Monday, February 28, 2011

LINUX Password Policy

cp /etc/pam.d/system-auth /etc/pam.d/system-auth.bak
vi /etc/pam.d/system-auth
password    requisite     pam_cracklib.so try_first_pass retry=3 minlen=10 lcredit=-1 ucredit=-1 dcredit=-1 ocredit=-1
difok=3
password    sufficient    pam_unix.so md5 shadow nullok try_first_pass use_authtok remember=26

cp /etc/login.defs /etc/login.defs.bak
vi /etc/login.defs
PASS_MAX_DAYS   45
PASS_MIN_DAYS   0
PASS_MIN_LEN    10
PASS_WARN_AGE   7


chage -d 0 xyz
chage -d 0 abc

No comments:

Post a Comment