up vote 0 down vote favorite
share [g+] share [fb]

I am configuring system (RHEL5), setting password rules. One requirement is related to security:

local accounts with passwords containing characters from ISO/IEC 8859-1 with codes in the range of 2x to 7x (x=0 … F), and excluding the code 20 (i.e. white space).

In other words: white space can't be include in the password. I have investigated on pam_cracklib and pam_passwdqc, but it seems both of them support no such feature. Could anyone tell me how to configure about this?

Thanks a lot!

link|improve this question
88% accept rate
3  
Why would one want to prohibit any characters in passwords? Doing so only serves to reduce security, not increase it. – ErikA Oct 9 '10 at 6:26
ErikA, maybe I didn't express myself clearly. The rule is to allow any characters expect white space. Because maybe white space in password would reduce the security, I am not sure. – zhaojing Oct 9 '10 at 7:11
1  
Excluding white-space is almost certainly a bad idea from a security perspective. Although I could completely understand it from the perspective of application compatibility. If you don't have any applications that you know will not support why space then don't try to filter it out. – Zoredache Oct 9 '10 at 9:15
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown
discard

Browse other questions tagged or ask your own question.