restrict passwords

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

  I want to configure the users passwords so:

- minimum ttl for password
- maximum ttl for password
- maximum repeat 2 characters
- user cannot repeat the 2 lastest passwords.
- if user fail his password for 3 times, lock his account.
	
  The minimum and maximum ttl I can to configure with "passwd" or in 
/etc/logins.defs.

   The other points I cannot to configure. I'd read man pam, docs that contain 
/usr/share/doc/pam-0.75/, http://www.kernel.org/pub/linux/libs/pam/ and 
http://linux-cd.com.ar/manuales/rh9.0/rhl-rg-es-9/ch-pam.html, but I don't 
find the solution.

  My /etc/pam.d/system-auth:

auth        required      /lib/security/pam_env.so
auth        sufficient    /lib/security/pam_unix.so likeauth nullok
auth        required      /lib/security/pam_deny.so

account     required      /lib/security/pam_unix.so

password    required      /lib/security/pam_cracklib.so retry=3 type=
password    sufficient    /lib/security/pam_unix.so nullok use_authtok md5 
shadow
password    required      /lib/security/pam_deny.so

session     required      /lib/security/pam_limits.so
session     required      /lib/security/pam_unix.so

  If I change "password sufficient" by required, passwd fails.

  can you help me?

  thanks and regards,
     rozio

-- 
Este  correo  electrónico  y  los documentos que lo acompañan pueden contener 
información reservada y/o confidencial, dirigida exclusivamente al uso del 
destinatario. Si Vd. no es el destinatario, no está autorizado a copiar o 
distribuir esta comunicación a ninguna otra persona. Si ha recibido este 
correo electrónico por error, le rogamos nos lo devuelva y lo elimine de su 
sistema. Gracias.
_____________________________________
Rocío Alfonso Pita
Dpto. Sistemas
Universal Support S.A.U.
Tlf: +34 981 779 140 ext. 6209 
Fax: +34 981 779 141
_____________________________________


_______________________________________________

Pam-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/pam-list

[Index of Archives]     [Fedora Users]     [Kernel]     [Red Hat Install]     [Linux for the blind]     [Gimp]

  Powered by Linux