LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 11-07-2006, 09:25 AM   #1
scadatech
LQ Newbie
 
Registered: Nov 2006
Location: Seville Ohio
Posts: 3

Rep: Reputation: 0
Smile Modifying Password Rules


Good Morning everyone!
I am new to this as well as new to Linux. I use it as an operating system for SCADA interface. (S)ubstation(C)ontrol(A)nd(D)ata(A)quisition.
My question is: I want to be able to use a certain set of passwords like I have done in the past so operators can memorize it by the month of the year. When I try that I get messages about a Dictionary word or reverse dictionary word or too similar to the last one. Any one know how I can do away or suspend this?
I become super User su and then type passwd if this helps.
Thanks!
 
Old 11-08-2006, 08:10 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
I want to be able to use a certain set of passwords like I have done in the past so operators can memorize it by the month of the year. When I try that I get messages about a Dictionary word or reverse dictionary word or too similar to the last one. Any one know how I can do away or suspend this?
If you're on a PAM-enabled system then you could change some PAM modules behaviour (like pam_cracklib or equivalent). As far as I can remember SCADA systems have been under fire a while ago for not being as secure and robust as they should be and so I think weakening password usage and checking seems an excellent way to undermine the security posture. IMNSHO it is not advisable, especially since your problem does not seem to be a technological one but a human one.
 
Old 11-08-2006, 11:43 AM   #3
scadatech
LQ Newbie
 
Registered: Nov 2006
Location: Seville Ohio
Posts: 3

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by unSpawn
I want to be able to use a certain set of passwords like I have done in the past so operators can memorize it by the month of the year. When I try that I get messages about a Dictionary word or reverse dictionary word or too similar to the last one. Any one know how I can do away or suspend this?
If you're on a PAM-enabled system then you could change some PAM modules behaviour (like pam_cracklib or equivalent). As far as I can remember SCADA systems have been under fire a while ago for not being as secure and robust as they should be and so I think weakening password usage and checking seems an excellent way to undermine the security posture. IMNSHO it is not advisable, especially since your problem does not seem to be a technological one but a human one.
I agree but this system is not on the corporate network and has no internet capabilities.
PAM not used.

Last edited by unSpawn; 11-08-2006 at 01:13 PM. Reason: //moderator fixes quoting
 
Old 11-08-2006, 03:36 PM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
PAM not used.
If using /etc/login.defs, then check for "OBSCURE_CHECKS_ENAB yes", else better find out what you use.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Password Rules hkillen Linux - Newbie 1 09-20-2006 08:18 AM
need help fixing my udev rules or ivman rules hedpe Linux - Hardware 2 03-18-2006 10:07 AM
iptables rules to ask for password for new connections chingyenccy Linux - Newbie 1 02-25-2005 02:50 PM
modifying slackware monkeymartin Slackware 4 07-15-2003 02:32 AM
Viruses, ipchains, dynamic rules, rules with regular expressions marktaff Linux - Security 2 09-25-2001 04:01 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:07 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration