Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

pam config file not working on rhel/centos 8 #12

Open
anq4 opened this issue May 24, 2022 · 1 comment
Open

pam config file not working on rhel/centos 8 #12

anq4 opened this issue May 24, 2022 · 1 comment

Comments

@anq4
Copy link

anq4 commented May 24, 2022

Hello.

Your /etc/pam.d/poppassd containing:
@include common-password
doesn't correctly authenticate in red hat or centos 8.x

Following lines instead almost work but with an issue
#%PAM-1.0
auth include password-auth
account include password-auth
password include password-auth

When the new password violates some soft security criteria, like in this case containing the username, it returns fisrt a 500 error, that is catched by most webmail systems, but then goes ahead with a 200 code and changes it anyway, so password is really changed and users are at most confused.

Connected to 0.
Escape character is '^]'.
200 poppassd
user pippo
200 Your password please
pass whatever
200 Your new password please
newpass pippone
500 Server error
200 Password changed

@anq4
Copy link
Author

anq4 commented May 24, 2022

This is probably the result of this happening behind on the system, first a warning and then success:

#passwd pippo
Changing password for user pippo.
New password:
BAD PASSWORD: The password contains the user name in some form
Retype new password:
passwd: all authentication tokens updated successfully.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant