diff --git a/SOURCES/0904-rhel8-Revert-yescrypt.patch b/SOURCES/0904-rhel8-Revert-yescrypt.patch new file mode 100644 index 0000000..ac015b8 --- /dev/null +++ b/SOURCES/0904-rhel8-Revert-yescrypt.patch @@ -0,0 +1,873 @@ +From 91cdfdc2a8a6af158fde0729597aa6e78c77d0e5 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Pavel=20B=C5=99ezina?= +Date: Mon, 5 Dec 2022 19:03:00 +0100 +Subject: [PATCH] rhel8: Revert yescrypt + +--- + po/authselect.pot | 2 +- + po/ca.po | 2 +- + po/cs.po | 4 ++-- + po/de.po | 4 ++-- + po/es.po | 4 ++-- + po/fa.po | 2 +- + po/fi.po | 2 +- + po/fr.po | 4 ++-- + po/hu.po | 4 ++-- + po/id.po | 2 +- + po/it.po | 4 ++-- + po/ja.po | 4 ++-- + po/ko.po | 4 ++-- + po/nl.po | 4 ++-- + po/pl.po | 4 ++-- + po/pt.po | 2 +- + po/pt_BR.po | 4 ++-- + po/ru.po | 4 ++-- + po/si.po | 2 +- + po/sv.po | 4 ++-- + po/tr.po | 4 ++-- + po/uk.po | 4 ++-- + po/zh_CN.po | 4 ++-- + po/zh_TW.po | 4 ++-- + profiles/minimal/password-auth | 2 +- + profiles/minimal/system-auth | 2 +- + profiles/nis/password-auth | 2 +- + profiles/nis/system-auth | 2 +- + profiles/sssd/password-auth | 2 +- + profiles/sssd/system-auth | 2 +- + profiles/winbind/password-auth | 2 +- + profiles/winbind/system-auth | 2 +- + src/compat/authcompat_Options.py | 2 +- + src/man/authselect-migration.7.adoc | 2 +- + src/man/po/authselect-migration.7.adoc.ca.po | 2 +- + src/man/po/authselect-migration.7.adoc.cs.po | 2 +- + src/man/po/authselect-migration.7.adoc.de.po | 2 +- + src/man/po/authselect-migration.7.adoc.es.po | 2 +- + src/man/po/authselect-migration.7.adoc.fa.po | 2 +- + src/man/po/authselect-migration.7.adoc.fr.po | 2 +- + src/man/po/authselect-migration.7.adoc.hu.po | 2 +- + src/man/po/authselect-migration.7.adoc.it.po | 2 +- + src/man/po/authselect-migration.7.adoc.ja.po | 4 ++-- + src/man/po/authselect-migration.7.adoc.ko.po | 4 ++-- + src/man/po/authselect-migration.7.adoc.nl.po | 2 +- + src/man/po/authselect-migration.7.adoc.pl.po | 2 +- + src/man/po/authselect-migration.7.adoc.pot | 2 +- + src/man/po/authselect-migration.7.adoc.pt.po | 2 +- + src/man/po/authselect-migration.7.adoc.pt_BR.po | 2 +- + src/man/po/authselect-migration.7.adoc.ru.po | 4 ++-- + src/man/po/authselect-migration.7.adoc.si.po | 2 +- + src/man/po/authselect-migration.7.adoc.sv.po | 4 ++-- + src/man/po/authselect-migration.7.adoc.tr.po | 4 ++-- + src/man/po/authselect-migration.7.adoc.uk.po | 4 ++-- + src/man/po/authselect-migration.7.adoc.zh_CN.po | 2 +- + src/man/po/authselect-migration.7.adoc.zh_TW.po | 2 +- + 56 files changed, 79 insertions(+), 79 deletions(-) + +diff --git a/po/authselect.pot b/po/authselect.pot +index 41335281ebd8392139d4c70e0237888dda4a7581..170b5599546536303dc23f199295fd486a72da8a 100644 +--- a/po/authselect.pot ++++ b/po/authselect.pot +@@ -1535,7 +1535,7 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" ++msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:149 +diff --git a/po/ca.po b/po/ca.po +index 84786d9a5dbe1995bc53340b3699f07fec096d74..b92fc4e21b3a57f9b1848c63eef7faa1be386b95 100644 +--- a/po/ca.po ++++ b/po/ca.po +@@ -1569,7 +1569,7 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" ++msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:149 +diff --git a/po/cs.po b/po/cs.po +index 66255c9db3c1c1a98869ff88dcf99e7a2f36a163..5d92c6ef9228c374fc641fdeef856c6257b4720a 100644 +--- a/po/cs.po ++++ b/po/cs.po +@@ -1612,8 +1612,8 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" +-msgstr "" ++msgid "" ++msgstr "" + + # auto translated by TM merge from project: authconfig, version: master, DocId: po/authconfig + #: src/compat/authcompat_Options.py:149 +diff --git a/po/de.po b/po/de.po +index