If we have a file on a server (Linux, AIX, etc) that contains the common passwords, how can we filter passwords based on this?

  • 1
  • The module quoted by @roaima will add some security layers to your passwords, preventing the most common mistakes made by users on password creation, but as far as i know, there isn't a PAM module to index passwords in plaintext(or password hashes) and block them. – user34720 Mar 12 '15 at 14:53
  • Well, improving my last comment, on Ubuntu for example you have a file called /usr/share/dict/cracklib-small. Maybe is just add a bunch of words you think may create a vector of attack... – user34720 Mar 12 '15 at 16:50
  • Cracklib provides for a reference to a cracklib dictionary. But as I haven't used that particular functionality I don't think my suggestion is worth being an Answer. – roaima Mar 12 '15 at 17:31

pam_cracklib provides the option 'dictpath'. pam_cracklib comes with a basic word list located at /usr/share/dict/cracklib-small. You can also use other, larger word list instead of the one provided.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.