From owner-freebsd-questions@FreeBSD.ORG Sat May 13 13:46:41 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4132016A480 for ; Sat, 13 May 2006 13:46:41 +0000 (UTC) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: from mail2.sea5.speakeasy.net (mail2.sea5.speakeasy.net [69.17.117.4]) by mx1.FreeBSD.org (Postfix) with ESMTP id DBD1543D97 for ; Sat, 13 May 2006 13:46:33 +0000 (GMT) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: (qmail 10295 invoked from network); 13 May 2006 13:46:33 -0000 Received: from dsl092-078-145.bos1.dsl.speakeasy.net (HELO be-well.ilk.org) ([66.92.78.145]) (envelope-sender ) by mail2.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP for ; 13 May 2006 13:46:33 -0000 Received: by be-well.ilk.org (Postfix, from userid 1147) id DA51C28426; Sat, 13 May 2006 09:46:32 -0400 (EDT) To: Sean Murphy References: <4464FE0B.4050509@calarts.edu> From: Lowell Gilbert Date: Sat, 13 May 2006 09:46:32 -0400 In-Reply-To: <4464FE0B.4050509@calarts.edu> (Sean Murphy's message of "Fri, 12 May 2006 14:28:43 -0700") Message-ID: <44y7x682br.fsf@be-well.ilk.org> User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.0.50 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: "'freebsd-questions@freebsd.org'" Subject: Re: How to require minium length passwords X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 May 2006 13:46:42 -0000 Sean Murphy writes: > I am trying to require users to put in 8 character passwords but as it > stands it will take 1 just fine. I Tried messing with the login.conf > file but it still looks like it accepts 1 character as an acceptable > password. here is what i did. Also will this restrict other programs > to the set minimum or can they just set the password to what there > parameters dictate? such as usermin password change util. I think the normal way to enforce that is via PAM. I don't use it myself, but I think pam_passwdqc(8) is what you need.