d15c0fc9b3db503641dcc733f767036c629113d5..ee2d0e8ced558da4425784e8a9f4694c967a0227 100644 +--- a/po/de.po ++++ b/po/de.po +@@ -1598,8 +1598,8 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" +-msgstr "" ++msgid "" ++msgstr "" + + #: src/compat/authcompat_Options.py:149 + msgid "" +diff --git a/po/es.po b/po/es.po +index a799ea3b03a9f36b8cb15ee2134ba5a243da549e..ecb9cb8dbafe9916d39d08fa6181312bba6268e9 100644 +--- a/po/es.po ++++ b/po/es.po +@@ -1598,8 +1598,8 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" +-msgstr "" ++msgid "" ++msgstr "" + + #: src/compat/authcompat_Options.py:149 + msgid "" +diff --git a/po/fa.po b/po/fa.po +index d48012a0f75af480f24b8af481d40633c5ea7e03..d250d3c7d0de8be97ffefdcf3117237deb4429be 100644 +--- a/po/fa.po ++++ b/po/fa.po +@@ -1536,7 +1536,7 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" ++msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:149 +diff --git a/po/fi.po b/po/fi.po +index ae2b128cd60ba3e661496fc914c76721886146d2..e8d48f09b7e4864e7ff9e4d4b6f6e94e9824a93e 100644 +--- a/po/fi.po ++++ b/po/fi.po +@@ -1544,7 +1544,7 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" ++msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:149 +diff --git a/po/fr.po b/po/fr.po +index 91adf6c4bb3df1897e53323da382194aebeaf70b..2815b29e74be3271fd0a1bc3211a568716de17af 100644 +--- a/po/fr.po ++++ b/po/fr.po +@@ -1605,8 +1605,8 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" +-msgstr "" ++msgid "" ++msgstr "" + + #: src/compat/authcompat_Options.py:149 + msgid "" +diff --git a/po/hu.po b/po/hu.po +index 42c84addce849b483bdbf053f71bc685b8ec2a49..103c77387e6ce06d0e181b92f6722138eaedae21 100644 +--- a/po/hu.po ++++ b/po/hu.po +@@ -1589,8 +1589,8 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" +-msgstr "" ++msgid "" ++msgstr "" + + #: src/compat/authcompat_Options.py:149 + msgid "" +diff --git a/po/id.po b/po/id.po +index 09c5e4f4b88452c5ebfbf9f171306a8fa6a95728..9564863975069ece39343fbac1e03c7cd716ca46 100644 +--- a/po/id.po ++++ b/po/id.po +@@ -1536,7 +1536,7 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" ++msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:149 +diff --git a/po/it.po b/po/it.po +index f0e990cb496dd6ec5bd849e86621c839e2d455b5..a511d308d5d07b9915eb361cf360b9a32a1ab8c4 100644 +--- a/po/it.po ++++ b/po/it.po +@@ -1583,8 +1583,8 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" +-msgstr "" ++msgid "" ++msgstr "" + + #: src/compat/authcompat_Options.py:149 + msgid "" +diff --git a/po/ja.po b/po/ja.po +index 1e822c3a1d80e684abe085ea31cfe86fd4d5b677..ff35083da00ddd467cf4040a6673eb2c9490da35 100644 +--- a/po/ja.po ++++ b/po/ja.po +@@ -1597,8 +1597,8 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" +-msgstr "" ++msgid "" ++msgstr "" + + # auto translated by TM merge from translation memory: authconfig, unique id: authconfig:6.2.8:authconfig:0bbce02e304562c295a1d57d66c296d3 + #: src/compat/authcompat_Options.py:149 +diff --git a/po/ko.po b/po/ko.po +index a927f441ea12b1e46dff5aa67fe5515a014b8033..54e0a48e76c2e5b9844b324cb0afc784e1676563 100644 +--- a/po/ko.po ++++ b/po/ko.po +@@ -1569,8 +1569,8 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" +-msgstr "" ++msgid "" ++msgstr "" + + #: src/compat/authcompat_Options.py:149 + msgid "" +diff --git a/po/nl.po b/po/nl.po +index 5bb5a5ed60cc3003b915a1351d7fb3e1382d982a..36b784899acc4d0a2d0a51eb01e96d845183f850 100644 +--- a/po/nl.po ++++ b/po/nl.po +@@ -1598,8 +1598,8 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" +-msgstr "" ++msgid "" ++msgstr "" + + #: src/compat/authcompat_Options.py:149 + msgid "" +diff --git a/po/pl.po b/po/pl.po +index 81616c6e966f358d73acb82698484c71d923dab7..c3e5874bb39a3a71ff0f0ac416acfa0700a41b43 