Enforcing password length.

I would like to enforce the users to use 15 character passwords. I have edited the /etc/default/passwd and given PASSLENGTH=15. What i noticed is that when user changes the password next time, it will enforce the a 15 character password but during the next logon, it verifies only first 8 characters.

Any thoughts ?

Any help is appreciated! Thanks.

Aren't you really trying to enforce complexity over password length. An 8 character password can be complex if it is not a dictionary word, has Upper case and lower case alpha, numbers and special characters. I think most *nix have a limit on how many characters in a password will be checked.

1 Like

The number of characters actually used in the password depend on the algorithm used. It can be set in /etc/security/policy.conf on Solaris.

1 Like

I don't see any options or parameter related to password length in the policy.conf.

Thanks.

As posted in another thread in this forum today!

Password Encryption (System Administration Guide: Security Services) - Sun Microsystems

1 Like

Indeed. I meant the algorithm can be set in the policy.conf file.

1 Like