Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Drop libpam-cracklib which has been obsoleted upstream. | Steve Langasek | 2022-08-18 | 1 | -9/+0 |
| | |||||
* | pam-configs/unix: Default to yescript rather than sha512. From a | Sam Hartman | 2021-09-15 | 1 | -2/+2 |
| | | | | | | | | | theoretical security standpoint, it looks like yescript has similar security properties, assuming (as we typically do in the crypto protocol community) that sha256 is still reasonable. However, in terms of practical resistant to password cracking, particularly in terms of valuing space complexity as well as time complexity, yescript is superior, Closes: #978553 | ||||
* | debian/pam-configs/unix: use nullok, not nullok_secure. | Steve Langasek | 2020-08-12 | 1 | -2/+2 |
| | |||||
* | Import Debian changes 1.1.8-3.7 | Timo Aaltonen | 2019-01-08 | 1 | -0/+7 |
| | | | | | | | | | | pam (1.1.8-3.7) unstable; urgency=medium * Non-maintainer upload. * libpam-modules: Added a config for pam_mkhomedir, disabled by default. (Closes: #568577) * pam-auth-update: Add support for --enable option which is useful for enabling non-default configs without prompting the admin. (LP: #1192719) | ||||
* | debian/local/common-password, debian/pam-configs/unix: switch from "md5" | Kees Cook | 2019-01-08 | 1 | -2/+2 |
| | | | | to "sha512" as password crypt default. | ||||
* | Allow passwords to change on expired accounts, by passing new_authtok_reqd ↵ | Kees Cook | 2019-01-03 | 1 | -2/+2 |
| | | | | return codes immediately (LP: #291091). | ||||
* | drop '-Final' from all of the field names, but support these field names for | Steve Langasek | 2019-01-03 | 2 | -10/+10 |
| | | | | backwards compatibility | ||||
* | refine the password profiles: these should be in a 'primary' block after all, | Steve Langasek | 2019-01-03 | 2 | -6/+6 |
| | | | | paralleling the auth structure as much as possible. | ||||
* | remove spurious 'conflict' with a non-existent module, which was added just for | Steve Langasek | 2019-01-03 | 1 | -1/+0 |
| | | | | example | ||||
* | condense the unix config, leaving out redundant features that were just for | Steve Langasek | 2019-01-03 | 1 | -4/+0 |
| | | | | show | ||||
* | use the proper name, Account instead of Acct, in the unix config | Steve Langasek | 2019-01-03 | 1 | -3/+3 |
| | |||||
* | eliminate redundancy in the configs, which happens to also provide for better | Steve Langasek | 2019-01-03 | 2 | -12/+12 |
| | | | | | code reuse | ||||
* | tweak profile priorities to reflect my best guess at how this should play out | Steve Langasek | 2019-01-03 | 2 | -2/+2 |
| | |||||
* | initial config snippet for cracklib | Steve Langasek | 2019-01-03 | 1 | -0/+9 |
| | |||||
* | drop out the 'nullok' argument in the password phase, since this happens | Steve Langasek | 2019-01-03 | 1 | -2/+2 |
| | | | | to be meaningless | ||||
* | add in acct/session/password templates | Steve Langasek | 2019-01-03 | 1 | -0/+15 |
| | |||||
* | first sample config for the pam framework | Steve Langasek | 2019-01-03 | 1 | -0/+13 |