From owner-freebsd-doc@FreeBSD.ORG Tue Dec 3 23:10:01 2013 Return-Path: Delivered-To: freebsd-doc@smarthost.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id EBD54CB5 for ; Tue, 3 Dec 2013 23:10:00 +0000 (UTC) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id C75731A2F for ; Tue, 3 Dec 2013 23:10:00 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.7/8.14.7) with ESMTP id rB3NA0bu031332 for ; Tue, 3 Dec 2013 23:10:00 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.7/8.14.7/Submit) id rB3NA0K5031331; Tue, 3 Dec 2013 23:10:00 GMT (envelope-from gnats) Resent-Date: Tue, 3 Dec 2013 23:10:00 GMT Resent-Message-Id: <201312032310.rB3NA0K5031331@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-doc@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Ryan Gerstenkorn Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 6C9C9CA0 for ; Tue, 3 Dec 2013 23:08:42 +0000 (UTC) Received: from oldred.freebsd.org (oldred.freebsd.org [8.8.178.121]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 57FDD1A22 for ; Tue, 3 Dec 2013 23:08:42 +0000 (UTC) Received: from oldred.freebsd.org ([127.0.1.6]) by oldred.freebsd.org (8.14.5/8.14.7) with ESMTP id rB3N8gZb007385 for ; Tue, 3 Dec 2013 23:08:42 GMT (envelope-from nobody@oldred.freebsd.org) Received: (from nobody@localhost) by oldred.freebsd.org (8.14.5/8.14.5/Submit) id rB3N8gBP007384; Tue, 3 Dec 2013 23:08:42 GMT (envelope-from nobody) Message-Id: <201312032308.rB3N8gBP007384@oldred.freebsd.org> Date: Tue, 3 Dec 2013 23:08:42 GMT From: Ryan Gerstenkorn To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Subject: docs/184482: passwd (1) man page incorrect info about login.conf X-BeenThere: freebsd-doc@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Documentation project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Dec 2013 23:10:01 -0000 >Number: 184482 >Category: docs >Synopsis: passwd (1) man page incorrect info about login.conf >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-doc >State: open >Quarter: >Keywords: >Date-Required: >Class: doc-bug >Submitter-Id: current-users >Arrival-Date: Tue Dec 03 23:10:00 UTC 2013 >Closed-Date: >Last-Modified: >Originator: Ryan Gerstenkorn >Release: 9-STABLE >Organization: >Environment: FreeBSD FreeBSD92 9.2-STABLE FreeBSD 9.2-STABLE #1: Fri Nov 1 20:37:16 PDT 2013 root@FreeBSD92:/usr/obj/usr/src/sys/GENERIC amd64 >Description: In the passwd (1) man page it says the following: "The new password should be at least six characters long (which may be overridden using the login.conf(5) ``minpasswordlen'' setting for a user's login class) and not purely alphabetic." "The new password should contain a mixture of upper and lower case charac- ters (which may be overridden using the login.conf(5) ``mixpasswordcase'' setting for a user's login class). Allowing lower case passwords may be useful where the password file will be used in situations where only lower case passwords are permissible, such as when using Samba to authen- ticate Windows clients. In all other situations, numbers, upper case letters and meta characters are encouraged." under Files: "/etc/login.conf login class capabilities database" under See Also: login(1), login.conf(5), However it seems that login.conf is no longer used by passwd(1), and instead password length and complexity is handled by pam with the pam_passwdqc module. >From login.conf: "The minpasswordlen and minpasswordcase facilities for enforcing restric- tions on password quality, which used to be supported by login.conf, have been superseded by the pam_passwdqc(8) PAM module." >How-To-Repeat: man passwd;man login.conf >Fix: Sorry no patch, just replace paragraphs before with info about how to change the password complexity requirements with pam... or just refer to pam and pam_passwdqc(8) >Release-Note: >Audit-Trail: >Unformatted: