[svlug] svlug Digest, Vol 333, Issue 1

[Jim MacKelvey]

On Thu, May 1, 2008 at 12:00 PM, <svlug-request at lists.svlug.org> wrote:

> Send svlug mailing list submissions to
>        svlug at lists.svlug.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
>        http://lists.svlug.org/lists/listinfo/svlug
> or, via email, send a message with subject or body 'help' to
>        svlug-request at lists.svlug.org
>
> You can reach the person managing the list at
>        svlug-owner at lists.svlug.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of svlug digest..."
>
> Today's Topics:
>
>   1. testing a password with bash. (James Sparenberg)
>   2. Re: testing a password with bash. (Paul Reiber)
>
>
> ---------- Forwarded message ----------
> From: James Sparenberg <james at linuxrebel.org>
> To: svlug at lists.svlug.org
> Date: Thu, 1 May 2008 03:29:30 -0700
> Subject: [svlug] testing a password with bash.
> All,
>
>   Bash question for all of you.   I'm putting together a script that
> reaches
> out to all my systems based on user role, and can either add, del, or
> update
> a users name/passwd.  Now comes the question.
>
>   I want to be able to verify quality of the password.  # of characters is
> easy.  pipe it through wc -m and see if it's greater than the minimum.
>  How
> though would you recommend I go about verifying things like
>
> 1.  Not based on Dictionary word.
> 2.  Has Upper and lower case
> 3.  Contains at least 1 number or special character.
>
> Special rules of sort.  It has to work on FreeBSD, RH and Debian.  I run a
> multi-Ethnic environment ;)   here and need to be sure that ever system
> produces the same results.
>
> Suggestions? (and switching to XYZ lang isn't really an option here.)
>
> James
>
>
>
>
> ---------- Forwarded message ----------
> From: "Paul Reiber" <reiber at gmail.com>
> To: "James Sparenberg" <james at linuxrebel.org>
> Date: Thu, 1 May 2008 08:01:00 -0700
> Subject: Re: [svlug] testing a password with bash.
> use sed.
> -pbr
>
>
> On Thu, May 1, 2008 at 3:29 AM, James Sparenberg <james at linuxrebel.org>
> wrote:
> > All,
> >
> >    Bash question for all of you.   I'm putting together a script that
> reaches
> >  out to all my systems based on user role, and can either add, del, or
> update
> >  a users name/passwd.  Now comes the question.
> >
> >    I want to be able to verify quality of the password.  # of characters
> is
> >  easy.  pipe it through wc -m and see if it's greater than the minimum.
>  How
> >  though would you recommend I go about verifying things like
> >
> >  1.  Not based on Dictionary word.
> >  2.  Has Upper and lower case
> >  3.  Contains at least 1 number or special character.
> >
> >  Special rules of sort.  It has to work on FreeBSD, RH and Debian.  I
> run a
> >  multi-Ethnic environment ;)   here and need to be sure that ever system
> >  produces the same results.
> >
> >  Suggestions? (and switching to XYZ lang isn't really an option here.)
> >
> >  James
> >
> >  _______________________________________________
> >  svlug mailing list
> >  svlug at lists.svlug.org
> >  http://lists.svlug.org/lists/listinfo/svlug
> >
>
>
>
> _______________________________________________
> svlug mailing list
> svlug at lists.svlug.org
> http://lists.svlug.org/lists/listinfo/svlug
>
> James,

These links may be what you need. Bash shell scripting, by itself, is
probably less than what you want--harder to code and implement, and
considerably less robust.

http://gdub.wordpress.com/2006/08/26/using-cracklib-to-require-stronger-passwords/
along with this one...
http://pypi.python.org/pypi/python-crack/0.4

Hope this helps.

Jim MacKelvey
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.svlug.org/archives/svlug/attachments/20080501/87671414/attachment.htm