LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)
-   -   Forcing Users for strong passwords (https://www.linuxquestions.org/questions/linux-server-73/forcing-users-for-strong-passwords-748046/)

sushantchawla2005 08-17-2009 01:46 AM
Forcing Users for strong passwords
 
Dear All

I am using smbldap tools with my LDAP server in my company. Now the situation is I want to force the users not to give simple passwords (e.g. name,etc) & also I want to be able to check the strong level of the passwords of my server users, so please suggest me any tool through which I can perform these above mentioned functions.


Thanks in Advance
Sushant Chawla
Linux Administrator

mrbubblesort 08-17-2009 02:35 AM
I think you can use a PAM module to enforce this. I just did a quick google search for "PAM strong passwords" and came up with:

pam_cracklib
http://www.deer-run.com/~hal/sysadmin/pam_cracklib.html

pam_passwdqc
http://articles.techrepublic.com.com...1-6111316.html

sushantchawla2005 08-20-2009 10:13 AM
Firstly thanks for the help

Although the modules are working fine with checking the strong passwords but at the same time I also want to check for the current passwords which are already set for my hundreds of users. I can not change the passwords of each & every user.

I want to notify only those users whose passwords are simple.

Thanks
Sushant Chawla
Linux Administrator

vikas027 08-20-2009 10:52 AM
Quote:
Originally Posted by sushantchawla2005 (Post 3650980)
Firstly thanks for the help

Although the modules are working fine with checking the strong passwords but at the same time I also want to check for the current passwords which are already set for my hundreds of users. I can not change the passwords of each & every user.

I want to notify only those users whose passwords are simple.

Thanks
Sushant Chawla
Linux Administrator

Hi Sushant,

What I can suggest you is to run this command in loop for all of your users.
Code:
chage -d 0 username
This will forcefully ask all your users to change their password whenever they log in next.

Hope this helps.

sushantchawla2005 08-20-2009 11:50 PM
Hi Vikas

How are you?

Dude I am using LDAP for users & as i said I can not force my each & every user for changing his/her password, I only want to notify those users who have weak passwords.

Do you know any graphical tool or browser application which can help me sorting this issue & can check the strongness of my users passwords. (e.g. when we are filling any form, it shows the strongness of your password)

It is very urgent as many users are having very simple passwords & you know that its a nightmare for an Admin to have such kind of security issues in the network.


Thanks
Sushant Chawla
Linux Administrator

vikas027 08-21-2009 09:12 AM
Quote:
Originally Posted by sushantchawla2005 (Post 3651877)
Hi Vikas

How are you?

Dude I am using LDAP for users & as i said I can not force my each & every user for changing his/her password, I only want to notify those users who have weak passwords.

Do you know any graphical tool or browser application which can help me sorting this issue & can check the strongness of my users passwords. (e.g. when we are filling any form, it shows the strongness of your password)

It is very urgent as many users are having very simple passwords & you know that its a nightmare for an Admin to have such kind of security issues in the network.


Thanks
Sushant Chawla
Linux Administrator
Ok, for this I believe you need two things

1) MD5 password decoder (to know current passwords of users) (THIS IS DIFFICULT)
2) Then a password strength check script for Unix.


All times are GMT -5. The time now is 11:01 PM.