cancel
Showing results for 
Search instead for 
Did you mean: 

max passwd length

SOLVED
Go to solution
skt_skt
Honored Contributor

max passwd length


Red Hat Enterprise Linux AS release

I have minlen cofigured in /etc/pam.d/system-auth. But what is the maxlen possible?

also where is the PASSWORD_HISTORY_DEPTH(HP-UX equivalent) defined in LINUX?
6 REPLIES
Ivan Ferreira
Honored Contributor
Solution

Re: max passwd length

The pam_cracklib provides the minlen and remember options. There is no way to restric the "maximun" length, it depends of the user. The maximum is 256 characters.
Por que hacerlo dificil si es posible hacerlo facil? - Why do it the hard way, when you can do it the easy way?
Court Campbell
Honored Contributor

Re: max passwd length

You would need to use pam_passwdqc to enforce a max length.
"The difference between me and you? I will read the man page." and "Respect the hat." and "You could just do a search on ITRC, you don't need to start a thread on a topic that's been answered 100 times already." Oh, and "What. no points???"
skt_skt
Honored Contributor

Re: max passwd length

how to use pam_passwdqc ?
skt_skt
Honored Contributor

Re: max passwd length

Both /etc/login.defs and /etc/pam.d/system-auth has minlen defined. Which one takes the precedence over the other?

# cat /etc/login.defs|grep LEN
PASS_MAX_LEN 12
PASS_MIN_LEN 6


# cat /etc/pam.d/system-auth|grep pam_cracklib
password required /lib/security//pam_cracklib.so retry=3 minlen=6 type=
Ivan Ferreira
Honored Contributor

Re: max passwd length

Parameters for password lenght in logins.def does not work. It is superseded by the PAM module "pam_cracklib"
Por que hacerlo dificil si es posible hacerlo facil? - Why do it the hard way, when you can do it the easy way?
Court Campbell
Honored Contributor

Re: max passwd length

You use it the same way you use any other pam module. Just add it to tour system-auth file under the password type. If you have it installed there should be a man page for it.
"The difference between me and you? I will read the man page." and "Respect the hat." and "You could just do a search on ITRC, you don't need to start a thread on a topic that's been answered 100 times already." Oh, and "What. no points???"