From 361a55c86c7706ed9468863bb8ce84f375b2cea3 Mon Sep 17 00:00:00 2001 From: Diego 'Flameeyes' Pettenò Date: Wed, 23 Jul 2008 16:54:47 +0200 Subject: Remove try_first_pass from pam_cracklib. The try_first_pass option is not supported (any longer) by the pam_cracklib module shipped with Linux-PAM. This change will close bug #231819 as reported by Brian Claywell. --- system-auth.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/system-auth.in b/system-auth.in index 1048eb4..6a7bbd6 100644 --- a/system-auth.in +++ b/system-auth.in @@ -9,7 +9,7 @@ auth required pam_unix.so try_first_pass LIKEAUTH nullok DEBUG account required pam_unix.so DEBUG #if HAVE_CRACKLIB -password required pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 try_first_pass retry=3 DEBUG +password required pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3 DEBUG #endif #if HAVE_PASSWDQC password required pam_passwdqc.so min=8,8,8,8,8 retry=3 -- cgit v1.2.3-65-gdbad