From owner-freebsd-hackers Tue Mar 18 15:26:58 2003 Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id AF84837B401 for ; Tue, 18 Mar 2003 15:26:57 -0800 (PST) Received: from flood.ping.uio.no (flood.ping.uio.no [129.240.78.31]) by mx1.FreeBSD.org (Postfix) with ESMTP id 02DE043FA3 for ; Tue, 18 Mar 2003 15:26:57 -0800 (PST) (envelope-from des@ofug.org) Received: by flood.ping.uio.no (Postfix, from userid 2602) id 68DB15308; Wed, 19 Mar 2003 00:26:53 +0100 (CET) X-URL: http://www.ofug.org/~des/ X-Disclaimer: The views expressed in this message do not necessarily coincide with those of any organisation or company with which I am or have been affiliated. To: Julian Elischer Cc: hackers@freebsd.org Subject: Re: rumour of password aging failure in 4.7/4.8RC From: des@ofug.org (Dag-Erling =?iso-8859-1?q?Sm=F8rgrav?=) Date: Wed, 19 Mar 2003 00:26:53 +0100 In-Reply-To: (Julian Elischer's message of "Tue, 18 Mar 2003 14:45:25 -0800 (PST)") Message-ID: User-Agent: Gnus/5.090015 (Oort Gnus v0.15) Emacs/21.2 References: MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Julian Elischer writes: > The other thing they are on about is "3 tries and you are out" password > lockouts. /usr/src/contrib/libpam/modules/pam_tally.c is what they want. > We're trying to 'resurect' it and see if it still works with 4.8. > is there a similar file for the new PAM code? No, but I'll probably write one soon as it will allow us to claim that FreeBSD fulfills the CAPP requirements for authentication strength. > Are old and new PAM modules in any way compatible? If we wrote one that > ran on 4.x would we be able to continue to run int (even with a > recompile) when we switch to 5.3? Depends on how carefully you write it. The reverse (that a module written for 5.x will work on 4.x with minimal modifications) is more likely to be true. DES --=20 Dag-Erling Sm=F8rgrav - des@ofug.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message