100644 +--- a/po/pl.po ++++ b/po/pl.po +@@ -1609,8 +1609,8 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" +-msgstr "" ++msgid "" ++msgstr "" + + #: src/compat/authcompat_Options.py:149 + msgid "" +diff --git a/po/pt.po b/po/pt.po +index 6b1d1ab3902f7669bcfa020867bf5cc22fe6975d..ce750eeea43ff9735f2238394790b0f8e9b7421a 100644 +--- a/po/pt.po ++++ b/po/pt.po +@@ -1536,7 +1536,7 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" ++msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:149 +diff --git a/po/pt_BR.po b/po/pt_BR.po +index ef4af00a59773fd821cc3ae48e212084a90db5b6..99e1279c264efaf4b92d579a290e6e26cc7bf26d 100644 +--- a/po/pt_BR.po ++++ b/po/pt_BR.po +@@ -1592,8 +1592,8 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" +-msgstr "" ++msgid "" ++msgstr "" + + #: src/compat/authcompat_Options.py:149 + msgid "" +diff --git a/po/ru.po b/po/ru.po +index 43a9bfbf5a018bdf30fc8ab696233a3af313607e..9532210c63d9176a8d15d0884c8ab008d82b8a41 100644 +--- a/po/ru.po ++++ b/po/ru.po +@@ -1589,8 +1589,8 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" +-msgstr "" ++msgid "" ++msgstr "" + + #: src/compat/authcompat_Options.py:149 + msgid "" +diff --git a/po/si.po b/po/si.po +index ba802552d4a85ddbf0379f3332905012a5698b71..800908cdaa1601abacda71d28e51e90ac413b502 100644 +--- a/po/si.po ++++ b/po/si.po +@@ -1536,7 +1536,7 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" ++msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:149 +diff --git a/po/sv.po b/po/sv.po +index fb1ef0ce4fcff97605c8d1c4d024e5b5ab9020c0..dde9aff07469fbf4beca6801a0353cf5bd2045d0 100644 +--- a/po/sv.po ++++ b/po/sv.po +@@ -1579,8 +1579,8 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" +-msgstr "" ++msgid "" ++msgstr "" + + #: src/compat/authcompat_Options.py:149 + msgid "" +diff --git a/po/tr.po b/po/tr.po +index 60f0c6ce5a9f54cb814371151460e592c38bb1e7..44496ef5cb70d35310acfb86330e77583090b1ca 100644 +--- a/po/tr.po ++++ b/po/tr.po +@@ -1588,8 +1588,8 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" +-msgstr "" ++msgid "" ++msgstr "" + + #: src/compat/authcompat_Options.py:149 + msgid "" +diff --git a/po/uk.po b/po/uk.po +index 1371122dcea19b739df2dc2b28c718865ae19cc0..b86461559972bc2b1e8a4e366770a140e4b93296 100644 +--- a/po/uk.po ++++ b/po/uk.po +@@ -1591,8 +1591,8 @@ msgid "" + msgstr "<назва>" + + #: src/compat/authcompat_Options.py:148 +-msgid "" +-msgstr "" ++msgid "" ++msgstr "" + + #: src/compat/authcompat_Options.py:149 + msgid "" +diff --git a/po/zh_CN.po b/po/zh_CN.po +index 3adf18b416c1bf62a14eff55ae5a64cabd524e44..1a52f39a9e79166a561811de13749204da637308 100644 +--- a/po/zh_CN.po ++++ b/po/zh_CN.po +@@ -1559,8 +1559,8 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" +-msgstr "" ++msgid "" ++msgstr "" + + #: src/compat/authcompat_Options.py:149 + msgid "" +diff --git a/po/zh_TW.po b/po/zh_TW.po +index 808a7d442a105c19ca58c2cbba325ccb2b16841c..ee387ad19bbf0bd500522fa939d19655a36fc493 100644 +--- a/po/zh_TW.po ++++ b/po/zh_TW.po +@@ -1562,8 +1562,8 @@ msgid "" + msgstr "" + + #: src/compat/authcompat_Options.py:148 +-msgid "" +-msgstr "" ++msgid "" ++msgstr "" + + #: src/compat/authcompat_Options.py:149 + msgid "" +diff --git a/profiles/minimal/password-auth b/profiles/minimal/password-auth +index accd020eba3c8101ea0173b73faade109590c08f..823cc7d2dc49b529c922877b1d5a4ae355e9672b 100644 +--- a/profiles/minimal/password-auth ++++ b/profiles/minimal/password-auth +@@ -10,7 +10,7 @@ account required pam_faillock.so + account required pam_unix.so + + password requisite pam_pwquality.so +-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok ++password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok + password required pam_deny.so + + session optional pam_keyinit.so revoke +diff --git a/profiles/minimal/system-auth b/profiles/minimal/system-auth +index accd020eba3c8101ea0173b73faade109590c08f..823cc7d2dc49b529c922877b1d5a4ae355e9672b 100644 +--- a/profiles/minimal/system-auth ++++ b/profiles/minimal/system-auth +@@ -10,7 +10,7 @@ account required pam_faillock.so + account required pam_unix.so + + password requisite pam_pwquality.so +-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok ++password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok + password required pam_deny.so + + session optional pam_keyinit.so revoke +diff --git a/profiles/nis/password-auth b/profiles/nis/password-auth +index f181a58ab7792c7e1a4234e677cbb7e3d0a6548d..b567cc3af624be3627a3143e74c63dd943edacbd 100644 +--- a/profiles/nis/password-auth ++++ b/profiles/nis/password-auth +@@ -13,7 +13,7 @@ account required pam_faillock.so + account required pam_unix.so broken_shadow + + password requisite pam_pwquality.so {if not "with-nispwquality":local_users_only} +-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok nis ++password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok nis + password required pam_deny.so + + session optional pam_keyinit.so revoke +diff --git a/profiles/nis/system-auth b/profiles/nis/system-auth +index bc3f402435aafb5294dbae94096b184af51cf914..23f4238937483ffec6229a9da02da076c2966404 100644 +--- a/profiles/nis/system-auth ++++ b/profiles/nis/system-auth +@@ -14,7 +14,7 @@ account required pam_faillock.so + account required pam_unix.so broken_shadow + + password requisite pam_pwquality.so {if not "with-nispwquality":local_users_only} +-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok nis ++password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok nis + password required pam_deny.so + + session optional pam_keyinit.so revoke +diff --git a/profiles/sssd/password-auth b/profiles/sssd/password-auth +index 3e33dcc09f68055f2f87709e638005929bd577b3..c8b516da1a618326c779acfb9792c53d539fced7 100644 +--- a/profiles/sssd/password-auth ++++ b/profiles/sssd/password-auth +@@ -22,7 +22,7 @@ account [default=bad success=ok user_unknown=ignore] pam_sss.so + account required pam_permit.so + + password requisite pam_pwquality.so local_users_only +-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok ++password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok + password sufficient pam_sss.so use_authtok + password required pam_deny.so + +diff --git a/profiles/sssd/system-auth b/profiles/sssd/system-auth +index a43341120f55bad3fb07dfea1c04453d0a278329..5b99887d1c1563486121f23e7aacc96423c6365f 100644 +--- a/profiles/sssd/system-auth ++++ b/profiles/sssd/system-auth +@@ -29,7 +29,7 @@ account [default=bad success=ok user_unknown=ignore] pam_sss.so + account required pam_permit.so + + password requisite pam_pwquality.so local_users_only +-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok ++password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok + password sufficient pam_sss.so use_authtok + password required pam_deny.so + +diff --git a/profiles/winbind/password-auth b/profiles/winbind/password-auth +index 58705f3b15165c8d8bd4938889e3fb4d89c1a528..a8e5270a7b6d7221651aeb7a05c994d9f1944bba 100644 +--- a/profiles/winbind/password-auth ++++ b/profiles/winbind/password-auth +@@ -19,7 +19,7 @@ account [default=bad success=ok user_unknown=ignore] pam_winbind.so {if "wit + account required pam_permit.so + + password requisite pam_pwquality.so local_users_only +-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok ++password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok + password sufficient pam_winbind.so {if "with-krb5":krb5_auth} use_authtok + password required pam_deny.so + +diff --git a/profiles/winbind/system-auth b/profiles/winbind/system-auth +index 994c342441a0ed2738765a9fa7f6cc84f692d1d8..094eef88da26223e600849469b2d45df179bd06a 100644 +--- a/profiles/winbind/system-auth ++++ b/profiles/winbind/system-auth +@@ -20,7 +20,7 @@ account [default=bad success=ok user_unknown=ignore] pam_winbind.so {if "wit + account required pam_permit.so + + password requisite pam_pwquality.so local_users_only +-password sufficient pam_unix.so yescrypt shadow {if not "without-nullok":nullok} use_authtok ++password sufficient pam_unix.so sha512 shadow {if not "without-nullok":nullok} use_authtok + password sufficient pam_winbind.so {if "with-krb5":krb5_auth} use_authtok + password required pam_deny.so + +diff --git a/src/compat/authcompat_Options.py b/src/compat/authcompat_Options.py +index d26dedabdfb9519861076b58cddd0dd0eb04b7cb..94301462a4965d7237dbc673fedb6b36cbeac348 100644 +--- a/src/compat/authcompat_Options.py ++++ b/src/compat/authcompat_Options.py +@@ -145,7 +145,7 @@ class Options: + Option.UnsupportedSwitch("useshadow"), + Option.UnsupportedFeature("md5"), + Option.UnsupportedSwitch("usemd5"), +- Option.UnsupportedValued("passalgo", _("")), ++ Option.UnsupportedValued("passalgo", _("")), + Option.UnsupportedValued("ldaploadcacert", _("")), + Option.UnsupportedValued("smartcardmodule", _("")), + Option.UnsupportedValued("smbsecurity", _("")), +diff --git a/src/man/authselect-migration.7.adoc b/src/man/authselect-migration.7.adoc +index 3513a7e7cd3d7cc0045167e8224248c5be90ab2c..a321d97a36099387ae7314cc46b65f0c635db786 100644 +--- a/src/man/authselect-migration.7.adoc ++++ b/src/man/authselect-migration.7.adoc +@@ -91,7 +91,7 @@ configuration file for required services. + + NOTE: Authconfig options `--enableshadow` and `--passalgo=sha512` were often + used to make sure that passwords are stored in `/etc/shadow` using `sha512` +-algorithm. *The authselect profiles now use the yescrypt hashing method* and ++algorithm. *The authselect profiles now use the sha512 hashing method* and + it cannot be changed through an option (only by creating a custom profile). + You can just omit these options. + +diff --git a/src/man/po/authselect-migration.7.adoc.ca.po b/src/man/po/authselect-migration.7.adoc.ca.po +index 08b11b78b5b3aa80dc87abf7ce46840c3aa4c802..12f14d69827b7022236b5e15e792cf718a76ef63 100644 +--- a/src/man/po/authselect-migration.7.adoc.ca.po ++++ b/src/man/po/authselect-migration.7.adoc.ca.po +@@ -185,7 +185,7 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" +diff --git a/src/man/po/authselect-migration.7.adoc.cs.po b/src/man/po/authselect-migration.7.adoc.cs.po +index d11809b0c89c0c25927385c23092d09febf6a6a6..caf570bf8dd29c2a4018dc33c6a6ac8f07f88828 100644 +--- a/src/man/po/authselect-migration.7.adoc.cs.po ++++ b/src/man/po/authselect-migration.7.adoc.cs.po +@@ -242,7 +242,7 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" +diff --git a/src/man/po/authselect-migration.7.adoc.de.po b/src/man/po/authselect-migration.7.adoc.de.po +index c166a0f6b3ecaa15f6bd691092c5534a75b0ab8b..fff88c84af35494e65b6587efe78ff09d75f350f 100644 +--- a/src/man/po/authselect-migration.7.adoc.de.po ++++ b/src/man/po/authselect-migration.7.adoc.de.po +@@ -193,7 +193,7 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" +diff --git a/src/man/po/authselect-migration.7.adoc.es.po b/src/man/po/authselect-migration.7.adoc.es.po +index 8cb3584e586ef6ba922d88f3582f437cabac5290..5403cde5d4ea05c0ea720d42706b15d331c2cae2 100644 +--- a/src/man/po/authselect-migration.7.adoc.es.po ++++ b/src/man/po/authselect-migration.7.adoc.es.po +@@ -241,7 +241,7 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" +diff --git a/src/man/po/authselect-migration.7.adoc.fa.po b/src/man/po/authselect-migration.7.adoc.fa.po +index 3212410cbe63b92370ab032b90d975e6f3351af3..8ffb506d4d0f80227d739477c9e6740ce1a50aeb 100644 +--- a/src/man/po/authselect-migration.7.adoc.fa.po ++++ b/src/man/po/authselect-migration.7.adoc.fa.po +@@ -185,7 +185,7 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" +diff --git a/src/man/po/authselect-migration.7.adoc.fr.po b/src/man/po/authselect-migration.7.adoc.fr.po +index 92f688c2a6b88826de4f3dc4ac8dac0fc0373f46..567b0a25e5613172b078ce3614c6ec9a95ded539 100644 +--- a/src/man/po/authselect-migration.7.adoc.fr.po ++++ b/src/man/po/authselect-migration.7.adoc.fr.po +@@ -258,7 +258,7 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" +diff --git a/src/man/po/authselect-migration.7.adoc.hu.po b/src/man/po/authselect-migration.7.adoc.hu.po +index a058b221b3324f6ed120a05fefcd3fe46af7e08b..368476a43138b2952baad7a0691e064d452715d5 100644 +--- a/src/man/po/authselect-migration.7.adoc.hu.po ++++ b/src/man/po/authselect-migration.7.adoc.hu.po +@@ -189,7 +189,7 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" +diff --git a/src/man/po/authselect-migration.7.adoc.it.po b/src/man/po/authselect-migration.7.adoc.it.po +index 74c7fe127c6d6cbb7cf6913b6ccce5bfbf24f2ac..a1203206af368b766aea96c484be3bcb65c8d4b1 100644 +--- a/src/man/po/authselect-migration.7.adoc.it.po ++++ b/src/man/po/authselect-migration.7.adoc.it.po +@@ -185,7 +185,7 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" +diff --git a/src/man/po/authselect-migration.7.adoc.ja.po b/src/man/po/authselect-migration.7.adoc.ja.po +index 782e094c5f7c06a7d0fb340cf38d0c3b2f9a56ec..a8da7e2a23ef8f43e95df47a462bce919748ab19 100644 +--- a/src/man/po/authselect-migration.7.adoc.ja.po ++++ b/src/man/po/authselect-migration.7.adoc.ja.po +@@ -246,13 +246,13 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" + "Authconfig オプション `--enableshadow`と` --passalgo = sha512`は、パスワード" + "が `sha512`アルゴリズムを使用して` / etc / shadow`に確実に保存されるようにす" +-"るためによく使用されていました。 * authselect プロファイルはyescryptハッシュ" ++"るためによく使用されていました。 * authselect プロファイルはsha512ハッシュ" + "メソッドを使用するようになりました*。オプションを使用して変更することはできま" + "せん(カスタムプロファイルを作成する場合のみ）。 これらのオプションは省略でき" + "ます。" +diff --git a/src/man/po/authselect-migration.7.adoc.ko.po b/src/man/po/authselect-migration.7.adoc.ko.po +index 5b36c536524e5b35cb9334af35e657f24fd903b9..4bb4256dda532f870b644e856704060bc35c6110 100644 +--- a/src/man/po/authselect-migration.7.adoc.ko.po ++++ b/src/man/po/authselect-migration.7.adoc.ko.po +@@ -248,13 +248,13 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" + "Authconfig 선택 `--enableshadow`와 `--passalgo=sah512`는 비밀번호는 `sha512` " + "알고리즘을 사용하여 `/etc/shadow`에서 저장되어지도록 자주 사용되곤 합니다. " +-"*authselect 프로파일은 이제 yescrypt 해쉬 방법을 사용합니다* 그리고 이는 선택" ++"*authselect 프로파일은 이제 sha512 해쉬 방법을 사용합니다* 그리고 이는 선택" + "(사용자 정의 프로파일 생성에서만)을 통해 변경 될 수 없습니다. 당신은 다만 이" + "들 옵션을 생략 할 수 있습니다." + +diff --git a/src/man/po/authselect-migration.7.adoc.nl.po b/src/man/po/authselect-migration.7.adoc.nl.po +index 691355231e8b425959738ce5b85112d7e7a69999..365b80858f2ef2395ca0cd80cc39d143810cdb9f 100644 +--- a/src/man/po/authselect-migration.7.adoc.nl.po ++++ b/src/man/po/authselect-migration.7.adoc.nl.po +@@ -253,7 +253,7 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" +diff --git a/src/man/po/authselect-migration.7.adoc.pl.po b/src/man/po/authselect-migration.7.adoc.pl.po +index e0e629a8dda40061e2c9d4a17554c848df1e341a..d229fb7e2fd5654682b2fdac1409746606026e02 100644 +--- a/src/man/po/authselect-migration.7.adoc.pl.po ++++ b/src/man/po/authselect-migration.7.adoc.pl.po +@@ -191,7 +191,7 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" +diff --git a/src/man/po/authselect-migration.7.adoc.pot b/src/man/po/authselect-migration.7.adoc.pot +index c35b730bd1a90533ba0c75365e2408a94c3809a9..bed94984e506d2fe73cbaf8c5d1116ff762612d9 100644 +--- a/src/man/po/authselect-migration.7.adoc.pot ++++ b/src/man/po/authselect-migration.7.adoc.pot +@@ -188,7 +188,7 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" +diff --git a/src/man/po/authselect-migration.7.adoc.pt.po b/src/man/po/authselect-migration.7.adoc.pt.po +index 982c6292b1defd4a9ed6ca30d1dea2d7cf2a65a5..e67478b75a0d7f333f44a0e6db20607e80dbb93a 100644 +--- a/src/man/po/authselect-migration.7.adoc.pt.po ++++ b/src/man/po/authselect-migration.7.adoc.pt.po +@@ -192,7 +192,7 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" +diff --git a/src/man/po/authselect-migration.7.adoc.pt_BR.po b/src/man/po/authselect-migration.7.adoc.pt_BR.po +index 51584e7df2ba411cbbc8dd27cab108b7ab157474..a63b8fb623fd06c83fc920405ed6e45cb93d6889 100644 +--- a/src/man/po/authselect-migration.7.adoc.pt_BR.po ++++ b/src/man/po/authselect-migration.7.adoc.pt_BR.po +@@ -198,7 +198,7 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" +diff --git a/src/man/po/authselect-migration.7.adoc.ru.po b/src/man/po/authselect-migration.7.adoc.ru.po +index 469f4639230a977eebe5261f2b6aea9470db33c5..fd0eb1ad827962c2674a6cdda4c479d805177af0 100644 +--- a/src/man/po/authselect-migration.7.adoc.ru.po ++++ b/src/man/po/authselect-migration.7.adoc.ru.po +@@ -256,14 +256,14 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" + "Параметры Authconfig `--enableshadow` и`--passalgo=sha512` часто " + "использовались, чтобы гарантировать хранение паролей в `/ etc / shadow` с " + "использованием алгоритма`sha512`. *Профили authselect теперь используют " +-"метод хеширования yescrypt*, и его нельзя изменить с помощью параметра " ++"метод хеширования sha512*, и его нельзя изменить с помощью параметра " + "(только путем создания пользовательского профиля). Вы можете просто опустить " + "эти параметры." + +diff --git a/src/man/po/authselect-migration.7.adoc.si.po b/src/man/po/authselect-migration.7.adoc.si.po +index 0dbdb2c6357cbd2172c25eee157feadd57b0b9ae..5f88382d7aa4c92908b8b6821d75d085ab2a3358 100644 +--- a/src/man/po/authselect-migration.7.adoc.si.po ++++ b/src/man/po/authselect-migration.7.adoc.si.po +@@ -188,7 +188,7 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" +diff --git a/src/man/po/authselect-migration.7.adoc.sv.po b/src/man/po/authselect-migration.7.adoc.sv.po +index b3087eac46223df0ad9115eafccc426b34ebac99..397e901892f9df42ab2f7721f988427f62198e42 100644 +--- a/src/man/po/authselect-migration.7.adoc.sv.po ++++ b/src/man/po/authselect-migration.7.adoc.sv.po +@@ -253,13 +253,13 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" + "Authconfig-flaggorna ”--enableshadow” och ”--passalgo=sha512” användes ofta " + "för att säkerställa att lösenord lagras i ”/etc/shadow” med algoritmen " +-"”sha512”. *Authselect-profilerna använder nu hashningsmetoden yescrypt* och " ++"”sha512”. *Authselect-profilerna använder nu hashningsmetoden sha512* och " + "det kan inte ändras genom någon flagga (endast genom att skapa en anpassad " + "profil). Du kan helt enkelt utelämna dessa flaggor." + +diff --git a/src/man/po/authselect-migration.7.adoc.tr.po b/src/man/po/authselect-migration.7.adoc.tr.po +index b68b5df326df7c3164c53204079238778d52faf5..399ea1f0a9df659745919d36c38bd885431e0bca 100644 +--- a/src/man/po/authselect-migration.7.adoc.tr.po ++++ b/src/man/po/authselect-migration.7.adoc.tr.po +@@ -257,13 +257,13 