15 lines
857 B
Plaintext
15 lines
857 B
Plaintext
# check new passwords for strength (man pam_pwquality)
|
|
password required pam_pwquality.so authtok_type=UNIX retry=1 difok=1 \
|
|
minlen=8 dcredit=0 ucredit=0 \
|
|
lcredit=0 ocredit=0 minclass=1 \
|
|
maxrepeat=0 maxsequence=0 \
|
|
maxclassrepeat=0 gecoscheck=0 \
|
|
dictcheck=1 usercheck=1 \
|
|
enforcing=1 badwords="" \
|
|
dictpath=/usr/lib/cracklib/pw_dict
|
|
|
|
# use yescrypt hash for encryption, use shadow, and try to use any
|
|
# previously defined authentication token (chosen password) set by any
|
|
# prior module.
|
|
password required pam_unix.so yescrypt shadow try_first_pass
|