使用 ruby 生成格式为/etc/shadow 的 SHA512 crypt-style hashes?

本文介绍了使用 ruby 生成格式为/etc/shadow 的 SHA512 crypt-style hashes?的处理方法，对大家解决问题具有一定的参考价值

问题描述

I want to generate SHA512 hashed passwords for inclusion directly into a /etc/shadow file for use with chef's user resource. Normally I'd go to the stdlib's Digest library for this, but it doesn't generate the hash in the right format:

ruby-1.9.2-p136 :001 > require 'digest/sha2'
 => true 
ruby-1.9.2-p136 :002 > Digest::SHA512.hexdigest('test')
 => "ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff"

The format that the shadow file wants is:

$6$/ShPQNXV$HJnibH9lw01qtYqyJQiBf81ggJB2BGUvKA7.kv39HGCeE.gD4C/SS9zAf5BrwOv3VJzvl99FpHYli9E8jykRC0

Things I've looked at:

The openssl "dgst" module returns the same format as .hexdigest, and its "passwd" module doesn't include SHA512 support.
String#crypt, but that does not support SHA512. (edit: this is only the case on OSX - modern Linux distros will work if you specify "$6$somesalt" as the salt)
ruby-crypt gem, but it does not support SHA512

For comparison, something that does return the proper format is PHP's crypt, but I'd rather not have to exec out to PHP for something that should be simple.

解决方案

After further research:

The mkpasswd command, which on debian is in the whois package (weird):

mkpasswd -m sha-512
String#crypt does actually call the platform's native crypt() call, however OSX (up to 10.6) does not include support for alternate ciphers. "password".crypt('$6$somesalt') will work on Linux platforms.

这篇关于使用 ruby 生成格式为/etc/shadow 的 SHA512 crypt-style hashes?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，WP2

使用 ruby 生成格式为/etc/shadow 的 SHA512 crypt-style hashes?

问题描述

在SketchUp中需要rubygems

用rubyapi计算Sketchup中阴影面积的问题

如何在rubyonrails应用程序中集成谷歌SketchUp

保存从Sketchup模型中的非内置ruby类创建的实例

如何在sketchup中使用ruby知道两个组件相互接触？

如何使用 selenium-webdriver (ruby) 使用相同的浏览器窗口进行自动化测试?