Bug 2126640

Summary: RFE allow to configure pam_pwhistory with configuration file
Product: Red Hat Enterprise Linux 9 Reporter: Iker Pedrosa <ipedrosa>
Component: pamAssignee: Iker Pedrosa <ipedrosa>
Status: CLOSED ERRATA QA Contact: Anuj Borah <aborah>
Severity: unspecified Docs Contact: lmcgarry
Priority: medium    
Version: 9.0CC: aborah, aboscatt, anikandr, joerg.kastning, lmcgarry, pbrezina, suwu
Target Milestone: rcKeywords: FutureFeature, Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: review
Fixed In Version: pam-1.5.1-13.el9 Doc Type: Enhancement
Doc Text:
.Configure `pam_pwhistory` using a configuration file With this update, you can configure the `pam_pwhistory` module in the `/etc/security/pwhistory.conf` configuration file. The `pam_pwhistory` module saves the last password for each user in order to manage password change history. Support has also been added in `authselect` which allows you to add the `pam_pwhistory` module to the PAM stack.
Story Points: ---
Clone Of: 2068461 Environment:
Last Closed: 2023-05-09 08:15:08 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2068461    
Bug Blocks: 2063379    

Comment 1 Iker Pedrosa 2022-09-14 08:00:34 UTC
master:
    pam_pwhistory: load config from file - ba2f6dd8b81ea2a58262c1709bec906b6852591d
    pam_pwhistory: document config load from file - 1180bde923a22605fe8075cd1fe7992ed7513411

Comment 8 lmcgarry 2023-03-01 16:39:33 UTC
Hi Iker,
Does this need to be added to the 9.2 beta release notes? If so, could you provide some text in the format:

Feature: 

Reason: 

Result: 

Many thanks

Comment 9 Iker Pedrosa 2023-03-02 11:22:26 UTC
Feature: Enable pam_pwhistory from a configuration file. By default this file is /etc/security/pwhistory.conf.
Reason: Facilitating system configuration via authselect.
Result: Our customers can use authselect to configure pam_pwhistory in the PAM stack, and in turn, the can configure pam_pwhistory with its own file.

Comment 15 errata-xmlrpc 2023-05-09 08:15:08 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (pam bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:2466