summaryrefslogtreecommitdiff
path: root/doc/man/pwquality.conf.5
diff options
context:
space:
mode:
Diffstat (limited to 'doc/man/pwquality.conf.5')
-rw-r--r--doc/man/pwquality.conf.593
1 files changed, 93 insertions, 0 deletions
diff --git a/doc/man/pwquality.conf.5 b/doc/man/pwquality.conf.5
new file mode 100644
index 0000000..0418ff3
--- /dev/null
+++ b/doc/man/pwquality.conf.5
@@ -0,0 +1,93 @@
+.de FN
+\fI\|\\$1\|\fP
+..
+.TH PWQUALITY.CONF 5 "10 Nov 2011" "Red Hat, Inc."
+.SH NAME
+pwquality.conf \- configuration for the libpwquality library
+.SH SYNOPSIS
+\fB/etc/security/pwquality.conf\fR
+.SH DESCRIPTION
+\fBpwquality.conf\fR provides a way to configure the default password
+quality requirements for the system passwords. This file is read by the
+libpwquality library and utilities that use this library for checking
+and generating passwords.
+
+The file has a very simple \fIname = value\fR format with possible comments
+starting with \fB#\fR character.
+
+.PD
+.SH OPTIONS
+The possible options in the file are:
+.RS 4
+.PP
+\fBdifok\fR
+.RS 4
+Number of characters in the new password that must not be present in the
+old password. (default 5)
+.RE
+.PP
+\fBdifignore\fR
+.RS 4
+How many characters should the password have before difok will be
+ignored. (default 23)
+.RE
+.PP
+\fBminlen\fR
+.RS 4
+Minimum acceptable size for the new password (plus one if credits are not
+disabled which is the default). (See \fIpam_pwquality(8)\fR.)
+Cannot be set to lower value than 6. (default 9)
+.RE
+.PP
+\fBdcredit\fR
+.RS 4
+The maximum credit for having digits in the new password. If less than 0
+it is the minimum number of digits in the new password. (default 1)
+.RE
+.PP
+\fBucredit\fR
+.RS 4
+The maximum credit for having uppercase characters in the new password.
+If less than 0 it is the minimum number of uppercase characters in the new
+password. (default 1)
+.RE
+.PP
+\fBlcredit\fR
+.RS 4
+The maximum credit for having lowercase characters in the new password.
+If less than 0 it is the minimum number of lowercase characters in the new
+password. (default 1)
+.RE
+.PP
+\fBocredit\fR
+.RS 4
+The maximum credit for having other characters in the new password.
+If less than 0 it is the minimum number of other characters in the new
+password. (default 1)
+.RE
+.PP
+\fBminclass\fR
+.RS 4
+The minimum number of required classes of characters for the new
+password (digits, uppercase, lowercase, others). (default 0)
+.RE
+.PP
+\fBmaxrepeat\fR
+.RS 4
+The maximum number of allowed same consecutive characters in the new password.
+The check is disabled if the value is 0. (default 0)
+.RE
+.PP
+\fBdictpath\fR
+.RS 4
+Path to the cracklib dictionaries. Default is to use the cracklib default.
+.RE
+
+.PD
+.SH "SEE ALSO"
+pwscore(1), pwmake(1), pam_pwquality(8)
+
+.SH AUTHORS
+.nf
+Tomas Mraz <tmraz@redhat.com>
+.fi