Hack The Sec-Leading Resource Of Linux Tutorial: Password

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="post-title" style="background-color: white; border: 0px; font-family: 'PT Serif', serif; font-size: 38px; font-stretch: inherit; font-weight: 400; letter-spacing: -1px; line-height: 1.3em; margin: 0px 0px 10px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
<u><i><span style="color: #990000;">Set Password Policies in SLES (SUSE Linux Enterprise Server)</span></i></u></h1>
<div>
<div style="background-color: white; border: 0px; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
<span style="font-family: Georgia, Times New Roman, serif;">Recently i got the task to implement following password policies on SLES (S<b>USE Linux Enterprise Server</b>) 11.x</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWqt3VFA4nCa4tdOsTSeYvUI0mbtkGykfNOwk5cniGt5t7N3V5FK_ZFYOUGg9hTARP3Uf5L6tFVHW6A5OpBeMPRcF5p-vZEQOHpl_sjH-tu_JyRPuh9qypfq-_f7qsJaafentMoibw6qbv/s1600/sles_11_03_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="160" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWqt3VFA4nCa4tdOsTSeYvUI0mbtkGykfNOwk5cniGt5t7N3V5FK_ZFYOUGg9hTARP3Uf5L6tFVHW6A5OpBeMPRcF5p-vZEQOHpl_sjH-tu_JyRPuh9qypfq-_f7qsJaafentMoibw6qbv/s320/sles_11_03_www.hackthesec.co.in.png" width="320" /></a></div>
<ul style="background-color: white; border: 0px; font-size: 16px; font-stretch: inherit; line-height: 22.4px; list-style: none; margin: 0px 0px 15px 30px; padding: 0px; vertical-align: baseline;">
<li style="border: 0px; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style: square; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Georgia, Times New Roman, serif;">Minimum password length should be 10 characters</span></li>
<li style="border: 0px; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style: square; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Georgia, Times New Roman, serif;">Password should have one UPPERCASE Character</span></li>
<li style="border: 0px; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style: square; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Georgia, Times New Roman, serif;">Password should have one LOWERCASE Character</span></li>
<li style="border: 0px; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style: square; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Georgia, Times New Roman, serif;">Password should have one Numeric Character</span></li>
<li style="border: 0px; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style: square; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Georgia, Times New Roman, serif;">Minimum Passwords to Remember or Password History is 4</span></li>
<li style="border: 0px; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style: square; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="font-family: Georgia, Times New Roman, serif;">Accounts should be lockout after 5 attempts.</span></li>
</ul>
<div style="background-color: white; border: 0px; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
<span style="font-family: Georgia, Times New Roman, serif;">These password policies can implemented using pam file “<span style="border: 0px; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: 600; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #660000;">/etc/pam.d/common-password</span></span>”</span></div>
<div style="background-color: white; border: 0px; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
<span style="font-family: Georgia, Times New Roman, serif;">First take the back up of common-password file .</span></div>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-family: Courier New, Courier, monospace; font-size: large;"><span style="color: white;"># cd </span><span style="color: lime;">/etc/pam.d/</span><span style="color: white;">
# cp common-password </span><span style="color: lime;">common-password.bak</span></span></pre>
<div style="background-color: white; border: 0px; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
<span style="font-family: Georgia, Times New Roman, serif;">Edit the file “/<span style="color: #990000;">etc/pam.d/common-password</span>” ,comment out the default modules and add the followings lines.</span></div>
<pre style="background: rgb(54, 54, 54); border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; line-height: 19px; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; white-space: pre-wrap;"><span style="font-family: Courier New, Courier, monospace; font-size: large;"><span style="color: white;">password   required   pam_cracklib.so dcredit=-1 ucredit=-1 lcredit=-1 minlen=10 retry=5
</span><span style="color: lime;">password   required   pam_pwhistory.so use_authtok remember=4 retry=5
</span><span style="color: white;">password   required   pam_unix2.so nullok use_authtok md5</span></span></pre>
<div style="background-color: white; border: 0px; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
<span style="font-family: Georgia, Times New Roman, serif;">Save & exit the file.</span></div>
<div style="background-color: white; border: 0px; font-size: 16px; font-stretch: inherit; line-height: 22.4px; margin-bottom: 1em; padding: 0px; vertical-align: baseline;">
<span style="font-family: Georgia, Times New Roman, serif;">Now onwards , we can’t use the simple passwords , System will accepts only those passwords which satisfy above parameters.</span></div>
</div>
<div>
<a href="http://www.hackthesec.co.in/">http://www.hackthesec.co.in</a></div>
<div>
<a href="https://www.twitter.com/hackthesecurity">https://www.twitter.com/hackthesecurity</a></div>
</div>