PAM_PASSWDQC(8)

💖 PAM_PASSWDQC 💖

okay bestie, welcome to the <pink>pam_passwdqc</pink> page — it lives in the System Manager's Manual, and it's literally the password bouncer of the PAM world 🫶

✨ NAME ✨

pam_passwdqc — Password quality-control PAM module 👑

🌸 SYNOPSIS 🌸

[service-name] module-type control-flag pam_passwdqc [options]

🦋 DESCRIPTION 🦋

so the <purple>pam_passwdqc</purple> module is a simple password strength checking module for PAM. that's the whole vibe. no cap. 💅

but like — not just regular passwords. it also offers support for passphrases, and it can provide randomly generated ones too. versatile queen behavior honestly 🌈

here's the important structural tea though: the <purple>pam_passwdqc</purple> module provides functionality for only one PAM management group: password changing. in terms of the module-type parameter, this is the <cyan>"password"</cyan> feature. one job, doing it well, main character energy 😌

the <yellow>pam_chauthtok()</yellow> service function may ask the user for a new password, and verify that it meets certain minimum standards. if the chosen password is unsatisfactory, the service function returns PAM_AUTHTOK_ERR. (rejected. blocked. not today. 💀)

now, the set of options that may be passed to the module is exactly the same as the set of options that may be specified in the configuration file — suggested location <cyan>/etc/passwdqc.conf</cyan>, to be specified in the <cyan>config=/etc/passwdqc.conf</cyan> option. those options are described in <purple>passwdqc.conf(5)</purple>. so go read that one, bestie, that's where the option lore lives 📖✨

👀 SEE ALSO 👀

• <purple>pam.conf(5)</purple>
• <purple>passwdqc.conf(5)</purple>
• <purple>pam(8)</purple>

https://www.openwall.com/passwdqc/

💜 AUTHORS 💜

the <purple>pam_passwdqc</purple> module was written for Openwall GNU/*/Linux by Solar Designer <solar at openwall.com>. 🎀

this manual page was written for the FreeBSD Project by ThinkSec AS and NAI Labs, the Security Research Division of Network Associates, Inc. under DARPA/SPAWAR contract <cyan>N66001-01-C-8035</cyan> ("CBOSS"), as part of the DARPA CHATS research program. iconic résumé, fr fr ✨

it has since been revised — most importantly to refer to <purple>passwdqc.conf(5)</purple> instead of describing the options right on this page. glow-up complete 💅

and that's the whole page, bestie!! brought to you by the Openwall Project, dated December 9, 2019 — stay safe out there and pick a password that isn't your cat's name, mwah 💖🦋🌸