control the password

[juno2]

when I install the RH linux , I 've set to use the default setting to control the user can't use a specific password eg. too simple , the word in dictionary , the password has been used previously, how can I disable this control so that users can use the password the password they want ? thx.

[Jerome Henry]

2 steps :

- Uninstall cracklib.
- Solve your points assignment issue...

Tks

J

[juno2]

thx reply,

could you advise how to "Uninstall cracklib" ? is there other more simple method ? thx.

[Steven E. Protter]

The default behavior of Red Hat Linux, from my esperience v 6-v9 is to warn the root user and prevent other users from using illegal passwords.

This is a good thing.

Anyone thats telling you to remove this functionality is telling you to make your systems insecure.

If you run crack against a password file not protected this way, it will guess passwords. I ran crack against a HP-UX non-trusted system and it guessed a dozen passwords out of 160 users.

In other words, not good.

You can the rpm command to uninstall the cracklib.


rpm -q cracklib
gets you the version number. Then you can use rpm to uninstall.

I totally agree with Jerome's comments. You are a heavy user here. Please show a wee bit more respect to the community that answers your questions.

It beats paying for help right?

SEP

[juno2]

thx reply,

what is the impact to uninstall cracklib
? it will only disable to control the password or more ? if not , is there other method to fix the problem ? Thx.

sorry , i know i need to assign pts , I will do it within two days .

[juno2]

instead of uninstall the cracklib , can fix the problem by the existing tools , eg. webmin or others ? thx.

[Vitaly Karasik_1]

to remove pam_cracklib string from /etc/pam.d/system-auth ?

[Jerome Henry]

It's not exactly a 'problem', as Steven explains (hey, don't you sleep, Steven ?).
By default, the system protects from weak password, from the line Vitaly quotes, if you use pam, and using cracklib as a weak password database.
If you want to stop this feature, you can unactivate this check from pam module, or uninstall database (so no weak password anymore).
The only thing you can do from webmin is, under pam authentification, uncheck login, such no requiring pam for login, which is definetely a bad idea.

J

[Huc_1]

You seem to have lot of problem with password lately, but dont turn to such drastic methode
I will join the crowed and advice again it !
keep the history file active.

Dont let your user/management impose this, explain/defend to them that this is against everyone interest.

If the task of keeping up is hard and you need more information on password management, take the time to read the following link I have found this read to be time well spend.

http://www.redhat.com/docs/manuals/linux/RHL-9-Manual/security-guide/s1-wstation-pass.html

Keep at it !

J-P

"Jolie couvre chef sir Jerome Henry" (french --> means something like "nice hat on your head mylord Jerome Henry).

[Martin P.J. Zinser]

Also note that removing these additional checks will not solve the issues of locking when two different users try to change their passwords at the same time.

[Huc_1]

Any feed back progress /yet on this issue?
still a problem?

J-P

[aparna challagulla]

hi juno,
considering all ur past posts regarding passwd and chage i think u want password aging enabled for ur users. i also remember u saying that u have nearly 200 users.
whenever a user tries to change his/her password the /etc/passwd file is locked and the lock is only released after the changes are saved. i dont think u can disable this feature or if there a workaround for it.
try enabling aging for a batch of users each day so that all users dont try to do it simultaneously.
or else dont enable password aging for the same number of days for all users.
HTH
aparna

P.S. would like to know how/whenever u solve this issue.