linuxunixpasswordsfedorawebmin

Where does Webmin stores its passwords?

I am trying to figure out where does Webmin store its passwords on a fedora machine ? Is it stored hashed ? or plain text and where ?

I have tried to search all the system files and Webmin but no luck !

Thanks in advance

Solution

  • By default Webmin is using /etc/shadow file for authentication.

    In case Webmin is setup to use password authentication, on Webmin ⇾ Webmin Configuration: Edit Webmin User page, it will also store hashed passwords (i.e. in /etc/webmin/miniserv.users file) based on hashing format defined on Webmin ⇾ Webmin Configuration: Authentication page.

    Either way, the passwords for authentication stored by Webmin are always hashed!