RE: Password aging problem

["James Kelty" <jamesk@ashlandagency.com>]

Actually! I figured out the problem, and it was the pam version. I had to
get the upgrade from RedHat, but it did work. So, at least they will once in
a while have to change the password.

We are behind a firewall as well, but not securing the passwords on dev
systems is just a bad idea. I can't think that the firewall will protect
ANYTHING, just slow people down a little. And, as most attacks ACTUALLY come
from inside the network that the firewall is 'protecting', then, you have to
take that into consideration as well.

I once had a bet with a developer that I could hack into his dev system
account in less than 20 minutes, and surprise surprise  I was able to
because of a weak password choice. While I agree that 'B1u3 K@t!' isn't the
best password in the world, it should have been, and would have been if not
for a bug, acceptable to pam.

So, onto password genarators!

Thanks guys!

-James

-----Original Message-----
From: linux-admin-owner@vger.kernel.org
[mailto:linux-admin-owner@vger.kernel.org]On Behalf Of James Kelty
Sent: Friday, June 28, 2002 2:46 PM
To: linux-admin@vger.kernel.org
Subject: Password aging problem


Hello,

I have a RH 7.1 box running with shadow-utils-20000826-4 version, and so far
the prompt to change the password works, but it does not want to accept ANY
new password. Even the real sturdy passwords like B1u3 K@t! . The system
complians that they are too simple. Now, while I agree that simple passwords
are NOT good, there has to be something reasonable here. How can I fix this?

Thanks!

-James


James Kelty
Sr. Unix Systems Administrator
Everbase Systems, LLC
541.488.0801
jamesk@everbase.net

-
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html