2 @unnumbered Password authentication
4 Password authentication is required for packages uploading.
5 You have to store your authentication data in @option{-passwd} file in
9 username:hashed-password
12 Empty lines and having @verb{|#|} at the beginning are skipped.
14 Supported hashing algorithms are:
18 @item @url{https://www.argon2i.com/, Argon2i} (recommended one!)
19 To get Argon2i hashed-password you can use any of following tools:
21 @item go get @url{https://github.com/balakhonova/argon2i,
22 github.com/balakhonova/argon2i} (Go)
23 @item @url{https://github.com/p-h-c/phc-winner-argon2} (C)
25 Example user @code{foo} with password @code{bar} can have the
26 following password file entry:
29 foo:$argon2i$v=19$m=32768,t=3,p=4$OGU5MTM3YjVlYzQwZjhkZA$rVn53v6Ckpf7WH0676ZQLr9Hbm6VH3YnL6I9ONJcIIU
33 You can use your operating system tools:
37 $ echo -n "password" | sha256
39 # GNU/Linux-based systems
40 $ echo -n "password" | sha256sum
43 Example user @code{foo} with password @code{bar} will have the
44 following password file entry:
47 foo:$sha256$fcde2b2edba56bf408601fb721fe9b5c338d10ee429ea04fae5511b68fbf8fb9
52 You can refresh passwords by sending @code{SIGHUP} signal to the working daemon:
56 $ kill -HUP `pidof gocheese`
57 $ svc -h /var/service/gocheese
60 Before refreshing it's recommended to check @option{-passwd} file with
61 @option{-passwd-check} option to prevent daemon failure.