Tech Support > Operating Systems > UNIX / Variants > passwd prompts for new password only once when a short password is entered
passwd prompts for new password only once when a short password is entered
Posted by wong_powah@yahoo.ca on September 19th, 2007


My computer behaves as follows when a short password is entered:
# passwd testing
Changing password for user testing.
New UNIX password:
BAD PASSWORD: it is WAY too short
Retype new UNIX password:
No password supplied
No password supplied
No password supplied
passwd: Authentication token manipulation error
You have new mail in /var/spool/mail/root

My desired behavior is that passwd reprompts three times as follows:
# passwd testing
Changing password for user testing
New UNIX password:
BAD PASSWORD: it's WAY too short
New UNIX password:
BAD PASSWORD: it's WAY too short
New UNIX password:
BAD PASSWORD: it's WAY too short
passwd: Authentication token manipulation error

Which file should I change?

My current pam.d/system-auth is:
# cat pam.d/system-auth
#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth required pam_env.so
auth sufficient pam_unix.so likeauth nullok
auth required pam_deny.so

account required pam_unix.so

password required pam_cracklib.so retry=3
password sufficient pam_unix.so use_authtok nullok md5 shadow
password required pam_deny.so

session optional pam_keyinit.so revoke
session required pam_limits.so
session [success=1 default=ignore] pam_succeed_if.so service in
crond quiet use_uid
session required pam_unix.so

Posted by Dave Hinz on September 19th, 2007


On Wed, 19 Sep 2007 13:46:11 -0700, wong_powah@yahoo.ca <wong_powah@yahoo.ca> wrote:
Why would you want to do that? Don't use a password that's way too
short.

Posted by Russell Wood on September 20th, 2007


On 2007-09-19, wong_powah@yahoo.ca <wong_powah@yahoo.ca> wrote:
Stay away from UNIX, idiot.

--
Russell Wood
<http://www.dynode.net/~rjw/>

Posted by errata6170@mypacks.net on September 20th, 2007


[Posted and mailed]

In article <slrnff3k3t.pmt.bitbucket@union.lab.dynode.net>,
Russell Wood <bitbucket@dynode.net> writes:
And what makes you say that? Granted it isn't Gates'
Universal Computer Virus, which is suitable only for
those who need help wiping the drool from their chins,
but you must have some reason. Kindly inform the rest of
us so we might sleep better at night, knowing at least one
of the problems of the universe has been solved.


Posted by Moe Trin on September 20th, 2007


On Wed, 19 Sep 2007, in the Usenet newsgroup comp.unix.admin, in article
<1190234771.872022.112790@n39g2000hsh.googlegroups .com>, wong_powah@yahoo.ca
wrote:

How many different Usenet newsgroups are you going to post this question?
While the "Big Eight" list is only 2275 news groups, you are going to get
the same answer in many of them. DO NOT USE SHORT PASSWORDS, just as you
have been told in the comp.os.linux.* groups you asked this silly
question.

Old guy

Posted by Russell Wood on September 20th, 2007


On 2007-09-20, errata6170@mypacks.net <errata6170@mypacks.net> wrote:
Any cum stain that wants to enable the use of short passwords is a
fucking idiot. And since you couldn't determine that, you're a fucking
idiot too.

--
Russell Wood
<http://www.dynode.net/~rjw/>

Posted by wong_powah@yahoo.ca on September 20th, 2007


On Sep 19, 7:18 pm, Dave Hinz <DaveH...@gmail.com> wrote:
I do not want to use a short password.
I want the computer to reprompt me for a new password even though I
entered a short password accidentally.


Posted by wong_powah@yahoo.ca on September 20th, 2007


On Sep 19, 7:18 pm, Dave Hinz <DaveH...@gmail.com> wrote:
I do not want to use a short password.
I want the computer to reprompt me for a new password even though I
entered a short password accidentally.


Posted by errata6170@mypacks.net on September 20th, 2007


In article <slrnff4n60.r5a.bitbucket@union.lab.dynode.net>,
Russell Wood <bitbucket@dynode.net> writes:

I see you're reading challenged, too, as well as being obnoxious.
The OP has said he doesn't want to use short passwords but wants
to be prompted for a new password if he's accidentally entered a
too short one.

Perhaps it's you who should stay away from UNIX.


Posted by Dave Hinz on September 20th, 2007


On Thu, 20 Sep 2007 06:34:49 -0700, wong_powah@yahoo.ca <wong_powah@yahoo.ca> wrote:
That's like asking what kind of bucket to use to bail out your boat,
rather than asking how to patch the hole that's causing the problem in
the first place. While it is certainly possible to change how PAM
behaves in this scenerio, it's without value, except maybe for the
mental exercise itself. If that's the point, there are much more
enjoyable and informative exercises to undertake.



Similar Posts