pwquality.conf(5)
NAME
pwquality.conf - configuration for the libpwquality library
SYNOPSIS
/etc/security/pwquality.conf /etc/security/pwquality.conf.d/*.conf
DESCRIPTION
pwquality.conf provides a way to configure the default password quality requirements for the system passwords. This file is read by the libpwquality library and utilities that use this library for checking and generating passwords. The file has a very simple name = value format with possible comments starting with "#" character. The whitespace at the beginning of line, end of line, and around the "=" sign is ignored. The libpwquality library also first reads all *.conf files from the /etc/security/pwquality.conf.d directory in ASCII sorted order. The values of the same settings are overriden in the order the files are parsed.
OPTIONS
The possible options in the file are:
difok
Number of characters in the new password that must not be present
in the old password. (default 1)
minlen
Minimum acceptable size for the new password (plus one if credits
are not disabled which is the default). (See pam_pwquality(8).)
Cannot be set to lower value than 6. (default 8)
dcredit
The maximum credit for having digits in the new password. If less
than 0 it is the minimum number of digits in the new password.
(default 0)
ucredit
The maximum credit for having uppercase characters in the new
password. If less than 0 it is the minimum number of uppercase
characters in the new password. (default 0)
lcredit
The maximum credit for having lowercase characters in the new
password. If less than 0 it is the minimum number of lowercase
characters in the new password. (default 0)
ocredit
The maximum credit for having other characters in the new password.
If less than 0 it is the minimum number of other characters in the
new password. (default 0)
minclass
The minimum number of required classes of characters for the new
password (digits, uppercase, lowercase, others). (default 0)
maxrepeat
The maximum number of allowed same consecutive characters in the
new password. The check is disabled if the value is 0. (default 0)
maxsequence
The maximum length of monotonic character sequences in the new
password. Examples of such sequence are '12345' or 'fedcb'. Note
that most such passwords will not pass the simplicity check unless
the sequence is only a minor part of the password. The check is
disabled if the value is 0. (default 0)
maxclassrepeat
The maximum number of allowed consecutive characters of the same
class in the new password. The check is disabled if the value is
0. (default 0)
gecoscheck
If nonzero, check whether the words longer than 3 characters from
the GECOS field of the user's passwd(5) entry are contained in the
new password. The check is disabled if the value is 0. (default 0)
dictcheck
If nonzero, check whether the password (with possible
modifications) matches a word in a dictionary. Currently the
dictionary check is performed using the cracklib library. (default
1)
badwords
Space separated list of words that must not be contained in the
password. These are additional words to the cracklib dictionary
check. This setting can be also used by applications to emulate the
gecos check for user accounts that are not created yet.
dictpath
Path to the cracklib dictionaries. Default is to use the cracklib
default.
SEE ALSO
pwscore(1), pwmake(1), pam_pwquality(8)
AUTHORS
Tomas Mraz <tmraz@redhat.com>
Opportunity
Personal Opportunity - Free software gives you access to billions of dollars of software at no cost. Use this software for your business, personal use or to develop a profitable skill. Access to source code provides access to a level of capabilities/information that companies protect though copyrights. Open source is a core component of the Internet and it is available to you. Leverage the billions of dollars in resources and capabilities to build a career, establish a business or change the world. The potential is endless for those who understand the opportunity.
Business Opportunity - Goldman Sachs, IBM and countless large corporations are leveraging open source to reduce costs, develop products and increase their bottom lines. Learn what these companies know about open source and how open source can give you the advantage.
Free Software
Free Software provides computer programs and capabilities at no cost but more importantly, it provides the freedom to run, edit, contribute to, and share the software. The importance of free software is a matter of access, not price. Software at no cost is a benefit but ownership rights to the software and source code is far more significant.
Free Office Software - The Libre Office suite provides top desktop productivity tools for free. This includes, a word processor, spreadsheet, presentation engine, drawing and flowcharting, database and math applications. Libre Office is available for Linux or Windows.
Free Books
The Free Books Library is a collection of thousands of the most popular public domain books in an online readable format. The collection includes great classical literature and more recent works where the U.S. copyright has expired. These books are yours to read and use without restrictions.
Source Code - Want to change a program or know how it works? Open Source provides the source code for its programs so that anyone can use, modify or learn how to write those programs themselves. Visit the GNU source code repositories to download the source.
Education
Study at Harvard, Stanford or MIT - Open edX provides free online courses from Harvard, MIT, Columbia, UC Berkeley and other top Universities. Hundreds of courses for almost all major subjects and course levels. Open edx also offers some paid courses and selected certifications.
Linux Manual Pages - A man or manual page is a form of software documentation found on Linux/Unix operating systems. Topics covered include computer programs (including library and system calls), formal standards and conventions, and even abstract concepts.
