Arch Linux

moljac024

Member

From: Serbia

Registered: 2008-01-29

Posts: 2,675

Short user passwords

I have been fooling around with a guest account for my system and made it with a really short password (4 letters).
I have temporarily changed it to something longer but now I can't set it back to a 4 character password.
passwd complains that the password is too short. How could I have set this earlier but can't now ?

EDIT: I have managed to set a 4 character password as root. But still, why won't it accept a short password from the user ?

Last edited by moljac024 (2008-10-06 18:44:40)

---

The day Microsoft makes a product that doesn't suck, is the day they make a vacuum cleaner.
--------------------------------------------------------------------------------------------------------------
But if they tell you that I've lost my mind, maybe it's not gone just a little hard to find...

bluewind

Administrator

From: Austria

Registered: 2008-07-13

Posts: 164

Website

Re: Short user passwords

EDIT: I have managed to set a 4 character password as root. But still, why won't it accept a short password from the user ?

Well that's a feature. Since short passwords are weak they are rejected. (man passwd line 45-48)

---

"Everything should be made as simple as possible, but not simpler."
-- Albert Einstein

yo

Member

Registered: 2008-08-31

Posts: 25

Re: Short user passwords

lewl my pass is one letter long
the the same for user and root

ArchArael

Member

From: Switzerland

Registered: 2005-06-14

Posts: 485

Re: Short user passwords

lewl my pass is one letter long
the the same for user and root

Then be sure to avoid starting sshd or check your sshd_config file at least: 

arael[~]$grep PermitRootLogin /etc/ssh/sshd_config 
PermitRootLogin no
arael[~]$

Last edited by ArchArael (2008-10-07 20:40:16)

fukawi2

Forum Moderator

From: .vic.au

Registered: 2007-09-28

Posts: 4,705

Website

Re: Short user passwords

...I can't set it back to a 4 character password. passwd complains that the password is too short.

PAM is the system that's enforcing this restricting I believe. I can't find any relevant documentation about password lengths at the moment, but Googling should turn something up for you

---

BlueHackers // My Beer List // husk firewall compiler

Are you familiar with our Forum Rules?

bluewind

Administrator

From: Austria

Registered: 2008-07-13

Posts: 164

Website

Re: Short user passwords

Check this page:
http://www.linux.ie/articles/pam.php

---

"Everything should be made as simple as possible, but not simpler."
-- Albert Einstein

Ramses de Norre

Member

From: Leuven - Belgium

Registered: 2007-03-27

Posts: 1,289

Re: Short user passwords

lewl my pass is one letter long
the the same for user and root

Then be sure to avoid starting sshd or check your sshd_config file at least: 

arael[~]$grep PermitRootLogin /etc/ssh/sshd_config 
PermitRootLogin no
arael[~]$

That isn't sufficient if your user has a one letter password too.. I suggest configuring ssh for RSA authentication and disabling password authentication.

ArchArael

Member

From: Switzerland

Registered: 2005-06-14

Posts: 485

Re: Short user passwords

That isn't sufficient if your user has a one letter password too.. I suggest configuring ssh for RSA authentication and disabling password authentication.

That's nice tip.

yo

Member

Registered: 2008-08-31

Posts: 25

Re: Short user passwords

Ramses de Norre wrote:

    That isn't sufficient if your user has a one letter password too.. I suggest configuring ssh for RSA authentication and disabling password authentication.

mmmmmmmm i dont know what is all that, whats the difference?

bender02

Member

From: Germany

Registered: 2007-02-04

Posts: 1,328

Re: Short user passwords

Ramses de Norre wrote:

    That isn't sufficient if your user has a one letter password too.. I suggest configuring ssh for RSA authentication and disabling password authentication.

mmmmmmmm i dont know what is all that, whats the difference?

See eg here: http://sial.org/howto/openssh/publickey-auth/
Also, google is your friend.

Finally, what's your IP? [edit: mmmmmmmm so that I can hack into your computer more easily...]

Last edited by bender02 (2008-10-08 21:57:51)

yo

Member

Registered: 2008-08-31

Posts: 25

Re: Short user passwords

mmmmmmmmmmmmmmmm hack my balls
and i have a dinamic ip

yo

Member

Registered: 2008-08-31

Posts: 25

Re: Short user passwords

And my pass is 1 mmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmm

ArchArael

Member

From: Switzerland

Registered: 2005-06-14

Posts: 485

Re: Short user passwords

See eg here: http://sial.org/howto/openssh/publickey-auth/

Thank you for the link. Very clear and short. Bookmarked.