source: postlfs/security/libpwquality.xml@ fda29e4

11.0 qt5new trunk
Last change on this file since fda29e4 was fda29e4, checked in by Xi Ruoyao <xry111@…>, 4 months ago

remove hardcoded $Date: $

  • Property mode set to 100644
File size: 8.4 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY libpwquality-download-http "https://github.com/libpwquality/libpwquality/releases/download/libpwquality-&libpwquality-version;/libpwquality-&libpwquality-version;.tar.bz2">
8 <!ENTITY libpwquality-download-ftp " ">
9 <!ENTITY libpwquality-md5sum "1fe43f6641dbf1e1766e2a02cf68a9c3">
10 <!ENTITY libpwquality-size "420 KB">
11 <!ENTITY libpwquality-buildsize "4.1 MB">
12 <!ENTITY libpwquality-time "less than 0.1 SBU">
13]>
14
15<sect1 id="libpwquality" xreflabel="libpwquality-&libpwquality-version;">
16 <?dbhtml filename="libpwquality.html"?>
17
18 <sect1info>
19 <date>$Date$</date>
20 </sect1info>
21
22 <title>libpwquality-&libpwquality-version;</title>
23
24 <indexterm zone="libpwquality">
25 <primary sortas="a-libpwquality">libpwquality</primary>
26 </indexterm>
27
28 <sect2 role="package">
29 <title>Introduction to libpwquality</title>
30
31 <para>
32 The <application>libpwquality</application> package provides common
33 functions for password quality checking and also scoring them based on
34 their apparent randomness. The library also provides a function for
35 generating random passwords with good pronounceability.
36 </para>
37
38 &lfs101_checked;
39
40 <bridgehead renderas="sect3">Package Information</bridgehead>
41 <itemizedlist spacing="compact">
42 <listitem>
43 <para>
44 Download (HTTP): <ulink url="&libpwquality-download-http;"/>
45 </para>
46 </listitem>
47 <listitem>
48 <para>
49 Download (FTP): <ulink url="&libpwquality-download-ftp;"/>
50 </para>
51 </listitem>
52 <listitem>
53 <para>
54 Download MD5 sum: &libpwquality-md5sum;
55 </para>
56 </listitem>
57 <listitem>
58 <para>
59 Download size: &libpwquality-size;
60 </para>
61 </listitem>
62 <listitem>
63 <para>
64 Estimated disk space required: &libpwquality-buildsize;
65 </para>
66 </listitem>
67 <listitem>
68 <para>
69 Estimated build time: &libpwquality-time;
70 </para>
71 </listitem>
72 </itemizedlist>
73
74 <bridgehead renderas="sect3">libpwquality Dependencies</bridgehead>
75
76 <bridgehead renderas="sect4">Required</bridgehead>
77 <para role="required">
78 <xref linkend="cracklib"/>
79 </para>
80
81 <bridgehead renderas="sect4">Recommended</bridgehead>
82 <para role="recommended">
83 <xref linkend="linux-pam"/>
84 </para>
85<!-- Do not advertise python 2 since python 3 can be used
86 <bridgehead renderas="sect4">Optional</bridgehead>
87 <para role="optional">
88 <xref linkend="python2"/>
89 </para>
90-->
91 <para condition="html" role="usernotes">User Notes:
92 <ulink url="&blfs-wiki;/libpwquality"/>
93 </para>
94 </sect2>
95
96 <sect2 role="installation">
97 <title>Installation of libpwquality</title>
98
99 <para>
100 Install <application>libpwquality</application> by running the following
101 commands:
102 </para>
103
104<screen><userinput>./configure --prefix=/usr \
105 --disable-static \
106 --with-securedir=/lib/security \
107 --with-python-binary=python3 &amp;&amp;
108make</userinput></screen>
109
110 <para>
111 This package does not come with a test suite.
112 </para>
113
114 <para>
115 Now, as the <systemitem class="username">root</systemitem> user:
116 </para>
117
118<screen role="root"><userinput>make install &amp;&amp;
119
120mv -v /usr/lib/libpwquality.so.* /lib &amp;&amp;
121ln -sfv ../../lib/$(readlink /usr/lib/libpwquality.so) /usr/lib/libpwquality.so</userinput></screen>
122
123 </sect2>
124
125 <sect2 role="commands">
126 <title>Command Explanations</title>
127
128 <para>
129 <parameter>--with-python-binary=python3</parameter>: This parameter gives
130 the location of the <application>Python</application> binary. The default
131 is <parameter>python</parameter>, and requires <xref linkend="python2"/>.
132 </para>
133
134 </sect2>
135
