Update Linux-PAM from 1.2.1 to 1.3.0

[pmenzel]

Tested on keineahnung.

[donald]

I request --disable-cracklib configuration, because I am about to remove cracklib.

The reason is, that cracklib provides some python bindings which would be obsolete when we upgrade python. To redo cracklib without the python bindings would be some work, because the package has changed a lot (e.g. no more inline wordlists provided). I wanted to save the effort, because we don't currently use it anyway.

[pmenzel]

@donald, done, and rebuilt.

[pmenzel]

CrackLib is not configured in MarIuX.

password  required    pam_cracklib.so   type=Linux retry=3 difok=5 \
                                        difignore=23 minlen=9 dcredit=1 \
                                        ucredit=1 lcredit=1 ocredit=1 \
                                        dictpath=/lib/cracklib/pw_dict

[wwwutz]

we're not forcing a min pw len are we ?

[pmenzel]

On 02/26/18 20:27, Peter Marquardt wrote: we're not forcing a min pw len are we ?

At least not actively. The above snippet is from the LFS book to demonstrate what snippet I looked for, but didn’t find. So I guess the minimal password length is 0 or 1.

[wwwutz]

cool 8)

[donald]

Thank you.

Should be tested with

• gdm login
• ssh login (normal user,root, with and without google_authenticator)
• imap login on rofl
• sieve login at rofl
• elager login at elager (argh)
• sudo
• screensaver
• console login (root/user)

[donald]

All tested, all fine.

[donald]

I've installed in on the distmaster for you.

[pmenzel]

On 03/10/2018 02:50 PM, Donald Buczek wrote: I've installed in on the distmaster for you.

Thank you – also for the extended tests. I noticed the merge only yesterday, but didn’t want to do it before the weekend.