2. Linux From Scratch 12.3
3. chapter08_shadow
4. Search

Filters

• Untranslated strings • state:empty
• Unfinished strings • state:<translated
• Translated strings • state:>=translated
• Strings marked for edit • state:needs-editing
• Strings with suggestions • has:suggestion
• Strings with variants • has:variant
• Strings with screenshots • has:screenshot
• Strings with labels • has:label
• Strings with context • has:context
• Unfinished strings without suggestions • state:<translated AND NOT has:suggestion
• Strings with comments • has:comment
• Strings with any failing checks • has:check
• Approved strings • state:approved
• Strings waiting for review • state:translated

state:<translated

Position and priority

• Position and priority
• Position
• Priority
• Labels
• Source string
• Target string
• String age
• Last updated
• Number of words
• Number of comments
• Number of failing checks
• Key
• String location

	Translation	Source string	Target string
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	If you've installed Linux-PAM, you should follow <ulink url='&blfs-book;postlfs/shadow.html'>the BLFS instruction</ulink> instead of this page to build (or, rebuild or upgrade) shadow.
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	If you would like to enforce the use of strong passwords, <ulink url='&blfs-book;postlfs/linux-pam.html'>install and configure Linux-PAM</ulink> first. Then <ulink url='&blfs-book;postlfs/shadow.html'>install and configure shadow with the PAM support</ulink>. Finally <ulink url='&blfs-book;postlfs/libpwquality.html'>install libpwquality and configure PAM to use it</ulink>.
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	Instead of using the default <emphasis>crypt</emphasis> method, use the much more secure <emphasis>YESCRYPT</emphasis> method of password encryption, which also allows passwords longer than 8 characters. It is also necessary to change the obsolete <filename class="directory">/var/spool/mail</filename> location for user mailboxes that Shadow uses by default to the <filename class="directory">/var/mail</filename> location used currently. And, remove <filename class="directory">/bin</filename> and <filename class="directory">/sbin</filename> from the <envar>PATH</envar>, since they are simply symlinks to their counterparts in <filename class="directory">/usr</filename>.	不使用默认的 <emphasis>crypt</emphasis> 加密方法，使用更安全的 <emphasis>SHA-512</emphasis> 方法加密密码，该方法也允许长度超过 8 个字符的密码。另外，还需要把过时的用户邮箱位置 <filename class="directory">/var/spool/mail</filename> 改为当前普遍使用的 <filename class="directory">/var/mail</filename> 目录：
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	Including <filename class="directory">/bin</filename> and/or <filename class="directory">/sbin</filename> in the <envar>PATH</envar> variable may cause some BLFS packages fail to build, so don't do that in the <filename>.bashrc</filename> file or anywhere else.
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	<userinput remap="pre">sed -e 's:#ENCRYPT_METHOD DES:ENCRYPT_METHOD YESCRYPT:' \ -e 's:/var/spool/mail:/var/mail:' \ -e '/PATH=/{s@/sbin:@@;s@/bin:@@}' \ -i etc/login.defs</userinput>	<userinput remap="pre">sed -e 's:#ENCRYPT_METHOD DES:ENCRYPT_METHOD SHA512:' \ -e 's:/var/spool/mail:/var/mail:' \ -i etc/login.defs</userinput>
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	<userinput remap="configure">touch /usr/bin/passwd ./configure --sysconfdir=/etc \ --disable-static \ --with-{b,yes}crypt \ --without-libbsd \ --with-group-name-max-length=32</userinput>	<userinput remap="configure">touch /usr/bin/passwd ./configure --sysconfdir=/etc \ --with-group-name-max-length=32</userinput>
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	The meaning of the new configuration options:	配置选项的含义：
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	The file <filename>/usr/bin/passwd</filename> needs to exist because its location is hardcoded in some programs; if it does not already exist, the installation script will create it in the wrong place.	我们需要保证 <filename>/usr/bin/passwd</filename> 存在，因为它的位置会被硬编码到一些程序中，如果它不存在的话，会使用错误的默认位置。
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	<parameter>--with-{b,yes}crypt</parameter>	<parameter>--with-group-name-max-length=32</parameter>
