Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm trying to replace the cracklib module with passwdqc. Every time I do an authconfig --update (or --updateall), the changes I make on the system-auth-ac file goes away. The authconfig command line or system-config-authentication don't have any options pertaining to passwdqc. I also need to add arguments to the passwdqc module.

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

If you want to enable pam_passwdqc:

  • Replace the pam_cracklib line in /etc/pam.d/system-auth-ac with pam_passwdqc.
  • Remove USECRACKLIB=yes from /etc/sysconfig/authconfig

Now, run authconfig --update and you should find that pam_passwdqc is still enabled.

share|improve this answer
    
Thanks. It worked. To change it back to use cracklib, all I had to do was to change USECRACKLIB to yes in /etc/sysconfig/authconfig, or change the passwdqc line in /etc/pam.d/system-auth-ac back to cracklib. I did not have to change 2 configuration files. Is there any documentation about this? I couldn't find in the man pages of authconfig, system-auth-ac and passwdqc anything relating /etc/sysconfig/authconfig to any of the /etc/pam.d/ files. –  Hermes Conrad Nov 1 '12 at 20:22
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.