8b59e0c8bc
This change added ppolicy-check-password package from https://github.com/cedric-dufour/ppolicy-check-password This package contains check_password.so that is used by ldap to enforce password complexity for ldap users. Test Plan for Debian: PASS: package build, image build PASS: system bootstrap, controller unlock PASS: after controller unlock, login by "admin" user on console, and su to "admin" on ssh session. PASS: failure path with incompliant passwords for ldap user password change (eg, change password when first login) Story: 2009101 Task: 44864 Signed-off-by: Andy Ning <andy.ning@windriver.com> Change-Id: If5a1e5c6784c7354c0a4903e1d1c4abb21d8a01f
32 lines
704 B
Plaintext
32 lines
704 B
Plaintext
## PPolicy password check module congifuration
|
|
|
|
# Minimum number of quality points a new password must have to be accepted.
|
|
# One quality point is awarded for each character class used in the password.
|
|
#min_points 3
|
|
min_points 4
|
|
|
|
# Maximum number of characters that can appear consecutively from a given
|
|
# character class (0 = disable).
|
|
#max_consecutive_per_class 0
|
|
|
|
# Minimum lower characters expected.
|
|
#min_lower 0
|
|
min_lower 1
|
|
|
|
# Minimum upper characters expected.
|
|
#min_upper 0
|
|
min_upper 1
|
|
|
|
# Minimum digit characters expected.
|
|
#min_digit 0
|
|
min_digit 1
|
|
|
|
# Minimum punctuation characters expected.
|
|
#min_punct 0
|
|
min_punct 1
|
|
|
|
# Set it to 1 to enable cracklib verification.
|
|
#use_cracklib 0
|
|
use_cracklib 1
|
|
|