LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 08-23-2012, 11:33 PM   #1
cheersvega
LQ Newbie
 
Registered: Jun 2012
Distribution: RHEL 5.8
Posts: 4

Rep: Reputation: Disabled
setting password complexity not working as root


Hi
I have configured PAM for password complexity. When I changed my password as a normal user the system asks for a complex password otherwise it doesn’t accept at all. But if I reset password for any user with simple or short password (i.e. single char) as root it will accept.

Here does it mean PAM rules can be overcome by root or it will not work under root credentials?

My system-auth conf:
password requisite pam_cracklib.so try_first_pass retry=3 minlen=8 lcredit=-1 ucredit=-1 dcredit=-1 ocredit=-1 difok=3

OS: RHEL 5.8

Thanks
Vega
 
Old 08-24-2012, 01:22 AM   #2
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Rocky 9.2
Posts: 18,369

Rep: Reputation: 2753Reputation: 2753Reputation: 2753Reputation: 2753Reputation: 2753Reputation: 2753Reputation: 2753Reputation: 2753Reputation: 2753Reputation: 2753Reputation: 2753
You can read the module details here http://linux-pam.org/Linux-PAM-html/..._cracklib.html but I believe that root can bypass it for 2 reasons

1. root is ${deity} anyway, so he could always set the entry in /etc/shadow some other way
2. there may be restrictions on some acct(s) to use/re-use a given passwd ...
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
bash script to test string complexity (like password complexity) robertjinx Linux - Server 2 05-12-2010 02:58 PM
[SOLVED] root password complexity enforcement ErnieG Linux - Security 3 05-05-2010 06:45 AM
Slackware13 Setting Password Complexity Ani Slackware 3 10-19-2009 01:53 PM
password complexity not working on RH4 update 5 VMSlives Red Hat 2 05-05-2009 02:38 PM
Setting password complexity Harry Seldon Linux - General 1 08-04-2006 02:33 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 05:25 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration