It’s been a while but i’m picking up on the nethserver project; NICE WORK with ns7beta 2 !
Trying to understand the SSSD/pam/posix-/shadowaccounts, i have a look with openldap as account provider. Doing so i’ve noticed passwords are stored in plain text in the secure log after a user is created.
from secure log:
... ns7b2 sudo: srvmgr : TTY=unknown ; PWD=/usr/share/nethesis/nethserver-manager ; USER=root ; COMMAND=/sbin/e-smith/validate password-strength Users <PasswInPlainText>
Probably my fault complaining about that Crypt-Cracklib
Nevertheless this does the secure log no right…
I have some other questions, but first i going to search the forum or try to figure them out myself.