source: postlfs/security/cracklib.xml@ 59d9079

10.0 10.1 11.0 11.1 7.10 7.6 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind krejzi/svn lazarus nosym perl-modules qt5new trunk upgradedb xry111/intltool xry111/test-20220226
Last change on this file since 59d9079 was 59d9079, checked in by Pierre Labastie <pieere@…>, 8 years ago

Tags for X

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@14240 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 10.7 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY cracklib-download-http "&sourceforge-repo;/cracklib/cracklib-&cracklib-version;.tar.gz">
8 <!ENTITY cracklib-download-ftp " ">
9 <!ENTITY cracklib-md5sum "90536219c520add2ceb3c26f0d7da404">
10 <!ENTITY cracklib-size "624 KB">
11 <!ENTITY cracklib-buildsize "24 MB">
12 <!ENTITY cracklib-time "0.1 SBU">
13
14 <!ENTITY crackdict-version "20080507">
15 <!ENTITY crackdict-download "&sourceforge-repo;/cracklib/cracklib-words-&crackdict-version;.gz">
16 <!ENTITY crackdict-size "4.5 MB">
17 <!ENTITY crackdict-md5sum "7fa6ba0cd50e7f9ccaf4707c810b14f1">
18]>
19
20<sect1 id="cracklib" xreflabel="CrackLib-&cracklib-version;">
21 <?dbhtml filename="cracklib.html"?>
22
23 <sect1info>
24 <othername>$LastChangedBy$</othername>
25 <date>$Date$</date>
26 </sect1info>
27
28 <title>CrackLib-&cracklib-version;</title>
29
30 <indexterm zone="cracklib">
31 <primary sortas="a-CrackLib">CrackLib</primary>
32 </indexterm>
33
34 <sect2 role="package">
35 <title>Introduction to CrackLib</title>
36
37 <para>The <application>CrackLib</application> package contains a
38 library used to enforce strong passwords by comparing user selected
39 passwords to words in chosen word lists.</para>
40
41 &lfs76_checked;
42
43 <bridgehead renderas="sect3">Package Information</bridgehead>
44 <itemizedlist spacing="compact">
45 <listitem>
46 <para>Download (HTTP): <ulink url="&cracklib-download-http;"/></para>
47 </listitem>
48 <listitem>
49 <para>Download (FTP): <ulink url="&cracklib-download-ftp;"/></para>
50 </listitem>
51 <listitem>
52 <para>Download MD5 sum: &cracklib-md5sum;</para>
53 </listitem>
54 <listitem>
55 <para>Download size: &cracklib-size;</para>
56 </listitem>
57 <listitem>
58 <para>Estimated disk space required: &cracklib-buildsize;</para>
59 </listitem>
60 <listitem>
61 <para>Estimated build time: &cracklib-time;</para>
62 </listitem>
63 </itemizedlist>
64
65 <bridgehead renderas="sect3">Additional Downloads</bridgehead>
66 <itemizedlist spacing="compact">
67 <listitem>
68 <para>Recommended word list for English-speaking countries (size:
69 &crackdict-size;; md5sum: &crackdict-md5sum;):
70 <ulink url="&crackdict-download;"/></para>
71 </listitem>
72 </itemizedlist>
73
74 <para>There are additional word lists available for download, e.g., from
75 <ulink url="http://www.cotse.com/tools/wordlists.htm"/>.
76 <application>CrackLib</application> can utilize as many, or as few word
77 lists you choose to install.</para>
78
79 <important>
80 <para>Users tend to base their passwords on regular words of the spoken
81 language, and crackers know that. <application>CrackLib</application> is
82 intended to filter out such bad passwords at the source using a
83 dictionary created from word lists. To accomplish this, the word list(s)
84 for use with <application>CrackLib</application> must be an exhaustive
85 list of words and word-based keystroke combinations likely to be chosen
86 by users of the system as (guessable) passwords.</para>
87
88 <para>The default word list recommended above for downloading mostly
89 satisfies this role in English-speaking countries. In other situations,
90 it may be necessary to download (or even create) additional word
91 lists.</para>
92
93 <para>Note that word lists suitable for spell-checking are not usable
94 as <application>CrackLib</application> word lists in countries with
95 non-Latin based alphabets, because of <quote>word-based keystroke
96 combinations</quote> that make bad passwords.</para>
97 </important>
98
99 <bridgehead renderas="sect3">CrackLib Dependencies</bridgehead>
100
101 <bridgehead renderas="sect4">Optional</bridgehead>
102 <para role="optional">
103 <xref linkend="python2"/>
104 </para>
105
106 <para condition="html" role="usernotes">User Notes:
107 <ulink url="&blfs-wiki;/cracklib"/>
108 </para>
109 </sect2>
110
111 <sect2 role="installation">
112 <title>Installation of CrackLib</title>
113
114 <para>Install <application>CrackLib</application> by running the following
115 commands:</para>
116
117<screen><userinput>./configure --prefix=/usr \
118 --with-default-dict=/lib/cracklib/pw_dict \
119 --disable-static &amp;&amp;
120make</userinput></screen>
121
122 <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
123
124<screen role="root"><userinput>make install &amp;&amp;
125mv -v /usr/lib/libcrack.so.* /lib &amp;&amp;
126ln -sfv ../../lib/$(readlink /usr/lib/libcrack.so) /usr/lib/libcrack.so</userinput></screen>
127
128 <para>Issue the following commands as the
129 <systemitem class="username">root</systemitem> user to install the
130 recommended word list and create the <application>CrackLib</application>
131 dictionary. Other word lists (text based, one word per line) can also be
132 used by simply installing them into
133 <filename class="directory">/usr/share/dict</filename> and adding them
134 to the <command>create-cracklib-dict</command> command.</para>
135
136<screen role="root"><userinput>install -v -m644 -D ../cracklib-words-&crackdict-version;.gz \
