Re: Red Hat Linux: passwd

From: Andy Hibbins (andy@andyhibbins.me.uk)
Date: 11/27/02

  • Next message: Jason Dixon: "Re: *nix firewall setup" 
    Date: Wed, 27 Nov 2002 16:49:40 -0000 (GMT)
From: "Andy Hibbins" <andy@andyhibbins.me.uk>
To: <security-basics@securityfocus.com>

    > How does passwd determine if a password is based off a dictionary word
    > or not? Is there a file somewhere it references, a dictionary built
    > into the code, or a algorithim it uses to check the password?

    If you look at the /etc/pam.d/passwd file you'll see that passwd checks
    the password against the pam_cracklib.so module. After running strings
    against this module it appears pam_cracklib.so calls the libcrack.so.x
    shared library.

    Hope this helps.

    Andy Hibbins

    _______________________________________
    This email was sent using SquirrelMail.
    "Webmail for nuts!"
    http://squirrelmail.org/

    Relevant Pages

    • Re: Is "/usr/bin/passwd" working as devlers expected?
      ... Changing password for user ). ... UNIX password: New UNIX password: BAD PASSWORD: it is based on a dictionary word ... passwd: Authentication token manipulation error ...
      (Fedora)
    • Re: Is "/usr/bin/passwd" working as devlers expected?
      ... Changing password for user ). ... UNIX password: New UNIX password: BAD PASSWORD: it is based ... New UNIX password: BAD PASSWORD: it is based on a dictionary word ... passwd: Authentication token manipulation error ...
      (Fedora)
    • Re: Is "/usr/bin/passwd" working as devlers expected?
      ... Changing password for user ). ... UNIX password: New UNIX password: BAD PASSWORD: it is based ... New UNIX password: BAD PASSWORD: it is based on a dictionary word ... passwd: Authentication token manipulation error ...
      (Fedora)
    • Re: Is "/usr/bin/passwd" working as devlers expected?
      ... Changing password for user ). ... UNIX password: New UNIX password: BAD PASSWORD: it is based ... New UNIX password: BAD PASSWORD: it is based on a dictionary word ... passwd: Authentication token manipulation error ...
      (Fedora)
    • Red Hat Linux: passwd
      ... How does passwd determine if a password is based off a dictionary word or ... Is there a file somewhere it references, a dictionary built into the ...
      (Security-Basics)