Setting password complexity

Linux and Unix-Like SuSE
1

Hi,
I am setting password complexity in SLES 11. I am able to do most of things

pam-config -d --pwcheck
pam-config -a --cracklib
pam-config -a --cracklib-minlen=8
pam-config -a --cracklib-dcredit=-1
pam-config -a --cracklib-ocredit=-1
pam-config -a --pwhistory
pam-config -a --pwhistory-remember=5

But need help in setting up two parameters except two

  • I need to make 1 alpha as compulsury while setting password.
  • I need to set account lock out setting to 4.

Please suggest.

2

I am only a Googling expert, but: PAM, pam_tally, and locking out users after 3 failed login attempts in RHEL5

And Linux Password Security with pam_cracklib

And even stronger: Linux password strength, pam_cracklib, and Nessus compliance

That leads to: passwdqc - password/passphrase strength checking and policy enforcement toolset for your servers and software

I like 8 byte min with 1 each of lc, uc, num, special (need to prevent any? :? "? '?).