Alex Domoradov
2011-Sep-12 14:09 UTC
[Samba] How to check the password complexity in samba
Hi all, can someone give a working example for checking the password complexity in samba? I have tried the next one 1. Download and extract samba-3.4.15.tar.zg. Go to samba-3.4.15/examples/auth/crackcheck and compile crackcheck 2. Copy crackcheck binary to the /usr/bin/ 3. Check that the program working correctly # /usr/bin/crackcheck -d /usr/share/cracklib/pw_dict 123 ERR - it is too short # /usr/bin/crackcheck -d /usr/share/cracklib/pw_dict AV7OaV2BRr Looks good. 4. Add the following line to the smb.conf and restart samba check password script = /usr/bin/crackcheck -d /usr/share/cracklib/pw_dict But when I change user password from command line (smbldap-passwd) or via gui (srvtools), there is no warning. Even if I set 123 as password. Am I missing something?
TAKAHASHI Motonobu
2011-Sep-12 14:28 UTC
[Samba] How to check the password complexity in samba
From: Alex Domoradov <alex.hha at gmail.com> Date: Mon, 12 Sep 2011 17:09:29 +0300> Hi all, can someone give a working example for checking the password > complexity in samba?(snip)> 4. Add the following line to the smb.conf and restart samba > > check password script = /usr/bin/crackcheck -d /usr/share/cracklib/pw_dict > > But when I change user password from command line (smbldap-passwd) or via > gui (srvtools), there is no warning. Even if I set 123 as password. > > Am I missing something?Who changed users' password? "check password script" affects only for normal user. --- TAKAHASHI Motonobu <monyo at samba.gr.jp>
Reasonably Related Threads
- questions about password complexity checking.
- samba password complexity help?
- enforcing password compexity (check password script, cracklib)
- "nis homedir" issue on samba- 3.6.9-151.el6 (CentOS 6.4 64bit)
- Samba, ldap, password complexity, cracklib - questions