Re: [vchkpw] Vchkpw pass word policy

[Jeremy Kitchen]

On Monday 06 February 2006 21:09, Rizwan Iqbal Malik wrote:
 Dear All,

 We wish to enforce pass word policy on the users of our mail system . Can
 it be done using Vpopmail. Common policy include changing password on first
 logon  etc...

I've actually considered doing this in the past.  I never got around to it, 
but check out cracklib:
http://www.users.dircon.co.uk/~crypto/download/cracklib,2.7.txt

basically you would place a call to fascist_check() before you actually make 
the password change (assuming we're talking about doing this when they change 
their passwords) and if that fails, yell at them, tell them why you're 
yelling at them, and let them try again.  If it doesn't fail, the password is 
'secure' and to go ahead and change it.

-Jeremy

-- 
Jeremy Kitchen ++ [EMAIL PROTECTED]

In the beginning was The Word and The Word was Content-type: text/plain
  -- The Word of Bob.


pgpY92kDoD1bF.pgp
Description: PGP signature

Re: [vchkpw] Vchkpw pass word policy

[Tom Collins]

On Feb 7, 2006, at 4:59 PM, Jeremy Kitchen wrote:

On Monday 06 February 2006 21:09, Rizwan Iqbal Malik wrote:

Dear All,

We wish to enforce pass word policy on the users of our mail system .  
Can
it be done using Vpopmail. Common policy include changing password on  
first

logon  etc...


I've actually considered doing this in the past.  I never got around  
to it,

but check out cracklib:
http://www.users.dircon.co.uk/~crypto/download/cracklib,2.7.txt


John Peacock posted a patch to qmailadmin-devel on January 3, 2005 to  
integrate cracklib with QmailAdmin.


http://sourceforge.net/mailarchive/forum.php? 
thread_id=6272932forum_id=34241

[scroll to the end of the thread]

No idea whether it will apply to the current versions or not.  It might  
give you what you need though, still allowing an admin to use vchkpw to  
set the password to anything they'd like.


--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
You don't need a laptop to troubleshoot high-speed Internet:  
sniffter.com