This is an old revision of the document!

PAM - pam_passwdqc

pam_passwdqc is a PAM password quality control module that checks the strength of the password.

Create the PAM configuration file for passwdqc

Create a PAM configuration file for passwdqc by issuing the following command:

sudo vi /usr/share/pam-configs/passwdqc

and populate it with the following:

/usr/share/pam-configs/passwdqc

Name: passwdqc password strength checking
Default: yes
Priority: 1024
Conflicts: cracklib [maybe?]
Password-Type: Primary
Password:
  requisite pam_passwdqc.so min=disabled,10,8,8,8 similar=deny enforce=users ask_oldauthtok check_oldauthtok

Now issue the command:

sudo pam-auth-update

and ensure that the passwdqc password strength checking is enabled.

WARNING: Enabling the PAM passwdqc module will disable the PAM cracklib module.