useradd (-p) is not encrypting /etc/shadow

linx444 · 03-18-2013, 11:18 AM

Hi

I am adding a user to my linux server but when I do the password is not using crypt to encrypt password for /etc/shadow. Instead it adds it in as clear text. I have looked at the login.defs, not sure why useradd is not encrypting password :/ any pointers would be appreciated.

# Use SHA512 to encrypt password.
ENCRYPT_METHOD SHA512

MD5_CRYPT_ENAB no

Linx444

kbp · 03-18-2013, 07:40 PM

Using '-p' expects the encrypted password not plaintext .. if you're doing this in a script try:

Code:

useradd <user>
echo '<password>' | passwd --stdin <user>

linx444 · 03-19-2013, 05:55 AM

Hi kbp

Many thanks for the update and help. For some strange reason I was under the impression that it also encrypted the password. Ok cool, will try the above in the script with the variable.

Linx444

chrism01 · 03-19-2013, 08:35 PM

Actually, the man page does specify encrypted

Quote:

-p, --password PASSWORD
The encrypted password, as returned by crypt(3). The default is to disable the password.

Note: This option is not recommended because the password (or encrypted password) will be visible by users listing the processes.

Note the warning there ... which also applies to the --stdin method...

For bulk creation consider http://linux.die.net/man/8/newusers

linx444 · 03-20-2013, 11:10 AM

I thought it usually did, I wander what setting has changed for this part to be disabled! Puzzling !

chrism01 · 03-20-2013, 07:53 PM

If you mean useradd, its always been that way; lots of people get caught by it