|
Solaris 9 is a little confused when it comes to security. It implements some cool features likes roles, RBAC and BSM auditing, but doesn't include decent password strength or password history checks. Luckily Solaris 9 does include PAM so these things can be added as modules. Password cracking is easy, we just need to add a Solaris version of pam_cracklib, but I was unable to find a suitable module for password history. I decided to modify the pam_cracklib module to include a password history check...
I modified a copy of the solaris friendly cracklib from sourceforge. It's currently at version 0.11 and has been for some time. Copyright: Krzysztof Majewski 2003 - 2006
Copyright: (Password history modification) Mark Boddington 2006 When you have extracted the archive you will want to change the constants.h file to settings suitable for your environment. You will want to chose a random two character salt for HISTORY_SALT and change the HIST_LENGTH to be the number of passwords you want to remember. The old passwords are stored in /etc/security/pass-history unless you change the PASS_HISTORY constant. Enjoy. Last update : 20-10-2006 18:36
|
|
|
Add your comment
|
technology Support Analyst
By: Jose Diaz () on 20-10-2007 21:54