source: postlfs/security/libpwquality.xml@ 2c64887e

10.0 10.1 11.0 8.4 9.0 9.1 ken/refactor-virt lazarus qt5new trunk xry111/git-date xry111/git-date-for-trunk xry111/git-date-test
Last change on this file since 2c64887e was 2c64887e, checked in by Pierre Labastie <pieere@…>, 3 years ago

Add and document a switch for using Python 3 in libpwquality

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@21056 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 7.9 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY libpwquality-download-http "https://github.com/libpwquality/libpwquality/releases/download/libpwquality-&libpwquality-version;/libpwquality-&libpwquality-version;.tar.bz2">
8 <!ENTITY libpwquality-download-ftp " ">
9 <!ENTITY libpwquality-md5sum "b8defcc7280a90e9400d6689c93a279c">
10 <!ENTITY libpwquality-size "440 KB">
11 <!ENTITY libpwquality-buildsize "4.0 MB">
12 <!ENTITY libpwquality-time "less than 0.1 SBU">
13]>
14
15<sect1 id="libpwquality" xreflabel="libpwquality-&libpwquality-version;">
16 <?dbhtml filename="libpwquality.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy: fernando $</othername>
20 <date>$Date: 2015-09-25 08:48:24 -0500 (Fri, 25 Sep 2015) $</date>
21 </sect1info>
22
23 <title>libpwquality-&libpwquality-version;</title>
24
25 <indexterm zone="libpwquality">
26 <primary sortas="a-libpwquality">libpwquality</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to libpwquality</title>
31
32 <para>
33 The <application>libpwquality</application> package provides common
34 functions for password quality checking and also scoring them based on
35 their apparent randomness. The library also provides a function for
36 generating random passwords with good pronounceability.
37 </para>
38
39 &lfs83_checked;
40
41 <bridgehead renderas="sect3">Package Information</bridgehead>
42 <itemizedlist spacing="compact">
43 <listitem>
44 <para>
45 Download (HTTP): <ulink url="&libpwquality-download-http;"/>
46 </para>
47 </listitem>
48 <listitem>
49 <para>
50 Download (FTP): <ulink url="&libpwquality-download-ftp;"/>
51 </para>
52 </listitem>
53 <listitem>
54 <para>
55 Download MD5 sum: &libpwquality-md5sum;
56 </para>
57 </listitem>
58 <listitem>
59 <para>
60 Download size: &libpwquality-size;
61 </para>
62 </listitem>
63 <listitem>
64 <para>
65 Estimated disk space required: &libpwquality-buildsize;
66 </para>
67 </listitem>
68 <listitem>
69 <para>
70 Estimated build time: &libpwquality-time;
71 </para>
72 </listitem>
73 </itemizedlist>
74
75 <bridgehead renderas="sect3">libpwquality Dependencies</bridgehead>
76
77 <bridgehead renderas="sect4">Required</bridgehead>
78 <para role="required">
79 <xref linkend="cracklib"/>
80 </para>
81
82 <bridgehead renderas="sect4">Recommended</bridgehead>
83 <para role="recommended">
84 <xref linkend="linux-pam"/>
85 </para>
86
87 <bridgehead renderas="sect4">Optional</bridgehead>
88 <para role="optional">
89 <xref linkend="python2"/>
90 </para>
91
92 <para condition="html" role="usernotes">User Notes:
93 <ulink url="&blfs-wiki;/libpwquality"/>
94 </para>
95 </sect2>
96
97 <sect2 role="installation">
98 <title>Installation of libpwquality</title>
99
100 <para>
101 Install <application>libpwquality</application> by running the following
102 commands:
103 </para>
104
105<screen><userinput>./configure --prefix=/usr --disable-static \
106 --with-securedir=/lib/security \
107 --with-python-binary=python3 &amp;&amp;
108make</userinput></screen>
109
110 <para>
111 This package does not come with a test suite.
112 </para>
113
114 <para>
115 Now, as the <systemitem class="username">root</systemitem> user:
116 </para>
117
118<screen role="root"><userinput>make install</userinput></screen>
119
120 </sect2>
121
122 <sect2 role="commands">
123 <title>Command Explanations</title>
124
125 <para>
