1

How can I stop users form changing their passwords with PAM? Is this possible? PAM can enforce password strength and the like, but it can reject all changes?

2
  • This is not via pam.d but I'm not sure it's even possible: superuser.com/a/547163 Oct 28, 2020 at 19:36
  • Why would you stop users from changing their passwords? That makes absolutely no sense. Do you also prevent them from logging in with private keys? You can of course remove the setuid bit of passwd, but it's stupid.
    – user313992
    Oct 28, 2020 at 21:19

1 Answer 1

2

Yes. I was able to stop it, by putting

password   required pam_deny.so

In the /etc/pam.d/passwd.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .