Which conf file handles password complexity during account creation

[Broking, Brian R]

It could be pam_pwquality.so
You may also want to check /etc/security/pwquality.conf

It could also be pam_passwdqc.so  or pam_cracklib.so depending on the system builders choice.

This assumes you are doing local authentication and not using IPA which would have it's own Password Policy.

Good Luck.  Been there and know what you are dealing with.

________________________________
From: pam-list-bounces at redhat.com <pam-list-bounces at redhat.com> on behalf of Jeffrey Walton <noloader at gmail.com>
Sent: Friday, October 23, 2020 1:49 PM
To: pam-list at redhat.com <pam-list at redhat.com>
Subject: Which conf file handles password complexity during account creation

Hi Everyone,

I'm trying to disable complexity checking during account creation. I
am in the process of creating a user account with a simple password on
Fedora 33. The GUI does not let me proceed because the password is not
complex enough. I can't increase complexity because I am working with
70 year old users.

The GNOME settings do not appear to have a setting to disable
complexity. The man pages for PAM modules is at
https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flinux.die.net%2Fman%2F5%2Fpam.conf&data=04%7C01%7Cbrb10%40psu.edu%7C929bdbe8c0a3462ce66d08d8777c19c1%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C1%7C637390722179036575%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=A96U01glYncE9MJJ5J6%2BRahjTzJAa11RcZse5PQvQXs%3D&reserved=0, but I am having trouble parsing
them. The conf files don't appear to be commented, and the man pages
fail to explain things like "system-auth" or give an example of
changing complexity.

    # grep -IR complex /etc/pam.d/
    # grep -IR crack /etc/pam.d/
    #

I am mostly lost because I can't seem to get a toe hold on the conf files.

What is the conf file that needs to be fixed to disable complexity
checking during account creation?

Thanks in advance.

_______________________________________________
Pam-list mailing list
Pam-list at redhat.com
https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.redhat.com%2Fmailman%2Flistinfo%2Fpam-list&data=04%7C01%7Cbrb10%40psu.edu%7C929bdbe8c0a3462ce66d08d8777c19c1%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C1%7C637390722179036575%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=TQbuHa%2BrzbWnbhalSp9xIGRAMLhb18mCpF%2FekOZCE9o%3D&reserved=0

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pam-list/attachments/20201023/1bb1d1e5/attachment.htm>