source: postlfs/security/libpwquality.xml@ e92e7dc

11.0 qt5new trunk
Last change on this file since e92e7dc was e92e7dc, checked in by Douglas R. Reno <renodr@…>, 4 months ago

libpwquality: adapt to merged-/usr changes

  • Property mode set to 100644
File size: 8.3 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY libpwquality-download-http "https://github.com/libpwquality/libpwquality/releases/download/libpwquality-&libpwquality-version;/libpwquality-&libpwquality-version;.tar.bz2">
8 <!ENTITY libpwquality-download-ftp " ">
9 <!ENTITY libpwquality-md5sum "1fe43f6641dbf1e1766e2a02cf68a9c3">
10 <!ENTITY libpwquality-size "420 KB">
11 <!ENTITY libpwquality-buildsize "4.1 MB">
12 <!ENTITY libpwquality-time "less than 0.1 SBU">
13]>
14
15<sect1 id="libpwquality" xreflabel="libpwquality-&libpwquality-version;">
16 <?dbhtml filename="libpwquality.html"?>
17
18 <sect1info>
19 <date>$Date$</date>
20 </sect1info>
21
22 <title>libpwquality-&libpwquality-version;</title>
23
24 <indexterm zone="libpwquality">
25 <primary sortas="a-libpwquality">libpwquality</primary>
26 </indexterm>
27
28 <sect2 role="package">
29 <title>Introduction to libpwquality</title>
30
31 <para>
32 The <application>libpwquality</application> package provides common
33 functions for password quality checking and also scoring them based on
34 their apparent randomness. The library also provides a function for
35 generating random passwords with good pronounceability.
36 </para>
37
38 &lfs101_checked;
39
40 <bridgehead renderas="sect3">Package Information</bridgehead>
41 <itemizedlist spacing="compact">
42 <listitem>
43 <para>
44 Download (HTTP): <ulink url="&libpwquality-download-http;"/>
45 </para>
46 </listitem>
47 <listitem>
48 <para>
49 Download (FTP): <ulink url="&libpwquality-download-ftp;"/>
50 </para>
51 </listitem>
52 <listitem>
53 <para>
54 Download MD5 sum: &libpwquality-md5sum;
55 </para>
56 </listitem>
57 <listitem>
58 <para>
59 Download size: &libpwquality-size;
60 </para>
61 </listitem>
62 <listitem>
63 <para>
64 Estimated disk space required: &libpwquality-buildsize;
65 </para>
66 </listitem>
67 <listitem>
68 <para>
69 Estimated build time: &libpwquality-time;
70 </para>
71 </listitem>
72 </itemizedlist>
73
74 <bridgehead renderas="sect3">libpwquality Dependencies</bridgehead>
75
76 <bridgehead renderas="sect4">Required</bridgehead>
77 <para role="required">
78 <xref linkend="cracklib"/>
79 </para>
80
81 <bridgehead renderas="sect4">Recommended</bridgehead>
82 <para role="recommended">
83 <xref linkend="linux-pam"/>
84 </para>
85<!-- Do not advertise python 2 since python 3 can be used
86 <bridgehead renderas="sect4">Optional</bridgehead>
87 <para role="optional">
88 <xref linkend="python2"/>
89 </para>
90-->
91 <para condition="html" role="usernotes">User Notes:
92 <ulink url="&blfs-wiki;/libpwquality"/>
93 </para>
94 </sect2>
95
96 <sect2 role="installation">
97 <title>Installation of libpwquality</title>
98
99 <para>
100 Install <application>libpwquality</application> by running the following
101 commands:
102 </para>
103
104<screen><userinput>./configure --prefix=/usr \
105 --disable-static \
106 --with-securedir=/usr/lib/security \
107 --with-python-binary=python3 &amp;&amp;
108make</userinput></screen>
109
110 <para>
111 This package does not come with a test suite.
112 </para>
113
114 <para>
115 Now, as the <systemitem class="username">root</systemitem> user:
116 </para>
117
118<screen role="root"><userinput>make install</userinput></screen>
119
120 </sect2>
121
122 <sect2 role="commands">
123 <title>Command Explanations</title>
124
125 <para>
126 <parameter>--with-python-binary=python3</parameter>: This parameter gives
127 the location of the <application>Python</application> binary. The default
128 is <parameter>python</parameter>, and requires <xref linkend="python2"/>.
129 </para>
130
131 </sect2>
132
133 <sect2 role="configuration">
134 <title>Configuring libpwquality</title>
