[3165] in RedHat Linux List
Re: Fascist PAM
daemon@ATHENA.MIT.EDU (Michael K. Johnson)
Thu Nov 7 12:02:19 1996
To: redhat-list@redhat.com
From: "Michael K. Johnson" <johnsonm@redhat.com>
In-reply-to: Your message of "07 Nov 1996 09:10:02 GMT."
<19961107091002.24680.qmail@brouhaha.com>
Date: Thu, 07 Nov 1996 11:45:45 -0500
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
Eric Smith writes:
>Eric Lee Green <exec@prysm.net> wrote:
>> No dice! "Password too short."
>>
>> Is there any way to turn off this fascist %!$#? (Guess I can go ahead and
>> go get the "passwd" program from 3.03, sigh).
>>
>> "fascist.c" might keep the newbies from using stupid passwords, but gosh
>> darn it, some of us NEED stupid passwords!
>
>Donnie Barnes <djb@redhat.com> replied:
>> As near as I can tell, you can't do it. I'll look into it now,
>> because you're right, there are times when folks *should* be able
>> to do this.
>
>On some systems, the passwd program bypasses all the facist checking if
>it is run by root. This seems like the right thing to me. Although perhaps
>you could argue that it should give a warning in that case.
OK, Donnie and I have fixed this, and we'll have a fixed RPM out soon
(today or tomorrow, probably; in the next batch, whenever that is...)
root will be allowed to set any password. fascist checks will only
apply to non-root users. Also, root can turn off fascist checks completely
with the pam_unix_passwd argument fascist=false in /etc/pam.conf,
like this:
passwd password required /lib/security/pam_unix_passwd.so fascist=false
michaelkjohnson
"Ever wonder why the SAME PEOPLE make up ALL the conspiracy theories?"
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
