Red Hat Bugzilla – Bug 60495
RFE: add an option to pam_cracklib which only checks password length.
Last modified: 2007-04-18 12:40:40 EDT
Description of Problem:
The minlen option is very misleading. It actually checks the simplicity of the
password not its length. Another option should be added which simply checks the
length of the password typed by the user regardless of what characters are in
the password. Currently this can be worked around by just setting ucredit,
lcredit, dcredit, and ocredit to zero, but we really should treat simplicity
independant of the number of characters that make up the password string. This
would make it easier for people to set up security policies like:
Password must be at least X characters long with 2 or more digits/special
I think all this would give many of our customers the behavior they are used to
Version-Release number of selected component (if applicable):
Steps to Reproduce:
> Password must be at least X characters long with 2 or more
> digits/special characters etc.
This is already possible with pam-0.77 you just have to set the
xcredit values to negative numbers.