Hello, I want to configure the users passwords so: - minimum ttl for password - maximum ttl for password - maximum repeat 2 characters - user cannot repeat the 2 lastest passwords. - if user fail his password for 3 times, lock his account. The minimum and maximum ttl I can to configure with "passwd" or in /etc/logins.defs. The other points I cannot to configure. I'd read man pam, docs that contain /usr/share/doc/pam-0.75/, http://www.kernel.org/pub/linux/libs/pam/ and http://linux-cd.com.ar/manuales/rh9.0/rhl-rg-es-9/ch-pam.html, but I don't find the solution. My /etc/pam.d/system-auth: auth required /lib/security/pam_env.so auth sufficient /lib/security/pam_unix.so likeauth nullok auth required /lib/security/pam_deny.so account required /lib/security/pam_unix.so password required /lib/security/pam_cracklib.so retry=3 type= password sufficient /lib/security/pam_unix.so nullok use_authtok md5 shadow password required /lib/security/pam_deny.so session required /lib/security/pam_limits.so session required /lib/security/pam_unix.so If I change "password sufficient" by required, passwd fails. can you help me? thanks and regards, rozio -- Este correo electrónico y los documentos que lo acompañan pueden contener información reservada y/o confidencial, dirigida exclusivamente al uso del destinatario. Si Vd. no es el destinatario, no está autorizado a copiar o distribuir esta comunicación a ninguna otra persona. Si ha recibido este correo electrónico por error, le rogamos nos lo devuelva y lo elimine de su sistema. Gracias. _____________________________________ Rocío Alfonso Pita Dpto. Sistemas Universal Support S.A.U. Tlf: +34 981 779 140 ext. 6209 Fax: +34 981 779 141 _____________________________________ _______________________________________________ Pam-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/pam-list