PASSWD.CONF(5)            OpenBSD Programmer's Manual           PASSWD.CONF(5)

NAME
     passwd.conf - format of the password configuration file

DESCRIPTION
     The /etc/passwd.conf file, consisting of ``stanzas'', describes the con-
     figuration of the password cipher used to encrypt local or YP passwords.

     There are default, user and group specific stanzas.  If no user or group
     stanza to a specific option is available, the default stanza is used.

     To differentiate between user and group stanzas, groups are prefixed with
     a single dot (`.').

     Some fields and their possible values that can appear in this file are:

     localcipher  The cipher to use for local passwords.  Possible values are:
                  ``old'', ``newsalt,<rounds>'', ``md5'', and
                  ``blowfish,<rounds>''. For ``newsalt'' the value of rounds
                  is a 24-bit integer with a minimum of 7250 rounds.  For
                  ``blowfish'' the value can be between 4 and 31.  It speci-
                  fies the base 2 logarithm of the number of rounds.

     ypcipher     The cipher to use for YP passwords.  The possible values are
                  the same as for localcipher.

     pwdcheck     An external program that checks the quality of the password.
                  The password is passed to the program on stdin. An exit code
                  of 0 indicates that the quality of the password is suffi-
                  cient, an exit code of 1 signals that the password failed
                  the check.

     pwdtries     The number of times passwd(1) enforces a check on the pass-
                  word.  If it is 0, the new password will only be accepted if
                  it passes the password quality check.  The default is 3.

     To retrieve information from this file use pw_getconf(3).

EXAMPLES
     Use blowfish as the local cipher; add some more rounds for root and wheel
     members.  The old Unix crypt is used as YP cipher:

      default:
           localcipher = blowfish,4
           ypcipher = old

      root:
           localcipher = blowfish,7

      .wheel:
           localcipher = blowfish,5

FILES
     /etc/passwd.conf

SEE ALSO
     passwd(1), pw_getconf(3), passwd(5)

OpenBSD 2.9                    February 24, 1997                             1
