change password

[peterchu1]

Hi,

I was wondering if anyone else has had this problem? Does anyone know
of a fix for this problem?

When a regular user tries to change their password, using the "passwd"
command, the new password is rejected with a "bad password" message.
This happens even though the new password is definitely not a
dictionary word:

[grover kumkwat grover]$ passwd
Changing password for grover
(current) UNIX password:
New UNIX password:
BAD PASSWORD: it is based on a dictionary word
New UNIX password:
BAD PASSWORD: it is based on a dictionary word
New UNIX password:
BAD PASSWORD: it is based on a dictionary word
passwd: Authentication token manipulation error

Root can change the user's password, but still gets the same "bad
password" message on the first try. The password is changed if root
re-enters the "bad password":

[root kumkwat grover]# passwd grover
Changing password for user grover
New UNIX password:
BAD PASSWORD: it is based on a dictionary word
Retype new UNIX password:
passwd: all authentication tokens updated successfully


but the users always compliant the message , how can I disable it ? thx

[Jerome Henry]

You can get some useful information
at:http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/pam-6.html#ss6.2
(Cracklib pluggable password strength-checker)

Collect the modified parameter for your needing (difok=x, minlen=y, and so on) and
tail them at:
password required /lib/security/pam_cracklib.so retry=3
in the file /etc/pam.d/passwd


But dictionnary based passwords are bad passwords, even if they are long... Could you provide an example of 'good password' that provides this message ?
Thanks to assign points if useful...

J

[Nat Guyton]

If you *REALLY* want to disable poor password checking (though it seems broken on your system), remove the line that has pam_cracklib.so from /etc/pam.d/system-auth.

Is is strange that good passwords are causing problems, though. If using redhat, try running "up2date pam" - I am running pam-0.75-51 on AS 3.0 and pam-0.75-46.7.3 on AS 2.1.

[peterchu1]

I just want to disable the message "BAD Password " because this message is non useful to users , if good password , there will no message pop up.

[Stuart Browne]

You can either disable good/bad password checking like has been mentioned already in the thread, or unfortunately just live with it.

I suppose the other options would be to yank the source for 'passwd', and pull out the 'BAD PASSWORD:' bits and recompile yourself..