137 /usr/share/dict/cracklib-words.gz &amp;&amp;
138gunzip -v /usr/share/dict/cracklib-words.gz &amp;&amp;
139ln -v -sf cracklib-words /usr/share/dict/words &amp;&amp;
140echo $(hostname) >> /usr/share/dict/cracklib-extra-words &amp;&amp;
141install -v -m755 -d /lib/cracklib &amp;&amp;
142create-cracklib-dict /usr/share/dict/cracklib-words \
143 /usr/share/dict/cracklib-extra-words</userinput></screen>
144
145 <para>If desired, check the proper operation of the library as an
146 unprivileged user by issuing the following command:</para>
147
148<screen><userinput>make test</userinput></screen>
149
150 <important>
151 <para>If you are installing <application>CrackLib</application> after
152 your LFS system has been completed and you have the
153 <application>Shadow</application> package installed, you must
154 reinstall <xref linkend="shadow"/> if you wish to provide strong
155 password support on your system. If you are now going to install the
156 <xref linkend="linux-pam"/> package, you may disregard this note as
157 <application>Shadow</application> will be reinstalled after the
158 <application>Linux-PAM</application> installation.</para>
159 </important>
160
161 </sect2>
162
163 <sect2 role="commands">
164 <title>Command Explanations</title>
165
166 <para><parameter>--with-default-dict=/lib/cracklib/pw_dict</parameter>:
167 This parameter forces the installation of the
168 <application>CrackLib</application> dictionary to the
169 <filename class="directory">/lib</filename> hierarchy.</para>
170
171 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
172 href="../../xincludes/static-libraries.xml"/>
173
174 <para><command>mv -v /usr/lib/libcrack.so.2* /lib</command> and
175 <command>ln -v -sf ../../lib/libcrack.so.2.8.1 ...</command>: These two
176 commands move the <filename class="libraryfile">libcrack.so.2.8.1</filename>
177 library and associated symlink from
178 <filename class="directory">/usr/lib</filename> to
179 <filename class="directory">/lib</filename>, then recreates the
180 <filename class="symlink">/usr/lib/libcrack.so</filename> symlink pointing
181 to the relocated file.</para>
182
183 <para><command>install -v -m644 -D ...</command>: This command creates the
184 <filename class="directory">/usr/share/dict</filename> directory (if it
185 doesn't already exist) and installs the compressed word list there.</para>
186
187 <para><command>ln -v -s cracklib-words /usr/share/dict/words</command>: The
188 word list is linked to <filename>/usr/share/dict/words</filename> as
189 historically, <filename>words</filename> is the primary word list in the
190 <filename class="directory">/usr/share/dict</filename> directory. Omit this
191 command if you already have a <filename>/usr/share/dict/words</filename>
192 file installed on your system.</para>
193
194 <para><command>echo $(hostname) >>...</command>: The value of
195 <command>hostname</command> is echoed to a file called
196 <filename>cracklib-extra-words</filename>. This extra file is intended to be
197 a site specific list which includes easy to guess passwords such as company
198 or department names, user's names, product names, computer names, domain
199 names, etc.</para>
200
201 <para><command>create-cracklib-dict ...</command>: This command creates the
202 <application>CrackLib</application> dictionary from the word lists. Modify
203 the command to add any additional word lists you have installed.</para>
204
205 </sect2>
206
207 <sect2 role="content">
208 <title>Contents</title>
209
210 <segmentedlist>
211 <segtitle>Installed Programs</segtitle>
212 <segtitle>Installed Libraries</segtitle>
213 <segtitle>Installed Directories</segtitle>
214
215 <seglistitem>
216 <seg>cracklib-check, cracklib-format, cracklib-packer,
217 cracklib-unpacker and create-cracklib-dict</seg>
218
219 <seg>libcrack.so and the _cracklibmodule.so
220 <application>Python</application> module</seg>
221
222 <seg>/lib/cracklib, /usr/share/dict and /usr/share/cracklib</seg>
223 </seglistitem>
224 </segmentedlist>
225
226 <variablelist>
227 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
228 <?dbfo list-presentation="list"?>
229 <?dbhtml list-presentation="table"?>
230
231 <varlistentry id="cracklib-check">
232 <term><command>cracklib-check</command></term>
233 <listitem>
234 <para>is used to determine if a password is strong.</para>
235 <indexterm zone="cracklib cracklib-check">
236 <primary sortas="b-cracklib-check">cracklib-check</primary>
237 </indexterm>
238 </listitem>
239 </varlistentry>
240
241 <varlistentry id="create-cracklib-dict">
242 <term><command>create-cracklib-dict</command></term>
243 <listitem>
244 <para>is used to create the <application>CrackLib</application>
245 dictionary from the given word list(s).</para>
246 <indexterm zone="cracklib create-cracklib-dict">
247 <primary sortas="b-create-cracklib-dict">create-cracklib-dict</primary>
248 </indexterm>
249 </listitem>
250 </varlistentry>
251
252 <varlistentry id="libcrack">
253 <term><filename class="libraryfile">libcrack.so</filename></term>
254 <listitem>
255 <para>provides a fast dictionary lookup method for strong
256 password enforcement.</para>
257 <indexterm zone="cracklib libcrack">
258 <primary sortas="c-libcrack">libcrack.so</primary>
259 </indexterm>
260 </listitem>
261 </varlistentry>
262
263 </variablelist>
264
265 </sect2>
266
267</sect1>
Note: See TracBrowser for help on using the repository browser.