Re: ??? Solaris password scheme ???

[Brad Arlt <arlt () cpsc ucalgary ca>]

On Tue, Oct 22, 2002 at 09:42:29AM -0500, Ansel, Kenny L. (Sytex Contractor) wrote:
> Does anyone know of a NATIVE way that will force users to create a password
> containing uppercase, lowercase, alpha, and numeric characters?
>
> The /etc/default/passwd does the MIN & MAX and length........
>
>
> If there aren't any NATIVE ways, can you all gimme some good 3rd party
> utilities or passwd replacements that you use to enforce a stronger passward
> construction??

In a word PAM.  Password has PAM support built into it.  There are a
number of Linux PAM modules that tie into cracklib and similar
products.  Cracklib will perform the same types of checks on a
password that Crack (or John the Ripper or L0phtCrack) does.

Take a look at the linux PAM pages on kernel.org (I think thats were
they are).  If there isn't one with Solaris support, they usually
aren't that difficult to port to Solaris (the port of pam_wheel took
15 minutes, and about 10 lines of code).

-----------------------------------------------------------------------
   __o          Bradley Arlt                    Security Team Lead
 _ \<_          arlt () cpsc ucalgary ca                University Of Calgary
(_)/(_)         I should be biking right now.   Computer Science