Password policy

chetan_linux · 02-11-2010, 09:35 AM

Hi All,

I want to enforce a password policy in red hat linux like Password length should not exceed 10 characters, first letter should be CAPS, one special character and password will be valid only for 15 days.

Chetan Singh

anomie · 02-11-2010, 10:57 AM

The two most useful PAM password modules, in order of my own preference, are pam_passwdqc and pam_cracklib. They can both enforce certain characteristics related to password strength. What you're looking to do is constrain the strength of a password (in a bad way). AFAIK, you'd need to write your own PAM module -- or dig one up that someone else wrote -- to do this.

For password aging, see the manpages for chage(1).

blackhat_hk · 02-14-2010, 02:42 AM

also check /etc/login.defs file .