Enforcing password complexity with pwquality.conf (libpam-pwquality)

I was working on creating methods that would ensure users’ passwords meet complexity standards on several boxes. I figured it was a fairly simple task and should take at most 5 minutes to finish but it eventually took a little longer.

Most of the howtos I found on this topic were outdated, some used cracklib or login.defs to ensure certain settings are in place. I am not saying it is wrong as they will most likely allow you to succeed, however some mentioned pam_pwquality as successor so I figured to try it out. Then I have got a little confused since my machine already had a /etc/security/pwquality.conf file but libpam-pwquality was missing from the system so…

Continue reading