Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to replace the cracklib module with passwdqc. Every time I do an authconfig --update (or --updateall), the changes I make on the system-auth-ac file goes away. The authconfig command line or system-config-authentication don't have any options pertaining to passwdqc. I also need to add arguments to the passwdqc module.

share|improve this question
up vote 0 down vote accepted

If you want to enable pam_passwdqc:

  • Replace the pam_cracklib line in /etc/pam.d/system-auth-ac with pam_passwdqc.
  • Remove USECRACKLIB=yes from /etc/sysconfig/authconfig

Now, run authconfig --update and you should find that pam_passwdqc is still enabled.

share|improve this answer
Thanks. It worked. To change it back to use cracklib, all I had to do was to change USECRACKLIB to yes in /etc/sysconfig/authconfig, or change the passwdqc line in /etc/pam.d/system-auth-ac back to cracklib. I did not have to change 2 configuration files. Is there any documentation about this? I couldn't find in the man pages of authconfig, system-auth-ac and passwdqc anything relating /etc/sysconfig/authconfig to any of the /etc/pam.d/ files. – Hermes Conrad Nov 1 '12 at 20:22

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.