NAME¶
pam_passwdqc —
Password quality-control
PAM module
SYNOPSIS¶
[
service-name]
module-type control-flag
pam_passwdqc
[
options]
DESCRIPTION¶
The
pam_passwdqc module is a simple password strength checking
module for PAM. In addition to checking regular passwords, it offers support
for passphrases and can provide randomly generated ones.
The
pam_passwdqc module provides functionality for only one
PAM management group: password changing. In terms of the
module-type parameter, this is the
“
password
” feature.
The
pam_chauthtok() service function may ask the user for a
new password, and verify that it meets certain minimum standards. If the
chosen password is unsatisfactory, the service function returns
PAM_AUTHTOK_ERR
.
The set of options that may be passed to the module is exactly the same as the
set of options that may be specified in the
/etc/passwdqc.conf file. These options are described in
passwdqc.conf(5).
SEE ALSO¶
pam.conf(5),
passwdqc.conf(5),
pam(8).
http://www.openwall.com/passwdqc/
AUTHORS¶
The
pam_passwdqc module was written for Openwall GNU/*/Linux
by
Solar Designer ⟨solar at
openwall.com⟩. This manual page was written for the
FreeBSD Project by ThinkSec AS and NAI Labs, the
Security Research Division of Network Associates, Inc. under DARPA/SPAWAR
contract N66001-01-C-8035 (“CBOSS”), as part of the DARPA CHATS
research program. It has since been revised, most importantly to refer to
passwdqc.conf(5) instead of describing the options right on
this page.