Disable passwd history feature with remember=0

Posted by user1915177 on Super User See other posts from Super User or by user1915177
Published on 2012-12-19T08:55:29Z Indexed on 2012/12/19 11:05 UTC
Read the original article Hit count: 193

Filed under:
|
|
|

PAM version - pam-0.79 Is setting 0 allowed on "remember" option in /etc/pam.d/common-passwd file of pam.d module to disable passwd history feature?

With "remember=0" in /etc/pam.d/common-passwd file, I am observing a memfault when running the passwd command as a USER.

When browsed the source, the function in _set_ctrl in support.c file of pam_unix module handles wrong values of remember, but currently its not robust enough to handle 0, which is a wrong value.

So the valid and only option to disable history feature, is to not include the "remember" option in /etc/pam.d/common-passwd file and not to set-up /etc/security/opasswd file?

Could see in the following link mention of setting "remember" to 0 has no effect to remember value in "/etc/security/opasswd" file. =>https://lists.fedorahosted.org/pipermail/linux-pam-commits/2011-June/000060.html

© Super User or respective owner

Related posts about linux

Related posts about security