From: Paolo Basenghi (paolo.basenghi_at_fcr.re.it)
Date: Mon Mar 21 2005 - 10:32:14 CET
Message-ID: <423E949E.5060700@fcr.re.it> Date: Mon, 21 Mar 2005 10:32:14 +0100 From: Paolo Basenghi <paolo.basenghi@fcr.re.it> Subject: Re: [suse-sles-e] Password check via shell script
Thank you for your answer, but it doesn't fit my needs.
I would like to have a tool that perform ONLINE checks, not like john;
john perform OFFLINE checks.
That is: john does not know the password, it tries to guess it and if
the password is good the cracking process can take a long time. I need a
tool that check a WELL KNOWN password ONLINE for strongness: the user
inserts her password, then the candidate password is passed to the tool
for checking.
Does someone know such a tool?
Cheers
Paolo
Didier Boiteux ha scritto:
>Paolo,
>
>It may be useful for you to have a look at the scripts of the "seccheck" package, designed to perform regular security checks like directory permissions, nfs mounts, ... and guessable passwords (in /usr/lib/secchk/security-weekly). It is actually using john.
>
>Cheers,
> Didier
>
>
>
>
>>>>Paolo Basenghi <paolo.basenghi@fcr.re.it> 03/18/05 6:03 pm >>>
>>>>
>>>>
>I would like to write a script that substitute the system passwd
>command, so I need a tool that can check password robustness based on
>some rules (n. of characters, mixed case, etc.).
>But john can crack existing password, not check the password robustness
>while users are changing their. I'm wrong?
>
>Bye
>Paolo Basenghi
>
>Paolo Negri ha scritto:
>
>
>
>>command "john" provided as rpm by suse does the job.
>>
>>Bye
>>
>>Paolo Basenghi wrote:
>>
>>
>>
>>>Hello all,
>>>Someone could tell me if in SLES9 are there any commands to check
>>>password strongness (like cracklib) that can be used from shell scripts?
>>>Sorry for my poor english and best regards.
>>>Paolo Basenghi
>>>
>>>
>>>---------------------------------------------------------------------
>>>To unsubscribe, e-mail: suse-sles-e-unsubscribe@suse.com
>>>For additional commands, e-mail: suse-sles-e-help@suse.com
>>>
>>>
>>>
>>>
>>---------------------------------------------------------------------
>>To unsubscribe, e-mail: suse-sles-e-unsubscribe@suse.com
>>For additional commands, e-mail: suse-sles-e-help@suse.com
>>
>>
>>
>>
>
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: suse-sles-e-unsubscribe@suse.com
>For additional commands, e-mail: suse-sles-e-help@suse.com
>
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: suse-sles-e-unsubscribe@suse.com
>For additional commands, e-mail: suse-sles-e-help@suse.com
>
>
>
>
This archive was generated by hypermail 2.1.7 : Mon Mar 21 2005 - 10:32:22 CET