The two encription methods i have seen are DES and MD5, they are
easy to recognize:

MD5:     $1$8 chars$ 22 chars
DES:     13 chars

in MD5 $1$ is always present, the 8 char string that folows is
the salt and the last 22 chars is the encrypted password.

For DES the first two char is the salt and the last 11 is the
encrypted password.

and if both systems use the same encryption, just copying password
files should work fine.

hope it helps

raymundo

nate wrote:

Bruno Negrao said:

Hi all, I have a redhat 6.0 running a radiusd server to authenticate my
RAS dialin users.
I'll deactivate this machine.

So, I need to migrate this users to a redhat 8.0 machine, already running
with Qmail + Vpopmail.

How to migrate all these dialin users from one machine to the other? If I
cut and paste the cryptographic password from the /etc/shadow file, would
it effectively copy the password?

yes it will, I've done this many times. This will only work if both systems
are using the same encryption type. The most common options are hash and
MD5. The "format" of the password is significantly different between the
2 so it should be obvious whether or not both systems are using the same.
MD5 typically has a lot of upper case characters and is much longer then
crypt, maybe 20-30 characters, crypt is very short(maybe 10 tops). And while
I haven't tried this it may work, if you need to revert from MD5 to
crypt grep the files in /etc/pam.d and remove the 'md5' from them, on my
redhat 7.3 system the only file that has it is system-auth, also looks like
there is an /etc/sysconfig/authconfig file that would need to be changed too.

nate


--
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to