On Sat, Aug 1, 2015, at 01:34 AM, Sitsofe Wheeler wrote:
The regular Fedora 22 default for password encryption seems to be
SHA512 but I couldn't turn anything up as to why cloud images had made
this change. Could some explain why MD5 is used?
This was just fixed:
https://git.fedorahosted.org/cgit/spin-kickstarts.git/commit/?id=9f254062...
There was nothing intentional here, but what we're fighting is the legacy defaults
for
auth in Anaconda, requiring every kickstart user to override them to enable shadow
passwords
and sha512.
Confusingly, Anaconda has defaults that apply *only* when used interactively:
https://github.com/rhinstaller/anaconda/blob/master/data/interactive-defa...
Currently then, media installs have stronger defaults than kickstart, unless overridden
explicitly by kickstart.