<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
It could be pam_pwquality.so </div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
You may also want to check /etc/security/pwquality.conf </div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
It could also be pam_passwdqc.so or pam_cracklib.so depending on the system builders choice.<br>
<br>
This assumes you are doing local authentication and not using IPA which would have it's own Password Policy.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
Good Luck. Been there and know what you are dealing with.</div>
<div>
<div id="appendonsend"></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size: 11pt;"><b>From:</b> pam-list-bounces@redhat.com <pam-list-bounces@redhat.com> on behalf of Jeffrey Walton <noloader@gmail.com><br>
<b>Sent:</b> Friday, October 23, 2020 1:49 PM<br>
<b>To:</b> pam-list@redhat.com <pam-list@redhat.com><br>
<b>Subject:</b> Which conf file handles password complexity during account creation</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt">
<div class="PlainText">Hi Everyone,<br>
<br>
I'm trying to disable complexity checking during account creation. I<br>
am in the process of creating a user account with a simple password on<br>
Fedora 33. The GUI does not let me proceed because the password is not<br>
complex enough. I can't increase complexity because I am working with<br>
70 year old users.<br>
<br>
The GNOME settings do not appear to have a setting to disable<br>
complexity. The man pages for PAM modules is at<br>
<a href="https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flinux.die.net%2Fman%2F5%2Fpam.conf&data=04%7C01%7Cbrb10%40psu.edu%7C929bdbe8c0a3462ce66d08d8777c19c1%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C1%7C637390722179036575%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=A96U01glYncE9MJJ5J6%2BRahjTzJAa11RcZse5PQvQXs%3D&reserved=0">https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flinux.die.net%2Fman%2F5%2Fpam.conf&data=04%7C01%7Cbrb10%40psu.edu%7C929bdbe8c0a3462ce66d08d8777c19c1%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C1%7C637390722179036575%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=A96U01glYncE9MJJ5J6%2BRahjTzJAa11RcZse5PQvQXs%3D&reserved=0</a>,
but I am having trouble parsing<br>
them. The conf files don't appear to be commented, and the man pages<br>
fail to explain things like "system-auth" or give an example of<br>
changing complexity.<br>
<br>
# grep -IR complex /etc/pam.d/<br>
# grep -IR crack /etc/pam.d/<br>
#<br>
<br>
I am mostly lost because I can't seem to get a toe hold on the conf files.<br>
<br>
What is the conf file that needs to be fixed to disable complexity<br>
checking during account creation?<br>
<br>
Thanks in advance.<br>
<br>
_______________________________________________<br>
Pam-list mailing list<br>
Pam-list@redhat.com<br>
<a href="https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.redhat.com%2Fmailman%2Flistinfo%2Fpam-list&data=04%7C01%7Cbrb10%40psu.edu%7C929bdbe8c0a3462ce66d08d8777c19c1%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C1%7C637390722179036575%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=TQbuHa%2BrzbWnbhalSp9xIGRAMLhb18mCpF%2FekOZCE9o%3D&reserved=0">https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.redhat.com%2Fmailman%2Flistinfo%2Fpam-list&data=04%7C01%7Cbrb10%40psu.edu%7C929bdbe8c0a3462ce66d08d8777c19c1%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C1%7C637390722179036575%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=TQbuHa%2BrzbWnbhalSp9xIGRAMLhb18mCpF%2FekOZCE9o%3D&reserved=0</a><br>
<br>
</div>
</span></font></div>
</div>
</body>
</html>