs
中更改ENCRYPT_METHOD
可能会满足您的要求。根据您使用的操作系统发布轨迹,可用的哈希类型可能包括以下内容(现代没有创建选项):
MD5
(actually md5crypt) - EOL d by the authorSHA256
(actually sha256crypt) - work increases with lengthSHA512
(actually sha512crypt) - work increases with lengthDES
(actually descrypt) - truncates at 8 chars; only two-byte salt但sha256crypt或sha512crypt可能是“最不坏的”。
对于这两种情况,您还需要在下一个配置部分中增加SHA_CRYPT_MIN_ROUNDS
和SHA_CRYPT_MAX_ROUNDS[/code>,使其达到用户所能站立的高度(通常在500ms左右,用户会开始注意到)。将这些值保持为一个范围(而不是相同的值)将导致它们获得随机分布的功因子。这是一种理想的对策,可以在所有工作因素相同的情况下(如hashcat)破解效果最好(或仅能工作)的工具。
How to encrypt SALTEDHASHED password (used by Weblogic) in java? I need to be able to hash passwords in exactly the same way as WebLogic s authenticator does. Preferably without using WebLogic s ...
I would like to allow my users to use Unicode for their passwords. However I see a lot of sites don t support that (e.g. Gmail, Hotmail). So I m wondering if there s some technical or usability ...
I have two classes: a Generator class and a SystemManagement class. The Generator class, I can generate a password. The SystemManagement class imports Generator (from another package) and includes ...
In C, I want to display every single character that the user type as * (Ex, Please type in your password: *****) I m searching around but can t be able to find a solution for this. I m working on ...
Is it considered good or bad practice to use MySQL s password function to hash passwords used by an application? I can see pros and cons. I m curious if there is a general consensus on whether it is ...
So I have this black box authentication method, handed down to me from the accounts people, which basically amounts to ldap_bind($connection, $username, $password). But of course, I want my users to ...
I have a simple problem that says: A password for xyz corporation is supposed to be 6 characters long and made up of a combination of letters and digits. Write a program fragment to read in a string ...
I ve got an HTML-only website (with a bit of inconsequential javascript). The static pages are generated from a photo-blogging program that I created. There are hundreds of pages and thousands of ...