Gentoo Archives: gentoo-server

From: "Paweł Madej" <linux@××××××××.info>
To: gentoo-server@l.g.o
Subject: Re: [gentoo-server] forcing good passwords
Date: Tue, 17 Jan 2006 17:01:03
Message-Id: 43CD000B.708@quanteam.info
In Reply to: Re: [gentoo-server] forcing good passwords by "Benjamin Smee (strerror)"
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA1
3
4 Benjamin Smee (strerror) wrote:
5 > heya,
6 >
7 > On Tuesday 17 January 2006 13:12, PaweB Madej wrote:
8 >
9 > Thats a very open question. Try specifying how the users are going to change
10 > their passwords and what type of authentication you are using. On the
11 > assumption that you are talking about authentication using PAM, try reading
12 > the man pages on pam_cracklib. Something like:
13 > password required pam_cracklib.so difok=3 minlength=10 dcredit=2
14 > ocredit=2
15 >
16 > in your /etc/pam.d/system-auth should do the trick.
17 >
18
19 At this moment I use standard autentication. I already don't have any
20 plan of changing passwords, but want implement some good solution.
21 Already user can manage its passwords via passwd command. Is PAM secure
22 thing? Because I heard very different opinions about it, once that it is
23 great, once that it could make big security hole.
24
25 - --
26 Paweł Madej aka Nysander
27 Member of QuanTeam | RLU #357047
28 http://wiki.quanteam.info | Gentoo Linux User
29 http://forum-farmaceutyczne.org | GPG key: 5861680B
30 | keyserver: http://pgp.mit.edu
31 Kielce, Poland | UTF-8 Email Preferred
32
33 Looking to buy: 6x 73 GB UW3/Ultra160 SCSI 80 pin (SCA)
34 ..::||::.. pair of PentiumIII Slot1 1GHz/ FSB 100 processors
35 ..::||::.. 2x 256 MB SDRAM ECC Registered
36 Got any of this mail me, with prize and shipping costs.
37 -----BEGIN PGP SIGNATURE-----
38 Version: GnuPG v1.4.2 (GNU/Linux)
39
40 iD8DBQFDzP6JgvSMglhhaAsRArN8AKC1px3sigDJw76tbm8MypxsQJPcGwCfY0Ur
41 uKdGput3euUqXvdhIdqtjBw=
42 =oJrK
43 -----END PGP SIGNATURE-----
44
45 --
46 gentoo-server@g.o mailing list

Replies

Subject Author
Re: [gentoo-server] forcing good passwords "Benjamin Smee (strerror)" <strerror@g.o>