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" + "`--enableshadow` ve `--passalgo=sha512` authconfig seçenekleri, parolaların " + "`/etc/shadow` dosyasında `sha512` algoritması kullanılarak saklandığından " +-"emin olmak için sıklıkla kullanılırdı. *Authselect profilleri artık yescrypt " ++"emin olmak için sıklıkla kullanılırdı. *Authselect profilleri artık sha512 " + "şifreleme yöntemini kullanıyor* ve bir seçenek aracılığıyla değiştirilemez " + "(yalnızca özel bir profil oluşturarak değiştirilebilir). Bu seçenekleri " + "yalnızca atlayabilirsiniz." +diff --git a/src/man/po/authselect-migration.7.adoc.uk.po b/src/man/po/authselect-migration.7.adoc.uk.po +index 5a1b8a3aa5e8ce8dfbe40b0545187878dea09dbd..98d9841724a90e207818ea179e5870fdf870ca40 100644 +--- a/src/man/po/authselect-migration.7.adoc.uk.po ++++ b/src/man/po/authselect-migration.7.adoc.uk.po +@@ -257,14 +257,14 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" + "Параметри authconfig `--enableshadow` і `--passalgo=sha512`часто " + "використовували для забезпечення зберігання паролів у `/etc/shadow` з " + "використанням алгоритму `sha512`. *У поточних версіях профілів authselect " +-"використано метод хешування yescrypt*, його не можна змінити якимось " ++"використано метод хешування sha512*, його не можна змінити якимось " + "параметром (лише за допомогою нетипового профілю). Ви можете просто не " + "використовувати ці параметри." + +diff --git a/src/man/po/authselect-migration.7.adoc.zh_CN.po b/src/man/po/authselect-migration.7.adoc.zh_CN.po +index c3c8b9a0185094d91a968b8049f425b4a80c14d5..a0ebf52d93689e866f6258490e61d6cf4c8bfeb1 100644 +--- a/src/man/po/authselect-migration.7.adoc.zh_CN.po ++++ b/src/man/po/authselect-migration.7.adoc.zh_CN.po +@@ -189,7 +189,7 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" +diff --git a/src/man/po/authselect-migration.7.adoc.zh_TW.po b/src/man/po/authselect-migration.7.adoc.zh_TW.po +index 43ab062724a5e7fb86c17384f4b0dde32a5053c5..e7112be1df8ad569e1c90a8c7a0744a800283347 100644 +--- a/src/man/po/authselect-migration.7.adoc.zh_TW.po ++++ b/src/man/po/authselect-migration.7.adoc.zh_TW.po +@@ -189,7 +189,7 @@ msgstr "" + msgid "" + "Authconfig options `--enableshadow` and `--passalgo=sha512` were often used " + "to make sure that passwords are stored in `/etc/shadow` using `sha512` " +-"algorithm. *The authselect profiles now use the yescrypt hashing method* and " ++"algorithm. *The authselect profiles now use the sha512 hashing method* and " + "it cannot be changed through an option (only by creating a custom profile). " + "You can just omit these options." + msgstr "" +-- +2.38.1 + diff --git a/SPECS/authselect.spec b/SPECS/authselect.spec index 6cb9266..a8d04cf 100644 --- a/SPECS/authselect.spec +++ b/SPECS/authselect.spec @@ -3,7 +3,7 @@ Name: authselect Version: 1.2.5 -Release: 1%{?dist} +Release: 2%{?dist} Summary: Configures authentication and identity sources from supported profiles URL: https://github.com/authselect/authselect @@ -16,6 +16,7 @@ Source0: %{url}/archive/%{version}/%{name}-%{version}.tar.gz Patch0901: 0901-rhel8-remove-mention-of-Fedora-Change-page-in-compat.patch Patch0902: 0902-rhel8-remove-ecryptfs-support.patch Patch0903: 0903-rhel8-Revert-profiles-add-support-for-resolved.patch +Patch0904: 0904-rhel8-Revert-yescrypt.patch BuildRequires: autoconf BuildRequires: automake @@ -292,6 +293,9 @@ exit 0 exit 0 %changelog +* Wed Dec 7 2022 Pavel Březina - 1.2.5-2 +- Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151229) + * Thu May 5 2022 Pavel Březina - 1.2.5-1 - Rebase to 1.2.5 (RHBZ #2080238) - sssd profile with-smartcard no longer prevents local users from accessing cron (RHBZ #2070325)