v6.5:修改預設的密碼規則

內容表格

1. 修改密碼規則
2. 參數說明

ESXi 6.5 預設的密碼規則非常複雜，一旦要新增其他管理帳號，密碼的設定必須符合以下規則，否則系統不會放行。

Passwords must contain characters from at least three character classes.
Passwords containing characters from three character classes must be at least seven characters long.
Passwords containing characters from all four character classes must be at least seven characters long.
An uppercase character that begins a password does not count toward the number of character classes used.
A number that ends a password does not count toward the number of character classes used.
The password cannot contain a dictionary word or part of a dictionary word.

修改密碼規則

Host 開啟 SSH 服務
登入 SSH 修改 /etc/pam.d/passwd

password   requisite    /lib/security/$ISA/pam_passwdqc.so retry=3 min=disabled,disabled,disabled,7,7
password   sufficient   /lib/security/$ISA/pam_unix.so use_authtok nullok shadow sha512
password   required     /lib/security/$ISA/pam_deny.so

將一行改成

password   requisite    /lib/security/$ISA/pam_passwdqc.so retry=3 min=disabled,8,8,7,7

存檔後立即生效。

參數說明

password requisite /lib/security/$ISA/pam_passwdqc.so retry=N min=N0,N1,N2,N3,N4

retry=3: A user is allowed 3 attempts to enter a sufficient password
N0=8: Passwords containing characters from one character class must be at least 8 characters long.
N1=8: Passwords containing characters from two character classes must be at least 8 characters long.
N2=8: Passphrases must contain words that are each at least 8 characters long.
N3=7: Passwords containing characters from three character classes must be at least 7 characters long.
N4=6: Passwords containing characters from all four character classes must be at least 6 characters long.

Was this page helpful?

Yes No

標籤 (Edit tags)

No tags

什麼連接到這裡

文件 0

附加檔案或者圖像

Images 0
No images to display in the gallery.

您必須登入才能發佈評論。