diff options
| author | Tomas Mraz <tmraz@redhat.com> | 2016-11-01 15:16:54 +0100 |
|---|---|---|
| committer | Tomas Mraz <tmraz@redhat.com> | 2016-11-01 15:16:54 +0100 |
| commit | 812cd64cf8dcd656f1c7ab00c246b53e9ab7bd3c (patch) | |
| tree | e15fa21849adaeae6aeafe884d084c24290215f6 /doc | |
| parent | df472befdc08b076bf1f2a863cb73801727ded80 (diff) | |
| download | libpwquality-812cd64cf8dcd656f1c7ab00c246b53e9ab7bd3c.tar.gz | |
Add an 'enforcing' setting to make the checks to be warning-only in PAM.
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/man/pam_pwquality.8.pod | 6 | ||||
| -rw-r--r-- | doc/man/pwquality.conf.5.pod | 7 |
2 files changed, 13 insertions, 0 deletions
diff --git a/doc/man/pam_pwquality.8.pod b/doc/man/pam_pwquality.8.pod index 6b115f8..307daef 100644 --- a/doc/man/pam_pwquality.8.pod +++ b/doc/man/pam_pwquality.8.pod @@ -202,6 +202,12 @@ contains the user name in some form. The default is 1 which means that this check is enabled. It is not performed for user names shorter than 3 characters. +=item B<enforcing=>I<N> + +If nonzero, reject the password if it fails the checks, otherwise +only print the warning. The default is 1 which means that the weak password +is rejected (for non-root users). + =item B<badwords=>I<< <list of words> >> The words more than 3 characters long from this space separated list are diff --git a/doc/man/pwquality.conf.5.pod b/doc/man/pwquality.conf.5.pod index ad558f6..6519ec6 100644 --- a/doc/man/pwquality.conf.5.pod +++ b/doc/man/pwquality.conf.5.pod @@ -107,6 +107,13 @@ If nonzero, check whether the password (with possible modifications) contains the user name in some form. It is not performed for user names shorter than 3 characters. (default 1) +=item B<enforcing=>I<N> + +If nonzero, reject the password if it fails the checks, otherwise +only print the warning. This setting applies only to the pam_pwquality module +and possibly other applications that explicitly change their behavior +based on it. It does not affect L<pwmake(1)> and L<pwscore(1)>. (default 1) + =item B<badwords> Space separated list of words that must not be contained in the password. These |