Description of Problem: The minlen option is very misleading. It actually checks the simplicity of the password not its length. Another option should be added which simply checks the length of the password typed by the user regardless of what characters are in the password. Currently this can be worked around by just setting ucredit, lcredit, dcredit, and ocredit to zero, but we really should treat simplicity independant of the number of characters that make up the password string. This would make it easier for people to set up security policies like: Password must be at least X characters long with 2 or more digits/special characters etc. I think all this would give many of our customers the behavior they are used to and expect. Version-Release number of selected component (if applicable): How Reproducible: Steps to Reproduce: 1. 2. 3. Actual Results: Expected Results: Additional Information:
> Password must be at least X characters long with 2 or more > digits/special characters etc. This is already possible with pam-0.77 you just have to set the xcredit values to negative numbers.