Only way I found:  [not extremely hard, but not basic]

Get the source -   shadow_980403_orig_tar.gz

in the file shadow-980403/src/passwd.c

Change line 402 so that it looks like below(get rid of the "I am root"
test part of the strength test).  Then run the configure script, and
rebuild the passwd suite, then use your new weak-proof passwd. 

to rebuild, in the shadow-980403/src directory, type ./configure, then
'make', after that, type 'make install' (must be done as root)

Here is what the lines should look like after you fix the root kludge.
 
               if ((!obscure(orig, pass, pw) || reuse(pass, pw))) {
                        printf (TRYAGAIN);
                        continue;
                }

later,
troy

Nathan E Norman wrote:
> 
> Hello,
> 
> I'm writing a script to enable non-UNIX types at my work to be able to
> administrate customer accounts.  I'm fairly pleased with what I've got,
> but I've got a question.
> 
> The passwd command runs a complexity check on what is entered, and tells
> you if you're picking a password that's too easy.  However, entering
> that password again makes passwd accept it.  This isn't so good - I'd
> like to force these "administrators" to choose complex passwords.  As it
> stands, one can hit the enter key three times and passwd will enter a
> null password!
> 
> The manpage doesn't show me an obvious way to disable this behavior of
> the passwd command (accepting easy passwords).  Is there a way?
> 
> Thanks!
> 
> --
> Nathan Norman
> MidcoNet - 410 South Phillips Avenue - Sioux Falls, SD  57104
> mailto://[EMAIL PROTECTED]   http://www.midco.net
> finger [EMAIL PROTECTED] for PGP Key: (0xA33B86E9)
> 
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to