Thanks for the reply.  Yes, I am trying to set a hard minimum password
length and I can verify that as of today (running an up-to-date
version of Hardy) setting the "min" option to 8 still allows me to
create users with a password length of 6.  This was the same behavior
I saw on Gutsy as well.

Thank you for taking a look at this.

Chris Bozic

On Wed, Jul 30, 2008 at 3:55 AM, Steve Langasek
<[EMAIL PROTECTED]> wrote:
> Hi Chris,
>
> Have you read the pam_cracklib manpage?  The 'minlen' option is
> unfortunately named, because it is /not/ a minimum acceptable password
> length, it's a minimum acceptable password *strength*.  Because
> pam_cracklib assigns "credits" for use of each character class, using a
> mix of upper/lowercase letters, numbers, and symbols will cause
> pam_cracklib to see the password as "longer" than it really is.
>
> If you are trying to set a hard minimum for password length, you can use
> the 'min=N' option to pam_unix itself, with or without pam_cracklib.
>
> If this is not the problem you're having, then I'll have to take a
> second look.  Your usage looks correct, but I haven't yet tested here to
> be sure it works the way I understand it's supposed to.
>
> ** Changed in: pam (Ubuntu)
>   Importance: Undecided => Medium
>
> --
> changes to /etc/pam.d/common-password with cracklib don't work
> https://bugs.launchpad.net/bugs/139999
> You received this bug notification because you are a direct subscriber
> of the bug.
>

-- 
changes to /etc/pam.d/common-password with cracklib don't work
https://bugs.launchpad.net/bugs/139999
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to