[KLUG Members] Password again

Adam Tauno Williams awilliam at whitemice.org
Sun Sep 4 10:25:32 EDT 2005


Quoting Komal <agencies_ad1 at sancharnet.in>:

> Hello
> Is there any hardcoded value in password command which prevent user from
> using password of there character in absence of crackllib?

Probably you are hitting a pam_pwcheck module,  perhaps in
"/etc/pam.d/common-password".  This is the minlen directive which if memory
servers me defaults to 5, but check the manual page - "man pam_pwcheck".

There should be a file in /etc/security called pam_pwcheck.conf which can
override the defaults.

Overriding to below the minimum defaults is beyond dumb.  If you don't want
passwords use SSH public keys or just crappy old rhosts.  Otherwise even root
can specify a silly password.



More information about the Members mailing list