-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Benjamin Smee (strerror) wrote:
> heya,
> 
> On Tuesday 17 January 2006 13:12, PaweB Madej wrote:
> 
> Thats a very open question. Try specifying how the users are going to change 
> their passwords and what type of authentication you are using. On the 
> assumption that you are talking about authentication using PAM, try reading 
> the man pages on pam_cracklib. Something like:
> password            required pam_cracklib.so difok=3 minlength=10 dcredit=2 
> ocredit=2
> 
> in your /etc/pam.d/system-auth should do the trick.
> 

At this moment I use standard autentication. I already don't have any
plan of changing passwords, but want implement some good solution.
Already user can manage its passwords via passwd command. Is PAM secure
thing? Because I heard very different opinions about it, once that it is
great, once that it could make big security hole.

- --
Paweł Madej aka Nysander
Member of QuanTeam              | RLU #357047
http://wiki.quanteam.info       | Gentoo Linux User
http://forum-farmaceutyczne.org | GPG key: 5861680B
                                | keyserver: http://pgp.mit.edu
Kielce, Poland                  | UTF-8 Email Preferred

Looking to buy:  6x 73 GB UW3/Ultra160 SCSI 80 pin (SCA)
  ..::||::..     pair of PentiumIII Slot1 1GHz/ FSB 100 processors
  ..::||::..     2x 256 MB SDRAM ECC Registered
Got any of this mail me, with prize and shipping costs.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFDzP6JgvSMglhhaAsRArN8AKC1px3sigDJw76tbm8MypxsQJPcGwCfY0Ur
uKdGput3euUqXvdhIdqtjBw=
=oJrK
-----END PGP SIGNATURE-----

-- 
[email protected] mailing list

Reply via email to