I have the following settings in file /etc/pam.d/common-password.
password requisite pam_cracklib.so retry=3 lcredit=-1 ucredit=-1 dcredit=-1 password [success=1 default=ignore] pam_unix.so obscure use_authtok try_first_pass sha512 password requisite pam_deny.so password required pam_permit.so password optional pam_ecryptfs.so
Why can root set a weak password for another user?
root@kali:~# LANG=C passwd kali New password: BAD PASSWORD: it is WAY too short BAD PASSWORD: is a palindrome Retype new password: passwd: password updated successfully
I don't see any pam rule that is allowing it. Am I missing something?