topic Re: password requirements in Operating System - Linux

password requirements

Jim Mickens — Wed, 01 Sep 2004 10:31:32 GMT

Is there any way to loosen the password requirements for users trying to change their passwords using passwd? For example - one user has been using q1qqqq for his password under HP-UX 10.20 and wants to use the same password under our new RH Linux AS 2.1 server, but it won't let him due to too many similar characters. System doesn't face internet at all, so we don't have the need for high security settings. I suggested changing his password, but he's the pointy-haired type....

Re: password requirements

Steven E. Protter — Wed, 01 Sep 2004 11:50:19 GMT

root can change the password for a user and violate security rules.

The system will squawk, but it can be done.

This is better than lowering them for users that aren' so pointy headed. I don't know how, nor do I ever want to learn how to turn these off on a system.

Hope this suggestion helps.

Any secruity audit will stand with you against this users demands.

SEP

Re: password requirements

Jim Mickens — Wed, 01 Sep 2004 11:56:37 GMT

Right you are - I've been blowing him off for weeks now for that very reason.

I had tried to change it from su (server is not on site - I have to telnet to it), but ctrl-c'd out when it complained. Didn't think to continue on to see if it would work. Thanks.