How to set the password policy and lockout policy

bin_shell · 02-20-2004, 03:16 AM

I want to know the password policy and lockout policy,such as min length,complex requirement.lockout counter

unSpawn · 02-23-2004, 04:09 PM

AFAIK it's /etc/login.defs which is deprecated on PAM enabled systems (/etc/pam.d).

smartyshan · 03-24-2010, 09:54 AM

Quote:

Originally Posted by bin_shell

I want to know the password policy and lockout policy,such as min length,complex requirement.lockout counter

you can use pam_passwdqc module in /etc/pam.d/system-auth file

for example :

password required pam_passwdqc.so min=disabled,12,8,6,5 max=40

jschiwal · 03-24-2010, 10:31 AM

For locking out users after a certain number of failures, look at pam_tally. Also look at man 8 faillog.

win32sux · 03-24-2010, 03:30 PM

smartyshan, please don't resurrect dead threads — help us keep LQSEC as zombie-free as possible.