Dear All

I am using smbldap tools with my LDAP server in my company. Now the situation is I want to force the users not to give simple passwords (e.g. name,etc) & also I want to be able to check the strong level of the passwords of my server users, so please suggest me any tool through which I can perform these above mentioned functions.


Thanks in Advance
Sushant Chawla
Linux Administrator

I think you can use a PAM module to enforce this. I just did a quick google search for "PAM strong passwords" and came up with:

pam_cracklib
http://www.deer-run.com/~hal/sysadmin/pam_cracklib.html

pam_passwdqc
http://articles.techrepublic.com.com...1-6111316.html

Firstly thanks for the help

Although the modules are working fine with checking the strong passwords but at the same time I also want to check for the current passwords which are already set for my hundreds of users. I can not change the passwords of each & every user.

I want to notify only those users whose passwords are simple.

Thanks
Sushant Chawla
Linux Administrator

Hi Sushant,

What I can suggest you is to run this command in loop for all of your users.
This will forcefully ask all your users to change their password whenever they log in next.

Hope this helps.

Hi Vikas

How are you?

Dude I am using LDAP for users & as i said I can not force my each & every user for changing his/her password, I only want to notify those users who have weak passwords.

Do you know any graphical tool or browser application which can help me sorting this issue & can check the strongness of my users passwords. (e.g. when we are filling any form, it shows the strongness of your password)

It is very urgent as many users are having very simple passwords & you know that its a nightmare for an Admin to have such kind of security issues in the network.


Thanks
Sushant Chawla
Linux Administrator

Ok, for this I believe you need two things

1) MD5 password decoder (to know current passwords of users) (THIS IS DIFFICULT)
2) Then a password strength check script for Unix.