135
136<!--
137 <para>
138 <application>libpwquality</application> is intended to be a
139 functional replacement for the <filename>pam_cracklib.so</filename>
140 module with additional options. To replace the
141 <filename>pam_cracklib.so</filename> module with the
142 <filename>pam_pwquality.so</filename> module, execute the following
143 commands as the <systemitem class="username">root</systemitem> user:
144 </para>
145-->
146
147 <para>
148 <application>libpwquality</application> is intended to be a
149 functional replacement for the now-obsolete
150 <filename>pam_cracklib.so</filename> PAM module. To configure the system
151 to use the <filename>pam_pwquality</filename> module, execute the
152 following commands as the
153 <systemitem class="username">root</systemitem> user:
154 </para>
155
156<screen role="root"><userinput>mv /etc/pam.d/system-password{,.orig} &amp;&amp;
157cat &gt; /etc/pam.d/system-password &lt;&lt; "EOF"
158<literal># Begin /etc/pam.d/system-password
159
160# check new passwords for strength (man pam_pwquality)
161password required pam_pwquality.so authtok_type=UNIX retry=1 difok=1 \
162 minlen=8 dcredit=0 ucredit=0 \
163 lcredit=0 ocredit=0 minclass=1 \
164 maxrepeat=0 maxsequence=0 \
165 maxclassrepeat=0 geoscheck=0 \
166 dictcheck=1 usercheck=1 \
167 enforcing=1 badwords="" \
168 dictpath=/usr/lib/cracklib/pw_dict
169# use sha512 hash for encryption, use shadow, and use the
170# authentication token (chosen password) set by pam_pwquality
171# above (or any previous modules)
172password required pam_unix.so sha512 shadow use_authtok
173
174# End /etc/pam.d/system-password</literal>
175EOF
176</userinput></screen>
177
178 </sect2>
179
180 <sect2 role="content">
181 <title>Contents</title>
182
183 <segmentedlist>
184 <segtitle>Installed Programs</segtitle>
185 <segtitle>Installed Libraries</segtitle>
186 <segtitle>Installed Directories</segtitle>
187
188 <seglistitem>
189 <seg>
190 pwscore and pwmake
191 </seg>
192 <seg>
193 pam_pwquality.so and libpwquality.so
194 </seg>
195 <seg>
196 None
197 <!-- /etc/security was installed by Linux-PAM -->
198 </seg>
199 </seglistitem>
200 </segmentedlist>
201
202 <variablelist>
203 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
204 <?dbfo list-presentation="list"?>
205 <?dbhtml list-presentation="table"?>
206
207 <varlistentry id="pwmake">
208 <term><command>pwmake</command></term>
209 <listitem>
210 <para>
211 is a simple configurable tool for generating random
212 and relatively easily pronounceable passwords
213 </para>
214 <indexterm zone="libpwquality pwmake">
215 <primary sortas="b-pwmake">pwmake</primary>
216 </indexterm>
217 </listitem>
218 </varlistentry>
219
220 <varlistentry id="pwscore">
221 <term><command>pwscore</command></term>
222 <listitem>
223 <para>
224 is a simple tool for checking quality of a password
225 </para>
226 <indexterm zone="libpwquality pwscore">
227 <primary sortas="b-pwscore">pwscore</primary>
228 </indexterm>
229 </listitem>
230 </varlistentry>
231
232 <varlistentry id="libpwquality-lib">
233 <term><filename class="libraryfile">libpwquality.so</filename></term>
234 <listitem>
235 <para>
236 contains API functions for checking the password quality
237 </para>
238 <indexterm zone="libpwquality libpwquality-lib">
239 <primary sortas="c-libpwquality">libpwquality.so</primary>
240 </indexterm>
241 </listitem>
242 </varlistentry>
243
244 <varlistentry id="pam_pwquality">
245 <term><filename class="libraryfile">pam_pwquality.so</filename></term>
246 <listitem>
247 <para>
248 is a <application>Linux PAM</application> module used to perform
249 password quality checking
250 </para>
251 <indexterm zone="libpwquality pam_pwquality">
252 <primary sortas="c-pam_pwquality">pam_pwquality.so</primary>
253 </indexterm>
254 </listitem>
255 </varlistentry>
256
257 </variablelist>
258
259 </sect2>
260
261</sect1>
Note: See TracBrowser for help on using the repository browser.