Package: libpam-modules
Version: 0.76-22

If a user's password is changed by root, pam_unix ignores the remember=
parameter and the old password hash is not placed in /etc/security/opasswd.
Nothing prevents the user from changing their password back to the previous
(potentially compromised) value.

-- 
Brian Ristuccia
[EMAIL PROTECTED]
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to