Re: [owl-users] pam_passwdqc and history

From: Vincent Danen (vdanen@private)
Date: Sat Jun 23 2007 - 19:22:19 PDT


* Solar Designer <solar@private> [2007-06-24 05:39:39 +0400]:

>Vincent - thank you for asking this question on owl-users rather than
>via private e-mail to me (like some others did).

You're welcome.  I wanted a "public" answer since I wanted to forward
whatever I got back to the Mandriva guys.  =)

I think it's also something that might be useful to see via mailing list
archives and such.

BTW, very good answer and made me think of some things I hadn't thought
of before.  I'm in complete agreement with you.

Of course, that doesn't stop legislaters from specifying they want or
need something like this, so if something like this were to make it's
way into pam_passwdqc (as, from my understanding, pam_cracklib is what
would be doing this, not pam_unix), I think it might make it more
palatable to some people (with the appropriate warnings/compile-time
disablers, etc.).

Thanks for the answer.  I've forwarded it off to the Mandriva
maintainers.  If nothing else, I'd like to get pam_passwdqc to replace
pam_cracklib there (not sure if I can pull off getting them to use tcb,
but we'll see).


-- 
Vincent Danen @ http://linsec.ca/





This archive was generated by hypermail 2.1.3 : Sat Jun 23 2007 - 19:24:49 PDT