Unix administration - passwd prompts for new password only once when a short password is entered

This is Interesting: Free IT Magazines  
Home > Archive > Unix administration > September 2007 > passwd prompts for new password only once when a short password is entered





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author passwd prompts for new password only once when a short password is entered
wong_powah@yahoo.ca

2007-09-19, 7:20 pm

My computer behaves as follows when a short password is entered:
# passwd testing
Changing password for user testing.
New UNIX password:
BAD PASSWORD: it is WAY too short
Retype new UNIX password:
No password supplied
No password supplied
No password supplied
passwd: Authentication token manipulation error
You have new mail in /var/spool/mail/root

My desired behavior is that passwd reprompts three times as follows:
# passwd testing
Changing password for user testing
New UNIX password:
BAD PASSWORD: it's WAY too short
New UNIX password:
BAD PASSWORD: it's WAY too short
New UNIX password:
BAD PASSWORD: it's WAY too short
passwd: Authentication token manipulation error

Which file should I change?

My current pam.d/system-auth is:
# cat pam.d/system-auth
#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth required pam_env.so
auth sufficient pam_unix.so likeauth nullok
auth required pam_deny.so

account required pam_unix.so

password required pam_cracklib.so retry=3
password sufficient pam_unix.so use_authtok nullok md5 shadow
password required pam_deny.so

session optional pam_keyinit.so revoke
session required pam_limits.so
session [success=1 default=ignore] pam_succeed_if.so service in
crond quiet use_uid
session required pam_unix.so

Dave Hinz

2007-09-19, 7:20 pm

On Wed, 19 Sep 2007 13:46:11 -0700, wong_powah@yahoo.ca <wong_powah@yahoo.ca> wrote:
> My computer behaves as follows when a short password is entered:
> # passwd testing
> Changing password for user testing.
> New UNIX password:
> BAD PASSWORD: it is WAY too short


> My desired behavior is that passwd reprompts three times as follows:
> # passwd testing
> Changing password for user testing
> New UNIX password:
> BAD PASSWORD: it's WAY too short
> New UNIX password:
> BAD PASSWORD: it's WAY too short
> New UNIX password:
> BAD PASSWORD: it's WAY too short
> passwd: Authentication token manipulation error


> Which file should I change?


Why would you want to do that? Don't use a password that's way too
short.
Russell Wood

2007-09-20, 1:27 am

On 2007-09-19, wong_powah@yahoo.ca <wong_powah@yahoo.ca> wrote:
> My computer behaves as follows when a short password is entered:
> # passwd testing
> Changing password for user testing.
> New UNIX password:
> BAD PASSWORD: it is WAY too short


Stay away from UNIX, idiot.

--
Russell Wood
<http://www.dynode.net/~rjw/>
errata6170@mypacks.net

2007-09-20, 1:27 am

[Posted and mailed]

In article <slrnff3k3t.pmt.bitbucket@union.lab.dynode.net>,
Russell Wood <bitbucket@dynode.net> writes:
> On 2007-09-19, wong_powah@yahoo.ca <wong_powah@yahoo.ca> wrote:
>
> Stay away from UNIX, idiot.
>


And what makes you say that? Granted it isn't Gates'
Universal Computer Virus, which is suitable only for
those who need help wiping the drool from their chins,
but you must have some reason. Kindly inform the rest of
us so we might sleep better at night, knowing at least one
of the problems of the universe has been solved.

Moe Trin

2007-09-20, 1:27 am

On Wed, 19 Sep 2007, in the Usenet newsgroup comp.unix.admin, in article
<1190234771.872022.112790@n39g2000hsh.googlegroups.com>, wong_powah@yahoo.ca
wrote:

>My computer behaves as follows when a short password is entered:
># passwd testing


How many different Usenet newsgroups are you going to post this question?
While the "Big Eight" list is only 2275 news groups, you are going to get
the same answer in many of them. DO NOT USE SHORT PASSWORDS, just as you
have been told in the comp.os.linux.* groups you asked this silly
question.

Old guy
Russell Wood

2007-09-20, 7:30 am

On 2007-09-20, errata6170@mypacks.net <errata6170@mypacks.net> wrote:
> [Posted and mailed]
>
> In article <slrnff3k3t.pmt.bitbucket@union.lab.dynode.net>,
> Russell Wood <bitbucket@dynode.net> writes:
>
> And what makes you say that? Granted it isn't Gates'
> Universal Computer Virus, which is suitable only for
> those who need help wiping the drool from their chins,
> but you must have some reason. Kindly inform the rest of
> us so we might sleep better at night, knowing at least one
> of the problems of the universe has been solved.


Any cum stain that wants to enable the use of short passwords is a
XXXXing idiot. And since you couldn't determine that, you're a XXXXing
idiot too.

--
Russell Wood
<http://www.dynode.net/~rjw/>
wong_powah@yahoo.ca

2007-09-20, 1:30 pm

On Sep 19, 7:18 pm, Dave Hinz <DaveH...@gmail.com> wrote:
> On Wed, 19 Sep 2007 13:46:11 -0700, wong_po...@yahoo.ca <wong_po...@yahoo.ca> wrote:
>
> Why would you want to do that? Don't use a password that's way too
> short.


I do not want to use a short password.
I want the computer to reprompt me for a new password even though I
entered a short password accidentally.

wong_powah@yahoo.ca

2007-09-20, 1:30 pm

On Sep 19, 7:18 pm, Dave Hinz <DaveH...@gmail.com> wrote:
> On Wed, 19 Sep 2007 13:46:11 -0700, wong_po...@yahoo.ca <wong_po...@yahoo.ca> wrote:
>
> Why would you want to do that? Don't use a password that's way too
> short.


I do not want to use a short password.
I want the computer to reprompt me for a new password even though I
entered a short password accidentally.

errata6170@mypacks.net

2007-09-20, 1:30 pm

In article <slrnff4n60.r5a.bitbucket@union.lab.dynode.net>,
Russell Wood <bitbucket@dynode.net> writes:
> On 2007-09-20, errata6170@mypacks.net <errata6170@mypacks.net> wrote:
>
> Any cum stain that wants to enable the use of short passwords is a
> XXXXing idiot. And since you couldn't determine that, you're a XXXXing
> idiot too.
>

Missed your meds today, eh?

I see you're reading challenged, too, as well as being obnoxious.
The OP has said he doesn't want to use short passwords but wants
to be prompted for a new password if he's accidentally entered a
too short one.

Perhaps it's you who should stay away from UNIX.

Dave Hinz

2007-09-20, 7:22 pm

On Thu, 20 Sep 2007 06:34:49 -0700, wong_powah@yahoo.ca <wong_powah@yahoo.ca> wrote:
> On Sep 19, 7:18 pm, Dave Hinz <DaveH...@gmail.com> wrote:


[vbcol=seagreen]
> I do not want to use a short password.
> I want the computer to reprompt me for a new password even though I
> entered a short password accidentally.


That's like asking what kind of bucket to use to bail out your boat,
rather than asking how to patch the hole that's causing the problem in
the first place. While it is certainly possible to change how PAM
behaves in this scenerio, it's without value, except maybe for the
mental exercise itself. If that's the point, there are much more
enjoyable and informative exercises to undertake.

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com