[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Lost root password!!



the last reply for that bug (quoted below) seems to have a solution, although i
haven't tried it myself.  it would seem you just need to install one
of the wordlist packages (ie wenglish) and then rerun the
/etc/cron.daily/cracklib script.  the wordlist should probably be a
dependency for libpam-cracklib?

> I see you could use some feedback.  Ran into the same problem. Just
> installing libpam-cracklib and uncommenting is not enough.  BTW, I'm
> running woody.
> 
> When you switch to using cracklib for the password module type, you
> need to make sure you have a dictionary that it can check against.
> You'll need to install one _and_ seed cracklib with it.  If you don't,
> you can not change your password and get
> 
>   passwd: Critical error - immediate abort
> 
> Dictionaries are provided by any package that provides the virtual
> "wordlist" package.  Hence, I think libpam-cracklib should depend on
> it (or at least recommend it).
> 
> Seeding the cracklib dictionary can be achieved by running the
> /etc/cron.daily/cracklib script.
> 
> So to get this working out of the box, libpam-cracklib needs to pull
> in a wordlist package, make sure cracklib-runtime is installed (and
> configured?) and run that cron script in its postinst.
> 
> BTW, the cron script happily runs *without* a wordlist package
> installed.
> 
> I guess all those folks not able to reproduce this had a wordlist
> installed and the cron job ran before they changed to using cracklib
> with PAM and tried it out.


-- 
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org



Reply to: