mirror of
https://git.linuxfromscratch.org/lfs.git
synced 2025-03-05 22:04:48 +00:00
Upgrade to shadow-4.0.17
git-svn-id: http://svn.linuxfromscratch.org/LFS/trunk/BOOK@7736 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689
This commit is contained in:
Matthew Burgess
parent
cec2c5a87d
commit
040ba8e839
@ -39,6 +39,9 @@
|
||||
<listitem>
|
||||
<para>2006-07-31</para>
|
||||
<itemizedlist>
|
||||
<listitem>
|
||||
<para>[matthew] - Upgrade to shadow-4.0.17.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>[matthew] - Upgrade to procps-3.2.7.</para>
|
||||
</listitem>
|
||||
|
||||
@ -157,9 +157,9 @@
|
||||
<!--<listitem>
|
||||
<para>Sed &sed-version;</para>
|
||||
</listitem>-->
|
||||
<!--<listitem>
|
||||
<listitem>
|
||||
<para>Shadow &shadow-version;</para>
|
||||
</listitem>-->
|
||||
</listitem>
|
||||
<!--<listitem>
|
||||
<para>Sysklogd &sysklogd-version;</para>
|
||||
</listitem>-->
|
||||
|
||||
@ -45,7 +45,7 @@
|
||||
|
||||
<para>Prepare Shadow for compilation:</para>
|
||||
|
||||
<screen><userinput>./configure --libdir=/lib --enable-shared --without-selinux</userinput></screen>
|
||||
<screen><userinput>./configure --libdir=/lib --sysconfdir=/etc --enable-shared --without-selinux</userinput></screen>
|
||||
|
||||
<variablelist>
|
||||
<title>The meaning of the configure options:</title>
|
||||
@ -88,6 +88,23 @@ convert-mans UTF-8 EUC-JP man/ja/*.?
|
||||
convert-mans UTF-8 KOI8-R man/ru/*.?
|
||||
convert-mans UTF-8 ISO-8859-9 man/tr/*.?</userinput></screen>
|
||||
|
||||
<para id="shadow-login_defs">Instead of using the default
|
||||
<emphasis>crypt</emphasis> method, use the more secure
|
||||
<emphasis>MD5</emphasis> method of password encryption, which also allows
|
||||
passwords longer than 8 characters. It is also necessary to change the
|
||||
obsolete <filename class="directory">/var/spool/mail</filename> location
|
||||
for user mailboxes that Shadow uses by default to the <filename
|
||||
class="directory">/var/mail</filename> location used currently.</para>
|
||||
|
||||
<screen><userinput>sed -i -e 's@#MD5_CRYPT_ENAB.no@MD5_CRYPT_ENAB yes@' \
|
||||
-e 's@/var/spool/mail@/var/mail@' etc/login.defs</userinput></screen>
|
||||
|
||||
<note>
|
||||
<para>If you built Shadow with Cracklib support, run the following:</para>
|
||||
|
||||
<screen role="nodump"><userinput>sed -i 's@DICTPATH.*@DICTPATH\t/lib/cracklib/pw_dict@' etc/login.defs</userinput></screen>
|
||||
</note>
|
||||
|
||||
<para>Compile the package:</para>
|
||||
|
||||
<screen><userinput>make</userinput></screen>
|
||||
@ -98,44 +115,6 @@ convert-mans UTF-8 ISO-8859-9 man/tr/*.?</userinput></screen>
|
||||
|
||||
<screen><userinput>make install</userinput></screen>
|
||||
|
||||
<para id="shadow-limits-login_access">Shadow uses two files to configure
|
||||
authentication settings for the system. Install these two configuration
|
||||
files:</para>
|
||||
|
||||
<indexterm zone="shadow-limits-login_access">
|
||||
<primary sortas="e-/etc/limits">/etc/limits</primary>
|
||||
</indexterm>
|
||||
|
||||
<indexterm zone="shadow-limits-login_access">
|
||||
<primary sortas="e-/etc/login.access">/etc/login.access</primary>
|
||||
</indexterm>
|
||||
|
||||
<screen><userinput>cp -v etc/{limits,login.access} /etc</userinput></screen>
|
||||
|
||||
<para id="shadow-login_defs">Instead of using the default
|
||||
<emphasis>crypt</emphasis> method, use the more secure
|
||||
<emphasis>MD5</emphasis> method of password encryption, which also allows
|
||||
passwords longer than 8 characters. It is also necessary to change the
|
||||
obsolete <filename class="directory">/var/spool/mail</filename> location
|
||||
for user mailboxes that Shadow uses by default to the <filename
|
||||
class="directory">/var/mail</filename> location used currently. Both of
|
||||
these can be accomplished by changing the relevant configuration file
|
||||
while copying it to its destination:</para>
|
||||
|
||||
<indexterm zone="shadow-login_defs">
|
||||
<primary sortas="e-/etc/login.defs">/etc/login.defs</primary>
|
||||
</indexterm>
|
||||
|
||||
<screen><userinput>sed -e's@#MD5_CRYPT_ENAB.no@MD5_CRYPT_ENAB yes@' \
|
||||
-e 's@/var/spool/mail@/var/mail@' \
|
||||
etc/login.defs > /etc/login.defs</userinput></screen>
|
||||
|
||||
<note>
|
||||
<para>If you built Shadow with Cracklib support, run the following:</para>
|
||||
|
||||
<screen role="nodump"><userinput>sed -i 's@DICTPATH.*@DICTPATH\t/lib/cracklib/pw_dict@' /etc/login.defs</userinput></screen>
|
||||
</note>
|
||||
|
||||
<para>Move a misplaced program to its proper location:</para>
|
||||
|
||||
<screen><userinput>mv -v /usr/bin/passwd /bin</userinput></screen>
|
||||
@ -146,13 +125,6 @@ convert-mans UTF-8 ISO-8859-9 man/tr/*.?</userinput></screen>
|
||||
rm -v /lib/libshadow.so
|
||||
ln -sfv ../../lib/libshadow.so.0 /usr/lib/libshadow.so</userinput></screen>
|
||||
|
||||
<para>The <parameter>-D</parameter> option of the
|
||||
<command>useradd</command> program requires the <filename
|
||||
class="directory">/etc/default</filename> directory for it to work
|
||||
properly:</para>
|
||||
|
||||
<screen><userinput>mkdir -v /etc/default</userinput></screen>
|
||||
|
||||
</sect2>
|
||||
|
||||
<sect2 id="conf-shadow" role="configuration">
|
||||
|
||||
@ -430,12 +430,12 @@
|
||||
<!ENTITY sed-ch6-du "6.4 MB">
|
||||
<!ENTITY sed-ch6-sbu "0.1 SBU">
|
||||
|
||||
<!ENTITY shadow-version "4.0.15">
|
||||
<!ENTITY shadow-size "1,265 KB">
|
||||
<!ENTITY shadow-version "4.0.17">
|
||||
<!ENTITY shadow-size "1,461 KB">
|
||||
<!ENTITY shadow-url "ftp://ftp.pld.org.pl/software/shadow/shadow-&shadow-version;.tar.bz2">
|
||||
<!ENTITY shadow-md5 "a0452fa989f8ba45023cc5a08136568e">
|
||||
<!ENTITY shadow-home " ">
|
||||
<!ENTITY shadow-ch6-du "18.6 MB">
|
||||
<!ENTITY shadow-ch6-du "20.7 MB">
|
||||
<!ENTITY shadow-ch6-sbu "0.3 SBU">
|
||||
|
||||
<!ENTITY sysklogd-version "1.4.1">
|
||||
|
||||
Loading…
Reference in New Issue
Block a user