Date: Thu, 14 Aug 2003 17:54:53 -0500 From: Glenn Johnson <gjohnson@srrc.ars.usda.gov> To: current@freebsd.org Subject: password strength checking not consistently implemented Message-ID: <20030814225453.GA1385@node1.cluster.srrc.usda.gov>
next in thread | raw e-mail | index | archive | help
I have set up the password strength checking system using pam_passwdqc.so, set in /etc/pam.d/passwd. I have also set up password expiration. When a user issues the 'passwd' command, the password strength checking module works as expected. When a user logs in via the console after the password expiry time has passed, the login program prompts for a new password before the session begins. However, this password change has no strength check at all. Is there some other change I need to make to may pam configuration? Thanks. -- Glenn Johnson USDA, ARS, SRRC Phone: (504) 286-4252 New Orleans, LA 70124 e-mail: gjohnson@srrc.ars.usda.gov
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030814225453.GA1385>