Password restrictions

Corrado · 07-06-2006, 12:45 PM

Numerous users are complaining to me about the dictionary restrictions used when creating a password. How can I make it less restrictive (or turn it off)? I'm aware of the risks.

I have looked at other postings regarding this and they all refer to files I can't find on my system.

I am using Red Hat Enterprise 4 Workstation.

Chris

pljvaldez · 07-06-2006, 07:17 PM

Is it a network password or a local password?

On my Debian box, this seems to be controlled by the file /etc/pam.d/common-password and it might load libpam-cracklib package if required.

Not sure about NIS passwords. Here's a link explaining how to setup common-password to use (or not use) dictionary checking...

gilead · 07-06-2006, 09:37 PM

If you can't find the files that need to be changed and don't mind a suggestion that looks different to what you're trying to achieve...

Suggest to the users that they substitute numbers for some of the letters. Even the word password can be made harder to guess: pas5w0rd, pa55word, pas5word, passw0rd. With a little imagination they'll be signing in with (almost) the passwords they want to use and you'll have a system with stronger passwords.

jschiwal · 07-06-2006, 10:00 PM

You might check if there is an /etc/security/pam_pwcheck.conf file. Check which options are used. There may be a GUI configuration of "Users & Security" or "Security Level" where this file is edited. I'm sure you Red Hat manual will have the details.