On Thu, 29 Jun 2000, Brad P wrote:

> Hello!
>    I'd like to quickly say hi and ask a question. My name is Brad, I
> work here in Montpelier for the state where I run various sco and
> linux servers.
>    I recently installed a linux machine to act as a mail server -
> Everything is fine except I can't seem to figure out how to turn of
> the password checking feature. Everytime someone changes a password,
> it never lets them change it because it's base on a dictionary word
> etc etc. Does anyone know how to turn this off?
>    I looked at the PAM Administrators guide - even tried adjusting
> /etc/pam.d/passwd - but no luck.
>   Any ideas?

Yes.  DON'T TURN IT OFF!  It's there for a reason, ESPECIALLY on a mail
server. Instead, educate your users how to chose secure passwords.  This
is a feature, not a bug. 

Also, make sure you're running at least linux 2.2.16 as your kernel.  If
you don't, your mail server is vulnerable to attack.


-- 
Derek Martin
System Administrator
Mission Critical Linux
[EMAIL PROTECTED] 


**********************************************************
To unsubscribe from this list, send mail to
[EMAIL PROTECTED] with the following text in the
*body* (*not* the subject line) of the letter:
unsubscribe gnhlug
**********************************************************

Reply via email to