pam.d

gistfile1.txt

Políticas de contraseñas:
cracklib, para que las contraseñas sean seguras:


prioridades para chequeo de contraseñas:
	1. /etc/security/pwquality.conf
	2. módulo pam.d

Ver las variables en: https://linux.die.net/man/8/pam_cracklib
cat /etc/security/pwquality.conf | grep -v '^#'
minlen = 12
dcredit = -1
ucredit = -1
lcredit = -1
ocredit = 1
minclass = 4
maxrepeat = 2
maxclassrepeat = 3
difok = 5
maxsequence = 2
#sesiones
reject_username = 1
gecoscheck = 1 
enforce_for_root = 1 



echo "password required pam_cracklib.so dcredit=-1 ucredit=-1 ocredit=-1 lcredit=0 minlen=12" >>/etc/pam.d/system.auth
echo "password required pam_cracklib.so dcredit=-1 ucredit=-1 ocredit=-1 lcredit=0 minlen=12" >>/etc/pam.d/passwd.auth