Re: Password security/Weak Password lockout

2009-01-20 Thread Daniel Burrows
On Tue, Jan 20, 2009 at 02:07:52AM -0500, Paul Gupta was heard to say: > I have seen opensuse and perhaps fedora do the same thing during the > installation. It'll spit out a warning saying similar to "This password > is too weak, are you sure you want to use it?" > > I'm assuming (which I h

Re: Password security/Weak Password lockout

2009-01-20 Thread Juha Tuuna
Paul Gupta wrote: > By what mechanism does debian decide whether or not a password is too > weak etc. > ... > What is it exactly? AND How would one configure it to be stricter or > more lenient with password selection? I use libpam-cracklib to protect from dictionary attacks. Also installed some d

Re: Password security/Weak Password lockout

2009-01-19 Thread Mark Allums
Paul Gupta wrote: By what mechanism does debian decide whether or not a password is too weak etc. I have seen opensuse and perhaps fedora do the same thing during the installation. It'll spit out a warning saying similar to "This password is too weak, are you sure you want to use it?" I'm

Re: Password security/Weak Password lockout

2009-01-19 Thread Mark Allums
Paul Gupta wrote: By what mechanism does debian decide whether or not a password is too weak etc. I have seen opensuse and perhaps fedora do the same thing during the installation. It'll spit out a warning saying similar to "This password is too weak, are you sure you want to use it?" I'm

Password security/Weak Password lockout

2009-01-19 Thread Paul Gupta
By what mechanism does debian decide whether or not a password is too weak etc. I have seen opensuse and perhaps fedora do the same thing during the installation. It'll spit out a warning saying similar to "This password is too weak, are you sure you want to use it?" I'm assuming (which I h

Re: Password Security

2001-12-27 Thread Paul 'Baloo' Johnson
On Thu, 27 Dec 2001, Mike Barton wrote: > In addition to forced password changes, I'm looking for something to sit > between the user and passwd to enforce variably strong passwords. Anyone > have any favorite techniques/programs they'd care to share? I have mixed feelings about forced password c

Re: Password Security

2001-12-27 Thread Andrew Barros
Mike, I think cracklib is what you want. Lookat the libpam-cracklib package -ajb On Thu, Dec 27, 2001 at 11:36:02AM -0500, Mike Barton wrote: > In addition to forced password changes, I'm looking for something to sit > between the user and passwd to enforce variably strong passwo

Password Security

2001-12-27 Thread Mike Barton
In addition to forced password changes, I'm looking for something to sit between the user and passwd to enforce variably strong passwords. Anyone have any favorite techniques/programs they'd care to share? Thanks for the input Mike

Re: password security: john, cops, etc

1999-01-26 Thread Jean Pierre LeJacq
On Tue, 26 Jan 1999, Pere Camps wrote: > > There's cracklib which is a proactive checker in that it checks > > passwords as the users set them. > > Currently there are several bugs for the package but I'm actively > > working on them. Should see a new upload in a few days. > > Please tell

Re: password security: john, cops, etc

1999-01-26 Thread Pere Camps
Jean, > There's cracklib which is a proactive checker in that it checks > passwords as the users set them. > Currently there are several bugs for the package but I'm actively > working on them. Should see a new upload in a few days. Please tell me when you do. Thank you very muc

Re: password security: john, cops, etc

1999-01-26 Thread Jean Pierre LeJacq
On Tue, 26 Jan 1999, Pere Camps wrote: > Is there any debianized program to check the 'strictness' of > passwords. Something like john, cops, etc. > > I'm also looking for a passwd replacement that enforces 'strict' > passwords. There's cracklib which is a proactive checker in that i

password security: john, cops, etc

1999-01-26 Thread Pere Camps
Hi! Is there any debianized program to check the 'strictness' of passwords. Something like john, cops, etc. I'm also looking for a passwd replacement that enforces 'strict' passwords. TIA! -- p.

Re: Root password security

1998-10-15 Thread Stephen J. Carpenter
On Thu, Oct 15, 1998 at 03:36:13PM +, Thomas Lakofski wrote: > Physical security of the box in question is the only real measure you can > take (lock it in a box). Failing this, get a machine (some newer Compaq > workstations have this) that lets you restrict floppy booting with BIOS > and has

Re: Root password security

1998-10-15 Thread Thomas Lakofski
8, ZS Choy wrote: > From: ZS Choy <[EMAIL PROTECTED]> > To: debian-user > Date: Thu, 15 Oct 1998 21:26:12 +0800 > Subject: Root password security > > I wish to know if any expert knows how to improve root password > ptotection/security which could not be disable with

Root password security

1998-10-15 Thread ZS Choy
I wish to know if any expert knows how to improve root password ptotection/security which could not be disable with "blanking out of root password" using boot/root floppy. Any help will be greatly appreciated. Thks & b.r. z.s.