126 <parameter>--with-python-binary=python3</parameter>: This parameter gives
127 the location of the <application>Python</application> binary. The default
128 is <parameter>python</parameter>, and requires <xref linkend="python2"/>.
129 </para>
130 </sect2>
131
132 <sect2 role="configuration">
133 <title>Configuring Libpwquality</title>
134
135 <para>
136 <application>Libpwquality</application> is intended to be a
137 functional replacement for the <filename>pam_cracklib.so</filename>
138 module with additional options. To replace the
139 <filename>pam_cracklib.so</filename> module with the
140 <filename>pam_pwquality.so</filename> module, execute the following
141 commands as the <systemitem class="username">root</systemitem> user:
142 </para>
143
144<screen role="root"><userinput>mv /etc/pam.d/system-password{,.orig} &amp;&amp;
145cat &gt; /etc/pam.d/system-password &lt;&lt; "EOF"
146<literal># Begin /etc/pam.d/system-password
147
148# check new passwords for strength (man pam_pwquality)
149password required pam_pwquality.so authtok_type=UNIX retry=1 difok=1 \
150 minlen=8 dcredit=0 ucredit=0 \
151 lcredit=0 ocredit=0 minclass=1 \
152 maxrepeat=0 maxsequence=0 \
153 maxclassrepeat=0 geoscheck=0 \
154 dictcheck=1 usercheck=1 \
155 enforcing=1 badwords="" \
156 dictpath=/lib/cracklib/pw_dict
157# use sha512 hash for encryption, use shadow, and use the
158# authentication token (chosen password) set by pam_pwquality
159# above (or any previous modules)
160password required pam_unix.so sha512 shadow use_authtok
161
162# End /etc/pam.d/system-password</literal>
163EOF
164</userinput></screen>
165
166 </sect2>
167
168 <sect2 role="content">
169 <title>Contents</title>
170
171 <segmentedlist>
172 <segtitle>Installed Programs</segtitle>
173 <segtitle>Installed Libraries</segtitle>
174 <segtitle>Installed Directories</segtitle>
175
176 <seglistitem>
177 <seg>
178 pwscore and pwmake
179 </seg>
180 <seg>
181 pam_pwquality.so and libpwquality.so
182 </seg>
183 <seg>
184 None
185 <!-- /etc/security was installed by Linux-PAM -->
186 </seg>
187 </seglistitem>
188 </segmentedlist>
189
190 <variablelist>
191 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
192 <?dbfo list-presentation="list"?>
193 <?dbhtml list-presentation="table"?>
194
195 <varlistentry id="pwmake">
196 <term><command>pwmake</command></term>
197 <listitem>
198 <para>
199 is a simple configurable tool for generating random
200 and relatively easily pronounceable passwords.
201 </para>
202 <indexterm zone="libpwquality pwmake">
203 <primary sortas="b-pwmake">pwmake</primary>
204 </indexterm>
205 </listitem>
206 </varlistentry>
207
208 <varlistentry id="pwscore">
209 <term><command>pwscore</command></term>
210 <listitem>
211 <para>
212 is a simple tool for checking quality of a password.
213 </para>
214 <indexterm zone="libpwquality pwscore">
215 <primary sortas="b-pwscore">pwscore</primary>
216 </indexterm>
217 </listitem>
218 </varlistentry>
219
220 <varlistentry id="libpwquality-lib">
221 <term><filename class="libraryfile">libpwquality.so</filename></term>
222 <listitem>
223 <para>
224 contains API functions for checking the password quality.
225 </para>
226 <indexterm zone="libpwquality libpwquality-lib">
227 <primary sortas="c-libpwquality">libpwquality.so</primary>
228 </indexterm>
229 </listitem>
230 </varlistentry>
231
232 <varlistentry id="pam_pwquality">
233 <term><filename class="libraryfile">pam_pwquality.so</filename></term>
234 <listitem>
235 <para>
236 is a <application>Linux PAM</application> module used to perform
237 password quality checking.
238 </para>
239 <indexterm zone="libpwquality pam_pwquality">
240 <primary sortas="c-pam_pwquality">pam_pwquality.so</primary>
241 </indexterm>
242 </listitem>
243 </varlistentry>
244
245 </variablelist>
246
247 </sect2>
248
249</sect1>
Note: See TracBrowser for help on using the repository browser.