[KLUG Members] Password again

[Komal]

----- Original Message -----
From: "Adam Tauno Williams" <awilliam at whitemice.org>
To: <members at kalamazoolinux.org>
Sent: Sunday, September 04, 2005 7:55 PM
Subject: Re: [KLUG Members] Password again


> Quoting Komal <agencies_ad1 at sancharnet.in>:
>
> > Hello
> > Is there any hardcoded value in password command which prevent user from
> > using password of there character in absence of crackllib?
>
> Probably you are hitting a pam_pwcheck module,  perhaps in
> "/etc/pam.d/common-password".  This is the minlen directive which if
memory
> servers me defaults to 5, but check the manual page - "man pam_pwcheck".

NO. I am using pam_pwcheck module.

>
> There should be a file in /etc/security called pam_pwcheck.conf which can
> override the defaults.

Yes. There is /etc/login.defs even there i have specified 3 characters.
>
> Overriding to below the minimum defaults is beyond dumb.  If you don't
want
> passwords use SSH public keys or just crappy old rhosts.  Otherwise even
root
> can specify a silly password.
>

You cent percent right. I want to twist PAM as much as possible. I want to
know and apply all possible configurtion.

Regards,

Komal