retitle 87301 [POST-SARGE] [CHRISTIAN] Inappropiate default for PASS_MAX_LEN when MD5 used tags 87301 patch thanks
The attached patch moves the PASS_MAX_LEN line to the end of the login.defs file, commented, in the "obsoleted by PAM" section, as Nicolas clearly demonstrated that this value is only used when PAM is not used. --
--- debian/login.defs 2005-03-20 15:48:28.000000000 +0100 +++ debian/login.defs.new 2005-04-22 18:08:43.000000000 +0200 @@ -204,13 +204,6 @@ LOGIN_TIMEOUT 60 # -# Number of significant characters in the password for crypt(). -# Default is 8, don't change unless your crypt() is better. -# If using MD5 in your PAM configuration, set this higher. -# -PASS_MAX_LEN 8 - -# # Require password before chfn/chsh can make any changes. # CHFN_AUTH yes @@ -322,3 +315,4 @@ #NOLOGINS_FILE #ISSUE_FILE #PASS_MIN_LEN +#PASS_MAX_LEN
