On Fri, 2003-12-12 at 21:23, Todd O'Bryan wrote:
> Does anyone know of an add-on you can use with a Windows domain to 
> check the security of the password before it allows a change? With a 
> terminal server system I had, the server complained if the password was 
> too close to a dictionary word, too close to the student login, 7 
> digits (i.e., looked like a phone number), etc.
> 
> I'm sure my students (I teach high school, too) have picked really bad 
> passwords, too, but I have no good way to enforce the picking of good 
> ones.
> 
> Todd
> 
> On Dec 12, 2003, at 3:30 AM, Ross McInnes (Systems) wrote:
> 
> > i totally agree. unfortunatly my user base is mostly 16-18 year olds.
> > getting them to put anything other than thier football team, phone 
> > number
> > or boyfriend/girlfriend's name is quite a task in it self.
> >

Charming, aren't they ;-)

I build my samba with:

#!/bin/sh
LIBS="-lcrack" CFLAGS="-g" ./configure --with-utmp --with-pam
--with-quotas --with-tdbsam --with-ldapsam --with-syslog

And use the attached patch to enforce 'cracklib' strength passwords.

We can't include this directly in Samba, as cracklib is not under a
GPL-compatible licence :-(

Andrew Bartlett

-- 
Andrew Bartlett                                 [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org     http://build.samba.org     http://hawkerc.net

Attachment: signature.asc
Description: This is a digitally signed message part

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Reply via email to