Can't Change Min Password Length in RHL7.2

MikHud · 04-13-2002, 07:56 AM

RHL7.2 - I've set "PASS_MIN_LEN 8" in /etc/login.defs but I am still able to change user passwords, logging in as the user, using 'passwd', to 6 character passwords! This includes new accounts added since the PAS_MIMN_LEN was changed.
Does the passwd length need to be changed somewhere else as well?
Does a service need to be restarted after such a change?
Any ideas anyone?

Thanks
Mike

unSpawn · 04-13-2002, 10:17 AM

if not /etc/pam.d/login contains a "minlen" directive; then find the end of line "password required pam_cracklib.so" and add "minlen=8". (fi)

MikHud · 04-16-2002, 06:36 AM

Thanks for your help unSpawn, but I couldn't get that to work.
I added the line you suggested so that /etc/pam.d/login contains:
~
password required /lib/security/pam_stack.so service=system-aut
password required /lib/security/pam_cracklib.so minlen=8
~

but this didn't seem to have any effect.
BTW there weren't any existing 'cracklib' lines in this file.
There seems to be rather a dearth of info on this subject - my Google search for 'cracklib.so' and 'minlen' turned up only 2 pages!

Any further advice appreciated
Thanks
Mike