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	The shell expands this to two switches, <parameter>--with-bcrypt</parameter> and <parameter>--with-yescrypt</parameter>. They allow shadow to use the Bcrypt and Yescrypt algorithms implemented by <application>Libxcrypt</application> for hashing passwords. These algorithms are more secure (in particular, much more resistant to GPU-based attacks) than the traditional SHA algorithms.
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	The longest permissible user name is 32 characters. Make the maximum length of a group name the same.	最长用户名可以有 32 个字符。设定组名称最大长度为相同值。
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	<parameter>--without-libbsd</parameter>	<parameter>--with-group-name-max-length=32</parameter>
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	Do not use the readpassphrase function from libbsd which is not in LFS. Use the internal copy instead.
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	<userinput remap="install">make exec_prefix=/usr install make -C man install-man</userinput>	<userinput remap="install">make install</userinput>
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	This package contains utilities to add, modify, and delete users and groups; set and change their passwords; and perform other administrative tasks. For a full explanation of what <emphasis>password shadowing</emphasis> means, see the <filename>doc/HOWTO</filename> file within the unpacked source tree. If you use Shadow support, keep in mind that programs which need to verify passwords (display managers, FTP programs, pop3 daemons, etc.) must be Shadow-compliant. That is, they must be able to work with shadowed passwords.	该软件包包含用于添加、修改、删除用户和组，设定和修改它们的密码，以及进行其他管理任务的工具。如果希望查阅关于 <emphasis>password shadowing</emphasis> 的详细解释，阅读解压得到源代码目录树中的 <filename>doc/HOWTO</filename> 文件。如果使用 Shadow 支持，请注意所有需要验证密码的程序 (如显示管理器、FTP 程序、pop3 守护进程等) 都必须和 Shadow 兼容。换句话说，它们必须能使用 Shadow 加密的密码。
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	Shadow's default configuration for the <command>useradd</command> utility needs some explanation. First, the default action for the <command>useradd</command> utility is to create the user and a group with the same name as the user. By default the user ID (UID) and group ID (GID) numbers will begin at 1000. This means if you don't pass extra parameters to <command>useradd</command>, each user will be a member of a unique group on the system. If this behavior is undesirable, you'll need to pass either the <parameter>-g</parameter> or <parameter>-N</parameter> parameter to <command>useradd</command>, or else change the setting of <parameter>USERGROUPS_ENAB</parameter> in <filename>/etc/login.defs</filename>. See <ulink role='man' url='&man;useradd.8'>useradd(8)</ulink> for more information.	Shadow 附带的 <command>useradd</command> 配置文件有一些需要解释的事项。首先，<command>useradd</command> 的默认操作是创建一个用户，以及一个名字和用户名相同的组。默认情况下，用户 ID (UID) 和组 ID (GID) 会从 1000 开始。这意味着，如果您不向 <command>useradd</command> 传递参数，每个用户都会属于一个不同的组。如果您不希望这样，就要传递 <parameter>-g</parameter> 参数给 <command>useradd</command>。默认参数保存在 <filename>/etc/default/useradd</filename> 文件中。您可以编辑其中的两个参数，以满足您的特定需求。
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	Second, to change the default parameters, the file <filename>/etc/default/useradd</filename> must be created and tailored to suit your particular needs. Create it with:
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	<userinput>mkdir -p /etc/default useradd -D --gid 999</userinput>	<userinput>sed -i 's/yes/no/' /etc/default/useradd</userinput>
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	<filename>/etc/default/useradd</filename> parameter explanations	<filename>/etc/default/useradd</filename> 参数解释
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	<parameter>GROUP=999</parameter>	<parameter>GROUP=1000</parameter>
