From f49166c7d8f3ae2c9d337154f7e5dc50d41ab6bf Mon Sep 17 00:00:00 2001 From: "Dmitry V. Levin" Date: Wed, 13 May 2020 08:00:00 +0000 Subject: Deprecate pam_cracklib, pam_tally, and pam_tally2 Deprecate pam_cracklib, there are two better alternatives to this obsolete module: pam_passwdqc from passwdqc project and pam_pwquality from libpwquality project. Deprecate pam_tally and pam_tally2 in favour of pam_faillock. * configure.ac: Implement --enable-cracklib=check that enables build of pam_cracklib when libcrack is available. Disable build of pam_cracklib, pam_tally, and pam_tally2 by default. * NEWS: Mention this change. * ci/run-build-and-tests.sh (DISTCHECK_CONFIGURE_FLAGS): Add --enable-tally, --enable-tally2, and --enable-cracklib=check to check build of these deprecated modules. --- NEWS | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'NEWS') diff --git a/NEWS b/NEWS index eb31f960..e8c0de87 100644 --- a/NEWS +++ b/NEWS @@ -44,6 +44,11 @@ Release 1.4.0 * Added new API call pam_start_confdir() for special applications that cannot use the system-default PAM configuration paths and need to explicitly specify another path +* Deprecated pam_cracklib: this module is no longer built by default and will + be removed in the next release, use pam_passwdqc (from passwdqc project) + or pam_pwquality (from libpwquality project) instead +* Deprecated pam_tally and pam_tally2: these modules are no longer built + by default and will be removed in the next release, use pam_faillock instead Release 1.3.1 * pam_motd: add support for a motd.d directory -- cgit v1.2.3