You are not logged in.

#1 2008-10-06 18:34:07

moljac024
Member
From: Serbia
Registered: 2008-01-29
Posts: 2,676

Short user passwords

I have been fooling around with a guest account for my system and made it with a really short password (4 letters).
I have temporarily changed it to something longer but now I can't set it back to a 4 character password.
passwd complains that the password is too short. How could I have set this earlier but can't now ?

EDIT: I have managed to set a 4 character password as root. But still, why won't it accept a short password from the user ?

Last edited by moljac024 (2008-10-06 18:44:40)


The day Microsoft makes a product that doesn't suck, is the day they make a vacuum cleaner.
--------------------------------------------------------------------------------------------------------------
But if they tell you that I've lost my mind, maybe it's not gone just a little hard to find...

Offline

#2 2008-10-06 19:30:42

bluewind
Administrator
From: Austria
Registered: 2008-07-13
Posts: 172
Website

Re: Short user passwords

moljac024 wrote:

EDIT: I have managed to set a 4 character password as root. But still, why won't it accept a short password from the user ?

Well that's a feature. Since short passwords are weak they are rejected. (man passwd line 45-48)

Offline

#3 2008-10-07 01:51:54

yo
Member
Registered: 2008-08-31
Posts: 25

Re: Short user passwords

lewl my pass is one letter long big_smile
the the same for user and root

Offline

#4 2008-10-07 20:30:47

ArchArael
Member
Registered: 2005-06-14
Posts: 504

Re: Short user passwords

yo wrote:

lewl my pass is one letter long big_smile
the the same for user and root

lol

Then be sure to avoid starting sshd or check your sshd_config file at least: 

arael[~]$grep PermitRootLogin /etc/ssh/sshd_config 
PermitRootLogin no
arael[~]$

Last edited by ArchArael (2008-10-07 20:40:16)

Offline

#5 2008-10-07 21:09:51

fukawi2
Ex-Administratorino
From: .vic.au
Registered: 2007-09-28
Posts: 6,224
Website

Re: Short user passwords

moljac024 wrote:

...I can't set it back to a 4 character password. passwd complains that the password is too short.

PAM is the system that's enforcing this restricting I believe. I can't find any relevant documentation about password lengths at the moment, but Googling should turn something up for you smile

Offline

#6 2008-10-08 10:35:05

bluewind
Administrator
From: Austria
Registered: 2008-07-13
Posts: 172
Website

Re: Short user passwords

Offline

#7 2008-10-08 10:39:17

Ramses de Norre
Member
From: Leuven - Belgium
Registered: 2007-03-27
Posts: 1,289

Re: Short user passwords

ArchArael wrote:
yo wrote:

lewl my pass is one letter long big_smile
the the same for user and root

lol

Then be sure to avoid starting sshd or check your sshd_config file at least: 

arael[~]$grep PermitRootLogin /etc/ssh/sshd_config 
PermitRootLogin no
arael[~]$

That isn't sufficient if your user has a one letter password too.. I suggest configuring ssh for RSA authentication and disabling password authentication.

Offline

#8 2008-10-08 15:35:13

ArchArael
Member
Registered: 2005-06-14
Posts: 504

Re: Short user passwords

Ramses de Norre wrote:

That isn't sufficient if your user has a one letter password too.. I suggest configuring ssh for RSA authentication and disabling password authentication.

That's nice tip.

Offline

#9 2008-10-08 19:36:46

yo
Member
Registered: 2008-08-31
Posts: 25

Re: Short user passwords

Ramses de Norre wrote:

    That isn't sufficient if your user has a one letter password too.. I suggest configuring ssh for RSA authentication and disabling password authentication.

mmmmmmmm i dont know what is all that, whats the difference?

Offline

#10 2008-10-08 21:56:41

bender02
Member
From: UK
Registered: 2007-02-04
Posts: 1,328

Re: Short user passwords

yo wrote:

Ramses de Norre wrote:

    That isn't sufficient if your user has a one letter password too.. I suggest configuring ssh for RSA authentication and disabling password authentication.

mmmmmmmm i dont know what is all that, whats the difference?

See eg here: http://sial.org/howto/openssh/publickey-auth/
Also, google is your friend.

Finally, what's your IP? [edit: mmmmmmmm so that I can hack into your computer more easily...]

Last edited by bender02 (2008-10-08 21:57:51)

Offline

#11 2008-10-09 00:44:33

yo
Member
Registered: 2008-08-31
Posts: 25

Re: Short user passwords

mmmmmmmmmmmmmmmm hack my balls
and i have a dinamic ip

Offline

#12 2008-10-09 00:52:04

yo
Member
Registered: 2008-08-31
Posts: 25

Re: Short user passwords

And my pass is 1 mmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmm

Offline

#13 2008-10-09 13:29:34

ArchArael
Member
Registered: 2005-06-14
Posts: 504

Re: Short user passwords

Thank you for the link. Very clear and short. Bookmarked. smile

Offline

Board footer

Powered by FluxBB