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	This parameter sets the beginning of the group numbers used in the <filename>/etc/group</filename> file. The particular value 999 comes from the <parameter>--gid</parameter> parameter above. You may set it to any desired value. Note that <command>useradd</command> will never reuse a UID or GID. If the number identified in this parameter is used, it will use the next available number. Note also that if you don't have a group with an ID equal to this number on your system, then the first time you use <command>useradd</command> without the <parameter>-g</parameter> parameter, an error message will be generated&mdash;<computeroutput>useradd: unknown GID 999</computeroutput>, even though the account has been created correctly. That is why we created the group <systemitem class="groupname">users</systemitem> with this group ID in <xref linkend='ch-tools-createfiles' role='.'/>	该参数设定 /etc/group 文件中使用的第一个组编号。您可以将它修改为您希望的任何值。注意，<command>useradd</command> 绝不会重用 UID 或 GID。如果该参数指定的数字已经被使用了，它就会使用下一个可用的数字。另外，如果您第一次使用 <command>useradd</command> 时没有编号 1000 的组，也没有使用 <parameter>-g</parameter> 选项，您就会在终端看到一条消息：<computeroutput>useradd: unknown GID 1000</computeroutput>。您可以忽略这条消息，它会使用组编号 1000。
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	This parameter causes <command>useradd</command> to create a mailbox file for each new user. <command>useradd</command> will assign the group ownership of this file to the <systemitem class="groupname">mail</systemitem> group with 0660 permissions. If you would rather not create these files, issue the following command:	该参数使得 <command>useradd</command> 为新创建的用户建立邮箱文件。<command>useradd</command> 会使得 <systemitem class="groupname">mail</systemitem> 为邮箱文件属组，并为邮箱文件赋予 0660 权限码。如果您不希望 <command>useradd</command> 创建这些邮箱文件，执行以下命令：
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	<userinput>sed -i '/MAIL/s/yes/no/' /etc/default/useradd</userinput>	<userinput>sed -i 's/yes/no/' /etc/default/useradd</userinput>
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	Setting the Root Password	设定 root 密码
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	Installed directories	安装的目录
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	Installed libraries	安装的程序
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	chage, chfn, chgpasswd, chpasswd, chsh, expiry, faillog, getsubids, gpasswd, groupadd, groupdel, groupmems, groupmod, grpck, grpconv, grpunconv, login, logoutd, newgidmap, newgrp, newuidmap, newusers, nologin, passwd, pwck, pwconv, pwunconv, sg (link to newgrp), su, useradd, userdel, usermod, vigr (link to vipw), and vipw	chage, chfn, chgpasswd, chpasswd, chsh, expiry, faillog, gpasswd, groupadd, groupdel, groupmems, groupmod, grpck, grpconv, grpunconv, lastlog, login, logoutd, newgidmap, newgrp, newuidmap, newusers, nologin, passwd, pwck, pwconv, pwunconv, sg (到 newgrp 的链接), su, useradd, userdel, usermod, vigr (到 vipw 的链接), 以及 vipw
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	/etc/default and /usr/include/shadow
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	libsubid.so
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	<?dbfo list-presentation="list"?> <?dbhtml list-presentation="table"?>
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	Is used to examine the log of login failures, to set a maximum number of failures before an account is blocked, and to reset the failure count	检查失败登录日志，设定锁定账户的最大失败次数，或重置失败次数
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	<command>getsubids</command>	<command>su</command>
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	Is used to list the subordinate id ranges for a user	用于设定用户命名空间的 uid 映射
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	getsubids
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	Displays a message saying an account is not available; it is designed to be used as the default shell for disabled accounts	显示一条账户不可用的消息；它被设计为用来当作被禁用的账户的默认 shell
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	Deletes the specified user account	删除给定用户
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	Is used to modify the given user's login name, user identification (UID), shell, initial group, home directory, etc.	修改给定用户的登录名称、用户标识符 (UID)、shell、初始组、home 目录等信息
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	<filename class='libraryfile'>libsubid</filename>
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	library to handle subordinate id ranges for users and groups	用于设定用户命名空间的 uid 映射
	Linux From Scratch 12.3/chapter08_shadow — Chinese (Simplified Han script)	libsubid