LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 02-12-2020, 03:52 PM   #31
ChuangTzu
Senior Member
 
Registered: May 2015
Location: Where ever needed
Distribution: Slackware/Salix while testing others
Posts: 1,718

Rep: Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857

Quote:
Originally Posted by volkerdi View Post
If our adoption of PAM is any indication, you won't need to worry about that for 23 years.
, no reason to rush perfection.
 
Old 02-12-2020, 03:54 PM   #32
ChuangTzu
Senior Member
 
Registered: May 2015
Location: Where ever needed
Distribution: Slackware/Salix while testing others
Posts: 1,718

Rep: Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857
Quote:
Originally Posted by GazL View Post
I see your Theoden and raise you a Kosh:
And so it begins
Pam has Group Project Problems =)
https://www.youtube.com/watch?v=nuQaEj-qiPY
 
Old 02-12-2020, 04:20 PM   #33
upnort
Senior Member
 
Registered: Oct 2014
Distribution: Slackware
Posts: 1,893

Rep: Reputation: 1161Reputation: 1161Reputation: 1161Reputation: 1161Reputation: 1161Reputation: 1161Reputation: 1161Reputation: 1161Reputation: 1161
Quote:
Didn't know PAM was so beastly looking...now the unmentionable daemon to rule them all, well
Nah, just some tongue-in-cheek dry humor!
 
1 members found this post helpful.
Old 02-12-2020, 05:12 PM   #34
jmccue
Member
 
Registered: Nov 2008
Location: US
Distribution: slackware
Posts: 687
Blog Entries: 1

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Just noticed, GazL beat me to it. Need to remember to read all post first

Quote:
Originally Posted by upnort View Post
So it begins....

Excited to see the watershed moment arrive!
You want the original from B5

https://www.youtube.com/watch?v=3qYbVQu7YAQ

Last edited by jmccue; 02-12-2020 at 05:14 PM. Reason: adjusted
 
Old 02-12-2020, 05:38 PM   #35
garpu
Senior Member
 
Registered: Oct 2009
Distribution: Slackware
Posts: 1,535

Rep: Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899
So really, no need to change anything from a user's perspective with PAM added? I'm trying to head off any "gotchas" once it gets merged out of testing.
 
Old 02-12-2020, 06:12 PM   #36
LuckyCyborg
Senior Member
 
Registered: Mar 2010
Posts: 3,500

Rep: Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308
Quote:
Originally Posted by garpu View Post
So really, no need to change anything from a user's perspective with PAM added? I'm trying to head off any "gotchas" once it gets merged out of testing.
Probably, just likely Ubuntu or Fedora, in the future Slackware will not accept to set an user password as "password" or similar insecure ones.

Prepare yourself to memorize passwords containing: at least a letter in uppercase, one lowercase, a number, a symbol, and it should not be shorter than 6 characters. And to not be a dictionary word, of course.
 
Old 02-12-2020, 06:16 PM   #37
volkerdi
Slackware Maintainer
 
Registered: Dec 2002
Location: Minnesota
Distribution: Slackware! :-)
Posts: 2,504

Rep: Reputation: 8461Reputation: 8461Reputation: 8461Reputation: 8461Reputation: 8461Reputation: 8461Reputation: 8461Reputation: 8461Reputation: 8461Reputation: 8461Reputation: 8461
Quote:
Originally Posted by LuckyCyborg View Post
Probably, just likely Ubuntu or Fedora, in the future Slackware will not accept to set an user password as "password" or similar insecure ones.

Prepare yourself to memorize passwords containing: at least a letter in uppercase, one lowercase, a number, a symbol, and it should not be shorter than 6 characters. And to not be a dictionary word, of course.
By default (and as mentioned in the ChangeLog), the packages in /testing do password quality testing similar to this.

Easily disabled in /etc/pam.d/system-auth if you find it annoying.
 
6 members found this post helpful.
Old 02-12-2020, 06:23 PM   #38
fido_dogstoyevsky
Member
 
Registered: Feb 2015
Location: Victoria, Australia
Distribution: Slackware 15
Posts: 490
Blog Entries: 2

Rep: Reputation: 576Reputation: 576Reputation: 576Reputation: 576Reputation: 576Reputation: 576
Quote:
Originally Posted by kikinovak View Post
Three technologies with a very reduced attack surface:
  • ...
  • Letter opener

Not according to a lot of murder mysteries I've read...
 
Old 02-12-2020, 06:34 PM   #39
LuckyCyborg
Senior Member
 
Registered: Mar 2010
Posts: 3,500

Rep: Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308
Quote:
Originally Posted by volkerdi View Post
By default (and as mentioned in the ChangeLog), the packages in /testing do password quality testing similar to this.

Easily disabled in /etc/pam.d/system-auth if you find it annoying.
Well, I love this default password strength checking and I have no intention to change it in future.

No offense, but I have considered always as a huge security flaw this Slackware "ability" to accept questionable passwords.

Last edited by LuckyCyborg; 02-12-2020 at 06:36 PM.
 
2 members found this post helpful.
Old 02-12-2020, 06:49 PM   #40
garpu
Senior Member
 
Registered: Oct 2009
Distribution: Slackware
Posts: 1,535

Rep: Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899
Cool...so is one prompted to change one's password if it doesn't pass the check when PAM is installed? (Out of curiosity, that is.)
 
Old 02-12-2020, 06:54 PM   #41
LuckyCyborg
Senior Member
 
Registered: Mar 2010
Posts: 3,500

Rep: Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308Reputation: 3308
Quote:
Originally Posted by garpu View Post
Cool...so is one prompted to change one's password if it doesn't pass the check when PAM is installed? (Out of curiosity, that is.)
I do not tested myself, but I do not think that PAM will automagically force you to change your password itself. Not sure if there exists even a plugin for this.

BUT, I am certainly that you will not be able to set an user password like "toor" or "johnny" using the "password" command or its GUI counterparts.

Last edited by LuckyCyborg; 02-12-2020 at 06:59 PM.
 
Old 02-12-2020, 06:59 PM   #42
andrew.46
Senior Member
 
Registered: Oct 2007
Distribution: Slackware
Posts: 1,365

Rep: Reputation: 493Reputation: 493Reputation: 493Reputation: 493Reputation: 493
Great news and excellent to see the roadmap in front leading to 15.0 ...
 
1 members found this post helpful.
Old 02-12-2020, 07:02 PM   #43
garpu
Senior Member
 
Registered: Oct 2009
Distribution: Slackware
Posts: 1,535

Rep: Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899
Quote:
Originally Posted by LuckyCyborg View Post
I do not tested myself, but I do not think that PAM automagically will force you to change your password itself. Not sure if there exists a plugin for.

BUT, I am certainly that you will not be able to set an user password like "toor" or "johnny" using the "password" command or its GUI counterparts.
That should be a default setting for anything with a password these days. From doing support for an academic department, it was amazing how many really bad passwords people had, plus they'd tell you them without prompting. In an email, no less.
 
2 members found this post helpful.
Old 02-12-2020, 07:35 PM   #44
ChuangTzu
Senior Member
 
Registered: May 2015
Location: Where ever needed
Distribution: Slackware/Salix while testing others
Posts: 1,718

Rep: Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857Reputation: 1857
Quote:
Originally Posted by LuckyCyborg View Post
I do not tested myself, but I do not think that PAM will automagically force you to change your password itself. Not sure if there exists even a plugin for this.

BUT, I am certainly that you will not be able to set an user password like "toor" or "johnny" using the "password" command or its GUI counterparts.
We actually had this ability, although not as all encompassing, with cracklib from Slackbuilds: http://slackbuilds.org/repository/14...earch=cracklib

PAM has the ability to force passwords to expire if you choose to do so.
https://access.redhat.com/articles/3027531
https://www.techrepublic.com/article...ords-with-pam/

PS: the link from RedHat while informative is also in jest.
 
Old 02-12-2020, 08:18 PM   #45
ReFracture
Member
 
Registered: Oct 2007
Posts: 209

Rep: Reputation: 222Reputation: 222Reputation: 222
All /testing packages installed.. so far so good.
 
2 members found this post helpful.
  


Reply

Tags
kde, pam, slackware, xfce



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Current64 - Changes Wed Jan 9 03:21:06 UTC 2019 - cups and gutenprint burdi01 Slackware 1 01-11-2019 04:02 AM
[SOLVED] Wed Jun 13 05:43:00 UTC 2018 and Newer Current bare metal install? AlleyTrotter Slackware 28 06-24-2018 02:36 PM
slackware-current breakage of MTP after [Wed May 23 04:42:29 UTC 2018] update lord_ Slackware 6 06-13-2018 05:34 AM
[SOLVED] Centos7, invalid offset for UTC for Sweden, says UTC+00 Basher52 CentOS 14 02-09-2018 10:10 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 03:27 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration