Re: Red Hat Linux: passwd

From: Johannes Ullrich (jullrich@euclidian.com)
Date: 11/27/02

  • Next message: Johannes Ullrich: "Re: Part of the web page being MODIFIED !"
    Date: Wed, 27 Nov 2002 07:29:35 -0500
    From: "Johannes Ullrich" <jullrich@euclidian.com>
    To: "ALBEE,RUSSELL. S FC2 (CV63 CS5)" <ALBEER@kitty-hawk.navy.mil>
    
    
    

    The password check uses pam's 'cracklib' interface. For some details on
    this features see /usr/share/doc/pam-0.75/txts/README.pam_cracklib

    'cracklib' uses a wordlist from /usr/share/dict/words .

    some details about cracklib:
    http://www.users.dircon.co.uk/~crypto/download/cracklib,2.7.txt

    On Wed, 27 Nov 2002 05:50:25 +0900
    "ALBEE,RUSSELL. S FC2 (CV63 CS5)" <ALBEER@kitty-hawk.navy.mil> wrote:

    > How does passwd determine if a password is based off a dictionary word or
    > not? Is there a file somewhere it references, a dictionary built into
    > the code, or a algorithim it uses to check the password?
    >
    > Thanks,
    >
    > Russell
    >

    -- 
    --------------------------------------------------------------------
    jullrich@euclidian.com             Collaborative Intrusion Detection
                                             join http://www.dshield.org
    
    




    Relevant Pages

    • Re: Red Hat Linux: passwd
      ... It's a part of cracklib... ... > How does passwd determine if a password is based off a dictionary word or ...
      (Security-Basics)
    • Poppassd-1.8.2 and PAM
      ... When calling 'passwd' directly, cracklib will ... but when using the PAM modules inside of poppassd, ...
      (comp.security.misc)
    • SOLVED: Re: passwd: Critical error - immediate abort
      ... The problem was that cracklib had been uninstalled somehow. ... passwd still gives me an error message after I do this, ... RPM version of pam is 0.77.0-1 ... I get the same error as with "passwd robsz1" as root. ...
      (comp.os.linux.misc)