RHEL7 How to configure password policies based on UID (ranges)
"Juha A." <[email protected]> Thu, 23 Feb 2017 05:53:55 +0000
| Newsgroups | gmane.linux.pam |
|---|---|
| Message-ID | <MEXPR01MB14295F96DCAFFDD08886121ADF530@MEXPR01MB1429.ausprd01.prod.outlook.com> |
--===============0535480895976248330==
Content-Language: en-AU
Content-Type: multipart/alternative;
boundary="_000_MEXPR01MB14295F96DCAFFDD08886121ADF530MEXPR01MB1429ausp_"
--_000_MEXPR01MB14295F96DCAFFDD08886121ADF530MEXPR01MB1429ausp_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hi,
I would need to configure different password policy based on the users UID.
For example:
- UID 1000-1999: Minimum Password Length =3D 15, 3 different character clas=
ses
- UID 2000-2999: Minimum Password Length =3D 20, 4 different character clas=
ses
The /etc/security/pwquality.conf does not seem to have a way to configure d=
ifferent rules based on UID, but I was also unable to get system-auth/passw=
ord-auth to work properly.
Would anyone have advice on how to achieve the above?
Thanks!
--_000_MEXPR01MB14295F96DCAFFDD08886121ADF530MEXPR01MB1429ausp_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<style type=3D"text/css" style=3D"display:none;"><!-- P {margin-top:0;margi=
n-bottom:0;} --></style>
</head>
<body dir=3D"ltr">
<div id=3D"divtagdefaultwrapper" style=3D"font-size:12pt;color:#000000;font=
-family:Calibri,Arial,Helvetica,sans-serif;" dir=3D"ltr">
<p>Hi,</p>
<p><br>
</p>
<p>I would need to configure different password policy based on the users U=
ID.</p>
<p>For example:</p>
<p>- UID 1000-1999: Minimum Password Length =3D 15, 3 different character c=
lasses</p>
<p><span style=3D"font-family: Calibri, Arial, Helvetica, sans-serif, "=
;Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "=
;Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size:=
16px;">- UID 2000-2999: Minimum Password Length =3D 20, 4 different charac=
ter
classes</span><br>
</p>
<p><span style=3D"font-family: Calibri, Arial, Helvetica, sans-serif, "=
;Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "=
;Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size:=
16px;"><br>
</span></p>
<p><span style=3D"font-family: Calibri, Arial, Helvetica, sans-serif, "=
;Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "=
;Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size:=
16px;">The <span>/etc/security/pwquality.conf does not seem to have a=
way
to configure different rules based on UID, but I was also unable to get sy=
stem-auth/password-auth to work properly.</span></span></p>
<p><span style=3D"font-family: Calibri, Arial, Helvetica, sans-serif, "=
;Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "=
;Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size:=
16px;"><span><br>
</span></span></p>
<p>Would anyone have advice on how to achieve the above?</p>
<p><br>
</p>
<p>Thanks!</p>
</div>
</body>
</html>
--_000_MEXPR01MB14295F96DCAFFDD08886121ADF530MEXPR01MB1429ausp_--
--===============0535480895976248330==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Pam-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/pam-list
--===============0535480895976248330==--