[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Poppasswd



Hi,

The -o option of the passwd command (in Debian 1.1 - don't know about 1.2)
disables all checks. Hacking poppassd to call passwd with the -o
option should be trivial.

E.-

> This is a very tricky problem. poppassd is a small app that calls passwd 
> to change the password. Well, it passes some arguments to passwd and 
> expects some responses from it. All very fine. Now, the newer debians use 
> a passwd program that does a few checks on the password. If the 
> new password is too similar to the old one, or if it is too short, or if 
> it has too many repeated characters, etc. it will issue an error message 
> and prompt you for a new (hopefully better) password. poppassd was not 
> desinged to deal with this. It just waits for passwd to issue the prompt 
> "re-enter new password" while password is saying "too simple: try again".
> Try entering a very random, 8 chars password to see if it works. To solve 
> your problem, you must try to find a passwd program that doesn't do these 
> checks (at the expense of security) or hack poppassd to be smarter. I 
> don't know if debian has a simpler passwd program.
> 
> Hope this helps,
> Nelson
> lago@that.com.br

-- 

Eloy A. Paris
Information Technology Department
Rockwell Automation de Venezuela
Telephone: +58-2-9432311 Fax: +58-2-9430323


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-user-REQUEST@lists.debian.org . Trouble? e-mail to Bruce@Pixar.com


Reply to: