From owner-freebsd-current@FreeBSD.ORG  Thu Aug 14 15:55:09 2003
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4166A37B401
	for <current@freebsd.org>; Thu, 14 Aug 2003 15:55:09 -0700 (PDT)
Received: from symbion.srrc.usda.gov (symbion.srrc.usda.gov [199.133.86.40])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C595843FCB
	for <current@freebsd.org>; Thu, 14 Aug 2003 15:55:07 -0700 (PDT)
	(envelope-from gjohnson@srrc.ars.usda.gov)
Received: from node1.cluster.srrc.usda.gov (localhost [127.0.0.1])
	by symbion.srrc.usda.gov (8.12.9/8.12.9) with ESMTP id h7EMsvx7002805
	for <current@freebsd.org>; Thu, 14 Aug 2003 17:54:57 -0500 (CDT)
	(envelope-from glenn@node1.cluster.srrc.usda.gov)
Received: (from glenn@localhost)h7EMsrkp002804
	for current@freebsd.org; Thu, 14 Aug 2003 17:54:53 -0500 (CDT)
	(envelope-from glenn)
Date: Thu, 14 Aug 2003 17:54:53 -0500
From: Glenn Johnson <gjohnson@srrc.ars.usda.gov>
To: current@freebsd.org
Message-ID: <20030814225453.GA1385@node1.cluster.srrc.usda.gov>
Mail-Followup-To: current@freebsd.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.4i
Subject: password strength checking not consistently implemented
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Aug 2003 22:55:09 -0000

I have set up the password strength checking system using
pam_passwdqc.so, set in /etc/pam.d/passwd.  I have also set up password
expiration.

When a user issues the 'passwd' command, the password strength checking
module works as expected.  When a user logs in via the console after the
password expiry time has passed, the login program prompts for a new
password before the session begins.  However, this password change has
no strength check at all.  Is there some other change I need to make to
may pam configuration?

Thanks.


-- 
Glenn Johnson
USDA, ARS, SRRC			 Phone: (504) 286-4252
New Orleans, LA 70124		e-mail: gjohnson@srrc.ars.usda.gov