*BSD News Article 81377


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!munnari.OZ.AU!news.ecn.uoknor.edu!feed1.news.erols.com!netaxs.com!socko.cdnow.com!heller
From: heller@socko.cdnow.com (A. Karl Heller)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: Looking for better passwd program
Date: 22 Oct 1996 22:29:21 GMT
Organization: CDnow - The World's Largest Online Music Store http://cdnow.com
Lines: 35
Message-ID: <54jhs1$h9a@netaxs.com>
References: <3263F096.41C67EA6@jnet.vi> <5496cg$c8@uriah.heep.sax.de> <326CB9D8.41C67EA6@jnet.vi>
Reply-To: heller@cdnow.com
NNTP-Posting-Host: socko.cdnow.com
X-Newsreader: TIN [version 1.2 PL2]

John Lucas (jlucas@jnet.vi) wrote:
: J Wunsch wrote:
: > 
: > John Lucas <jlucas@jnet.vi> wrote:
: > 
: > > Has anyone run across a port of any of the better "passwd" replacements
: > > such as "npasswd" for FreeBSD 2.x? If so please point me to it.
: > 
: > What exactly do you expect from them?  (Sorry for my ignorance, i
: > simply don't know npasswd.)
: > 
: > --
: > cheers, J"org
: > 
: > joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE
: > Never trust an operating system you don't have sources for. ;-)

: The "npasswd" program did two things:

: 	1. allows the setting of password policies (length etc).
: 	2. disallowed "dumb" passwords

: The second part used the same algorithms as the 1988 Internet WORM program
: (checks against user data, dictionaries etc) to prevent this sort of attack from
: succeeding (because no one is allowed a password that would be broken in this
: manner).

: There are other "smart" password programs, but the only one I ever used was
: "npasswd" on SunOS.

: One other thing I would like to see that the FreeBSD passwd program doesn't seem
: to do is authentication logging (I would like to see who has or has not changed
: their password).

  Um... doesn't root get a list of password changes daily?