136 <sect2 role="configuration">
137 <title>Configuring libpwquality</title>
138
139<!--
140 <para>
141 <application>libpwquality</application> is intended to be a
142 functional replacement for the <filename>pam_cracklib.so</filename>
143 module with additional options. To replace the
144 <filename>pam_cracklib.so</filename> module with the
145 <filename>pam_pwquality.so</filename> module, execute the following
146 commands as the <systemitem class="username">root</systemitem> user:
147 </para>
148-->
149
150 <para>
151 <application>libpwquality</application> is intended to be a
152 functional replacement for the now-obsolete
153 <filename>pam_cracklib.so</filename> PAM module. To configure the system
154 to use the <filename>pam_pwquality</filename> module, execute the
155 following commands as the
156 <systemitem class="username">root</systemitem> user:
157 </para>
158
159<screen role="root"><userinput>mv /etc/pam.d/system-password{,.orig} &amp;&amp;
160cat &gt; /etc/pam.d/system-password &lt;&lt; "EOF"
161<literal># Begin /etc/pam.d/system-password
162
163# check new passwords for strength (man pam_pwquality)
164password required pam_pwquality.so authtok_type=UNIX retry=1 difok=1 \
165 minlen=8 dcredit=0 ucredit=0 \
166 lcredit=0 ocredit=0 minclass=1 \
167 maxrepeat=0 maxsequence=0 \
168 maxclassrepeat=0 geoscheck=0 \
169 dictcheck=1 usercheck=1 \
170 enforcing=1 badwords="" \
171 dictpath=/lib/cracklib/pw_dict
172# use sha512 hash for encryption, use shadow, and use the
173# authentication token (chosen password) set by pam_pwquality
174# above (or any previous modules)
175password required pam_unix.so sha512 shadow use_authtok
176
177# End /etc/pam.d/system-password</literal>
178EOF
179</userinput></screen>
180
181 </sect2>
182
183 <sect2 role="content">
184 <title>Contents</title>
185
186 <segmentedlist>
187 <segtitle>Installed Programs</segtitle>
188 <segtitle>Installed Libraries</segtitle>
189 <segtitle>Installed Directories</segtitle>
190
191 <seglistitem>
192 <seg>
193 pwscore and pwmake
194 </seg>
195 <seg>
196 pam_pwquality.so and libpwquality.so
197 </seg>
198 <seg>
199 None
200 <!-- /etc/security was installed by Linux-PAM -->
201 </seg>
202 </seglistitem>
203 </segmentedlist>
204
205 <variablelist>
206 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
207 <?dbfo list-presentation="list"?>
208 <?dbhtml list-presentation="table"?>
209
210 <varlistentry id="pwmake">
211 <term><command>pwmake</command></term>
212 <listitem>
213 <para>
214 is a simple configurable tool for generating random
215 and relatively easily pronounceable passwords
216 </para>
217 <indexterm zone="libpwquality pwmake">
218 <primary sortas="b-pwmake">pwmake</primary>
219 </indexterm>
220 </listitem>
221 </varlistentry>
222
223 <varlistentry id="pwscore">
224 <term><command>pwscore</command></term>
225 <listitem>
226 <para>
227 is a simple tool for checking quality of a password
228 </para>
229 <indexterm zone="libpwquality pwscore">
230 <primary sortas="b-pwscore">pwscore</primary>
231 </indexterm>
232 </listitem>
233 </varlistentry>
234
235 <varlistentry id="libpwquality-lib">
236 <term><filename class="libraryfile">libpwquality.so</filename></term>
237 <listitem>
238 <para>
239 contains API functions for checking the password quality
240 </para>
241 <indexterm zone="libpwquality libpwquality-lib">
242 <primary sortas="c-libpwquality">libpwquality.so</primary>
243 </indexterm>
244 </listitem>
245 </varlistentry>
246
247 <varlistentry id="pam_pwquality">
248 <term><filename class="libraryfile">pam_pwquality.so</filename></term>
249 <listitem>
250 <para>
251 is a <application>Linux PAM</application> module used to perform
252 password quality checking
253 </para>
254 <indexterm zone="libpwquality pam_pwquality">
255 <primary sortas="c-pam_pwquality">pam_pwquality.so</primary>
256 </indexterm>
257 </listitem>
258 </varlistentry>
259
260 </variablelist>
261
262 </sect2>
263
264</sect1>
Note: See TracBrowser for help on using the repository browser.