Cracklib and PAM

Jürg Billeter j at bitron.ch
Thu Mar 23 11:59:10 PST 2006


On Don, 2006-03-23 at 10:33 -0800, Dan Nicholson wrote:
> On 3/23/06, Bruce Dubbs <bdubbs at swbell.net> wrote:
> >
> > Dan,
> >   I agree with Randy about the philosophy of installing Cracklib. I'm
> > curious why you would want PAM and not use it.
> 
> Seems I'm alone here, but I don't see them as the same issue.  They
> both provide security, but completely different aspects.  PAM provides
> control over authenticating users for programs.  Cracklib enforces
> password strength.  I use PAM.  It doesn't need Cracklib to work.  If
> I was running a system with lots of users who I didn't know, I'd
> probably install Cracklib.

Just a "me too" not to let you feel alone here ;)
I fully agree. PAM and Cracklib are both useful libraries but their
goals are completely orthogonal.

Jürg




More information about the blfs-book mailing list