topic User password in Operating System - Linux

User password

ivychung2 — Tue, 25 Apr 2006 21:39:17 GMT

In the Redhat server , I will force the user change the password regularly by "chage -d0 userid", could suggest how to prevent the user use the simple password eg. 123456 ? thx.

Re: User password

Ivan Ferreira — Tue, 25 Apr 2006 21:48:42 GMT

Normally, the pam_cracklib is enabled and it does not allow the use of simple passwords.

Check your /etc/pam.d/system-auth file, you should have lines like this:

password requisite /lib/security/$ISA/pam_cracklib.so retry=3

Only root can force the use of simple passwords.

Re: User password

ivychung2 — Tue, 25 Apr 2006 22:06:39 GMT

thx reply ,

I check that the setting you said is existed in my server , I found that when I use the simple password , the server will prompt me the password is too simple ( BAD PASSWORD: it is too simplistic/systematic ) but it still allow me to use this simple password , I think this only a warning message , could suggest how can I provent the user use it ? thx in advance.

Re: User password

Ajay Agarwal — Tue, 25 Apr 2006 23:10:26 GMT

You can customize you PAM to add password integrity checkers, such as pam_passwdqc (available from http://www.openwall.com/passwdqc/) or write your own module. For a list of available PAM modules, see http://www.kernel.org/pub/linux/libs/pam/modules.html. For more information about PAM, see the chapter titled Pluggable Authentication Modules (PAM) in the Official Red Hat Linux Reference Guide.

Re: User password

Ajay Agarwal — Tue, 25 Apr 2006 23:37:29 GMT

I would also encourage you to check out this link: http://forums1.itrc.hp.com/service/forums/helptips.do?#28 to learn about the point system of this forum.

Re: User password

Vitaly Karasik_1 — Wed, 26 Apr 2006 06:09:51 GMT

>I check that the setting you said is >existed in my server , I found that when I >use the simple password , the server will >prompt me the password is too simple ( BAD >PASSWORD: it is too >simplistic/systematic ) but it still allow >me to use this simple password , I think >this only a warning message , could >suggest how can I provent the user use >it ? thx in advance.

run "passwd" as regular user and you'll see that regular user cannot set trivial password.
And for root it's just warning!