Hmm - good work Sun. Looks like I will have to go back to cracklib for want of anything else. sigh. John Solar Designer To: John Warburton <John.Warburton@asic.gov.au> <solar@openwa cc: pam-list@redhat.com ll.com> Fax to: Subject: Re: pam_passwdqc, ssh and expired passwords 29/06/2002 03:19 AM *** This email message has been processed by MIMEsweeper *** Gary Winiger <gww at marduk.eng.sun.com> points out that the following Solaris 8 bugs all of which are fixed in Solaris 9 are very likely relevant to this problem: 4284795 when passwd is given the -r option, it ignores /etc/pam.conf 4415159 unix_scheme pam_chauthtok does not stack 4415162 unix_scheme pam_chauthtok too tightly coupled with passwd It seems like we should really try with Solaris 9.