1PAM_PASSWDQC(8) BSD System Manager's Manual PAM_PASSWDQC(8)
2
4 pam_passwdqc — Password quality-control PAM module
5
7 [service-name] module-type control-flag pam_passwdqc [options]
8
10 The pam_passwdqc module is a simple password strength checking module for
11 PAM. In addition to checking regular passwords, it offers support for
12 passphrases and can provide randomly generated ones.
13
14 The pam_passwdqc module provides functionality for only one PAM manage‐
15 ment group: password changing. In terms of the module-type parameter,
16 this is the “password” feature.
17
18 The pam_chauthtok() service function may ask the user for a new password,
19 and verify that it meets certain minimum standards. If the chosen pass‐
20 word is unsatisfactory, the service function returns PAM_AUTHTOK_ERR.
21
22 The set of options that may be passed to the module is exactly the same
23 as the set of options that may be specified in the configuration file
24 (suggested location /etc/passwdqc.conf, to be specified in the
25 config=/etc/passwdqc.conf option). These options are described in
26 passwdqc.conf(5).
27
29 pam.conf(5), passwdqc.conf(5), pam(8).
30
31 https://www.openwall.com/passwdqc/
32
34 The pam_passwdqc module was written for Openwall GNU/*/Linux by Solar
35 Designer <solar at openwall.com>. This manual page was written for the
36 FreeBSD Project by ThinkSec AS and NAI Labs, the Security Research Divi‐
37 sion of Network Associates, Inc. under DARPA/SPAWAR contract
38 N66001-01-C-8035 (“CBOSS”), as part of the DARPA CHATS research program.
39 It has since been revised, most importantly to refer to passwdqc.conf(5)
40 instead of describing the options right on this page.
41
42Openwall Project December 9, 2019 Openwall Project