Skip to Main Content
IBM Power Ideas Portal


This portal is to open public enhancement requests against IBM Power Systems products, including IBM i. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Status Not under consideration
Workspace AIX
Created by Guest
Created on Nov 23, 2017

Stanza names for pwmod.sha512

The stanzas that pwmod.sha512 add to /etc/security/pwdalg.cfg are not descriptive of password algorithm that is being used as they are just 5 and 6.

Idea priority Low
  • Guest
    Reply
    |
    Nov 30, 2017

    Hi, the stanzas created for the Linux compatible hash are as follows:

    6:
    lpa_module = /usr/lib/security/lsha
    lpa_options = algorithm=sha512,prefix_dollar

    5:
    lpa_module = /usr/lib/security/lsha
    lpa_options = algorithm=sha256,prefix_dollar

    Note the stanza name "5" and "6" are consistent with choice of linux.
    Since the stanza name is included as a part of password hash,
    to be compatible with Linux, we must use the same name (as used in Linux).

    if you don't care about the compatibility with Linux,
    only want to elect the Drepper hash,
    you may choose a different stanza name, e.g.,

    lsha512:
    lpa_module = /usr/lib/security/lsha
    lpa_options = algorithm=sha512,prefix_dollar

    Then you can use:

    chsec -f /etc/security/login.cfg -s usw -a pwd_algorithm=lsha512