[GH-ISSUE #345] Support SCRYPT/Type 9 hashed password #86

New issue

Closed

opened 2026-05-07 00:18:37 +02:00 by BreizhHardware · 2 comments

BreizhHardware commented

2026-05-07 00:18:37 +02:00

Owner

Originally created by @ldec on GitHub (Oct 21, 2022).
Original GitHub issue: https://github.com/ovh/the-bastion/issues/345

Hello,

When creating and listing hashed passwords, would it be possible to display a new entry using the SCRYPT hashing algorithm, also known as Type 9 under Cisco IOS/IOS-XE systems ?

Thanks.

Originally created by @ldec on GitHub (Oct 21, 2022). Original GitHub issue: https://github.com/ovh/the-bastion/issues/345 Hello, When creating and listing hashed passwords, would it be possible to display a new entry using the SCRYPT hashing algorithm, also known as Type 9 under Cisco IOS/IOS-XE systems ? Thanks.

BreizhHardware

2026-05-07 00:18:37 +02:00

closed this issue
added the
feature
label

BreizhHardware commented

2026-05-07 00:18:38 +02:00

Author

Owner

@speed47 commented on GitHub (Oct 28, 2022):

Sure, that might be tricky do to in pure Perl, but we can always use an helper if needs be.

@speed47 commented on GitHub (Oct 28, 2022): Sure, that might be tricky do to in pure Perl, but we can always use an helper if needs be.

BreizhHardware commented

2026-05-07 00:18:39 +02:00

Author

Owner

@speed47 commented on GitHub (Dec 13, 2024):

Feature released:

testuser@testbastion(master)> selfGeneratePassword --do-it
╭──f41c80c7f47b──────────────────────────────────────the-bastion-3.18.00-ovh0───
│ ▶ generating a new egress password for your account
├───────────────────────────────────────────────────────────────────────────────
│ Generated a new password of length 16 for your account, testuser, hashes follow:
│ 
│    md5crypt: $1$uqxc$E8GCAv5kVj0ruyAgHzvX5.
│ sha256crypt: $5$FBaR1wzg$u0n0j2M57H94y9.usYJGe.33ugUjDe1qt5AsuuLcBQD
│ sha512crypt: $6$0nh649XN$Iz/Xx3.9iKFuB7YYq8ioMBRGb.tzxVE5g0v7aTlLiLtjIfSvyw.FrameYmAkMHO/CO3LYCUa..iG0lgALfvHr1
│       type8: $8$5YLd2y8ZGi8wJm$dKicYIDMAXyxzPOLqIT5rauQ9Bxa2RhDCD8GFd1Gng2
│       type9: $9$RtDEURzZEiR0yY$qHnL8hWILb7/ogDvXSxx0BRQjl7uEM6PhCjeJP71L4.
│ 
│ This new password will now be used by default.
╰─────────────────────────────────────────────────────</selfGeneratePassword>───

@speed47 commented on GitHub (Dec 13, 2024): Feature released: ``` testuser@testbastion(master)> selfGeneratePassword --do-it ╭──f41c80c7f47b──────────────────────────────────────the-bastion-3.18.00-ovh0─── │ ▶ generating a new egress password for your account ├─────────────────────────────────────────────────────────────────────────────── │ Generated a new password of length 16 for your account, testuser, hashes follow: │ │ md5crypt: $1$uqxc$E8GCAv5kVj0ruyAgHzvX5. │ sha256crypt: $5$FBaR1wzg$u0n0j2M57H94y9.usYJGe.33ugUjDe1qt5AsuuLcBQD │ sha512crypt: $6$0nh649XN$Iz/Xx3.9iKFuB7YYq8ioMBRGb.tzxVE5g0v7aTlLiLtjIfSvyw.FrameYmAkMHO/CO3LYCUa..iG0lgALfvHr1 │ type8: $8$5YLd2y8ZGi8wJm$dKicYIDMAXyxzPOLqIT5rauQ9Bxa2RhDCD8GFd1Gng2 │ type9: $9$RtDEURzZEiR0yY$qHnL8hWILb7/ogDvXSxx0BRQjl7uEM6PhCjeJP71L4. │ │ This new password will now be used by default. ╰─────────────────────────────────────────────────────</selfGeneratePassword>─── ```

BreizhHardware referenced this issue

2026-05-07 00:19:53 +02:00

[PR #88] [MERGED] fix: sudogen: don't check for account/groups validity when deleting #226