Hello, I am new to Linux and need some help with setting password paramenters. Below is a list of tasks I need to accomplish. Is there one file I can edit for this? Maybe a good article with a walkthrough? Any help would be greatly appreciated.
All our servers run CentOS.
• Invalid attempts – not set to lock out after 6 invalid attempts
• Lockout duration – not set to at least 30 minutes or until an administrator enables the user ID.
• Minimum password length – set to 5; needs to be set to at least 7. Complexity has not been set.
• Password Age – not set. Needs to be at least once every 90 days.
• Password History – not set. Needs to be set so that a new password/phrase cannot be the same as, at least, the last four passwords/phrases.

If you're new to Linux did you start reading this distributions user, admin and security documentation? Because if you didn't that would be very inefficient. Please see https://access.redhat.com/documentat...erprise_Linux/ and http://wiki.centos.org/Documentation


Do these by any chance include any "inherited" ones? ;-p


'cd /usr/share/doc/pam-*/txts || exit 1;'
'ls -al /etc/pam.d;'
README.pam_tally* ?

README.pam_faillock?

README.pam_unix, README.pam_cracklib and 'man pam_passwdqc'?

'man chage'?

README.pam_unix and or README.pam_pwhistory?

1 members found this post helpful.

I think we have the password policy working but now have run into the issue of exemptions. We have certain accounts we do not want to require changing. I am still looking but if someone may have had experience with this and could offer some insight it would be greatly appreciated.