max passwd length

[skt_skt]

Red Hat Enterprise Linux AS release

I have minlen cofigured in /etc/pam.d/system-auth. But what is the maxlen possible?

also where is the PASSWORD_HISTORY_DEPTH(HP-UX equivalent) defined in LINUX?

[Ivan Ferreira · Accepted solution]

The pam_cracklib provides the minlen and remember options. There is no way to restric the "maximun" length, it depends of the user. The maximum is 256 characters.

[Court Campbell]

You would need to use pam_passwdqc to enforce a max length.

[skt_skt]

how to use pam_passwdqc ?

[skt_skt]

Both /etc/login.defs and /etc/pam.d/system-auth has minlen defined. Which one takes the precedence over the other?

# cat /etc/login.defs|grep LEN
PASS_MAX_LEN 12
PASS_MIN_LEN 6


# cat /etc/pam.d/system-auth|grep pam_cracklib
password required /lib/security//pam_cracklib.so retry=3 minlen=6 type=

[Ivan Ferreira]

Parameters for password lenght in logins.def does not work. It is superseded by the PAM module "pam_cracklib"

[Court Campbell]

You use it the same way you use any other pam module. Just add it to tour system-auth file under the password type. If you have it installed there should be a man page for it.