Tech Support > Operating Systems > Linux / Variants > Minimum lenght check password
Minimum lenght check password
Posted by Pisinho on December 4th, 2003


Hi,
I have RedHat 7.3 and when I login with password with >8 character don't
check the password.

Example:

password "1234567890" is egual to "1234567812"

How to set up a minimum lenght check password in pam ?
Thanks .


Posted by Ed Blackman on December 5th, 2003


Pisinho wrote:
Do you have MD5 passwords set up? You can check by looking at the
password fields in /etc/shadow: if they don't start with "$1$",
they're standard (DES) passwords, which will ignore anything after the
first 8 characters of the password.

If this is the case, you'd have to set up MD5 passwords to have more
than 8 significant characters in a password. That would mean
resetting all of your existing passwords once you were through.

I'm afraid I don't know enough about PAM to advise you how to set up
MD5 passwords. I do know that if you're going to messing about in the
PAM config, you should copy the original files elsewhere before you
start, and make sure you keep a root console open while you're testing
your changes. If you muck up your PAM configuration, you might lose
the ability to log in, so if you don't have a root console open, you
won't be able to fix the problem without resorting to booting from a
recovery CD or etc.

Ed



Similar Posts