search for: pw_dict

Hi Samba folks, I had a couple questions about password complexity checking. To preface, in smb.conf, we set: check password script = /usr/local/sbin/crackcheck -d /usr/share/cracklib/pw_dict Also, if I understand correctly: /usr/local/sbin/crackcheck comes from samba source rpm package. maybe we need to compile it ourselves. /usr/share/cracklib/pw_dict* comes from cracklib-dicts rpm package Here are my questions: 1) may we also specify -c along with -d in check password script pa...

...ething, so I don't think it can return an error code to Samba if I use a crappy password. But I try this anyway, but it does not seem to accomplish anything. I see nothing in /var/log/messages or in /var/log/samba/log.smbd check password script = /usr/sbin/cracklib-check /usr/share/cracklib/pw_dict Well, it doesn't seem to work when I change my password from a windows client. Does anyone have any suggestions? Thanks. So what it boils down to is: 0) what am I missing here? 1) where can I get an example crackcheck script file? 2) I have seen other suggestions to use pam. This might su...

...sword complexity in samba? I have tried the next one 1. Download and extract samba-3.4.15.tar.zg. Go to samba-3.4.15/examples/auth/crackcheck and compile crackcheck 2. Copy crackcheck binary to the /usr/bin/ 3. Check that the program working correctly # /usr/bin/crackcheck -d /usr/share/cracklib/pw_dict 123 ERR - it is too short # /usr/bin/crackcheck -d /usr/share/cracklib/pw_dict AV7OaV2BRr Looks good. 4. Add the following line to the smb.conf and restart samba check password script = /usr/bin/crackcheck -d /usr/share/cracklib/pw_dict But when I change user password from command line (smblda...

...;changed for privacy hosts deny = ALL os level = 33 domain master = yes local master = yes preferred master = yes domain logons = yes security = user guest accout = guest encrypt passwords = yes check password script = /usr/local/sbin/crackcheck -d /usr/share/cracklib/pw_dict smb passwd file = /etc/samba/smbpasswd passdb backend = smbpasswd username map = /etc/samba/smbusers time server = Yes log file = /var/log/samba/pc/%m.log nis homedir = yes homedir map = auto.home null passwords = yes client lanman auth = no logon script = logon....

...;changed for privacy hosts deny = ALL os level = 33 domain master = yes local master = yes preferred master = yes domain logons = yes security = user guest accout = guest encrypt passwords = yes check password script = /usr/local/sbin/crackcheck -d /usr/share/cracklib/pw_dict smb passwd file = /etc/samba/smbpasswd passdb backend = smbpasswd username map = /etc/samba/smbusers time server = Yes log file = /var/log/samba/pc/%m.log * nis homedir = yes homedir map = auto.home* null passwords = yes client lanman auth = no logon script = logo...

...obody enable privileges = Yes pam password change = No passwd program = /opt/admin/passwd_global.sh %u passwd chat = *New\sPassword:* %n\n *Re-enter\snew\sPassword:* %n\n passwd chat debug = No passwd chat timeout = 2 check password script = /opt/admin/crackcheck -d /usr/local/share/cracklib/pw_dict username map = password level = 0 username level = 0 unix password sync = Yes restrict anonymous = 0 lanman auth = Yes ntlm auth = Yes client NTLMv2 auth = No client lanman auth = Yes client plaintext auth = Yes client use spnego principal = No preload modules = dedicated keytab file...