Hello,

We have created custom Debian 13 (trixie) installation ISOs with
pre-configuration, and
we would like to follow up on this request with a specific use case.

Our installations create only the root account (passwd/make-user false), and
our security policy requires that the root password be at least 7
characters long,
including one uppercase letter, one lowercase letter, one digit, and
one special character.
Currently, user-setup only checks that the password is not empty and
that both entries match; it does not validate the password strength,
and I have not found
any preseed option to enforce any policy.

It would be very helpful if the policy could be configured via preseed, for
example:

  d-i passwd/policy/mode      select       enforce
  d-i passwd/policy/minlen    string       7
  d-i passwd/policy/require   multiselect  uppercase, lowercase, digit, special

where passwd/policy/mode could be one of the following:
 - none: current behavior, no validation (default);
 - warn: display which requirements are missing and allow the user to keep the
   password (in line with what was suggested earlier in this bug report);
 - enforce: reject the password and ask again until it complies.

Thank you,
Emerson Comar

Reply via email to