Group: comp.os.linux.security


Subject: passwd prompts for new password only once when a short password is entered
From: Unruh
Date: 9/20/2007 9:21:27 PM
wong_powah@yahoo.ca writes: >On Sep 19, 6:45 pm, "ynotssor" <ynots...@example.org> wrote: >> Innews:1190235977.314746.266220@k79g2000hse.googlegroups.com, >> >> wong_po...@yahoo.ca <wong_po...@yahoo.ca> wrote: >> > My computer behaves as follows when a short password is entered: >> >> Your question has already been answered the last time you posed it -- if you >> won't bother reading the replies, then please don't ask. >I had already read the replies, but still think that a solution is >possible because out of the five linux (RH 7.2, FC3, FC6) computers I >had, one RH 7.2 computer had my desired behavior. >I assumed that /etc/pam.d/system-auth is the file to change (is that >true?), so I modified the system-auth file on a FC6 computer to look >the same as the working RH 7.2 computer, reboot the FC6 computer. >However, the FC6 computer still does not have my desired behavior, so >I posted the system-auth file here, hoping that someone may tell me >the solution. Since we have no idea what you want ( you complain but do not explain), it is unclear how you can be helped. IF root is entering a password for a user, two things happen-- pam does NOT ask for the old password, and pam allows the new password to entered even if it does not satisfy the criteria, since it assumes that root knows what it is doing. Ie, if as root you insist on using the short password for the user, then it is on your head. This is exactly what it should do, and noone is going to want to change that. If it is a user, then the old password is asked for, AND the criteria are applied. Ie, the password is rejected and things start again. That is how it works. And that is how most people want it to work. If you want it to work differently, you have the source code, go to it.