Re: [cobalt-security] RaQ needs to be more picky about passwords

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

BobbyT wrote:

> Comments?  Suggestions? Scripts?
> I await your replies.

There's already a program on your RaQ to do that; I don't remember
exactly what it is, but it's called by the passwd program (see "man
passwd").  Sun, or you, could implement it.

To see what I man run "passwd" from your nonprivileged user prompt, and
try just typing in your name or a word from the dictionary.

> P.S. Why doesn't the raq allow more than 8 characters in passwords?  It
> ignores anything past 8 that you enter.  My root password ended up being
> half the size.

It depends on the RaQ.  RaQ4, as I recall, uses a library that allows
much larger passwords.  However it's easy to generate a secure password
in eight characters, and it's easy to generate an insecure password
using many more characters.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
Linux and Cobalt/Sun/RaQ Consulting
nobaloney.net
P. O. Box 52672, Riverside, CA  92517
voice: (909) 778-9980  *  fax: (702) 548-9484