PAM Authentication

MediumLinux Security25-35 min

The brief

The password stack in /etc/pam.d/common-password currently enforces no complexity — any password is accepted. Harden it: add the pam_pwquality module to the password stack and require a minimum length so weak passwords are rejected at change time. Grading inspects /etc/pam.d/common-password for the module and a minimum-length setting.

What you'll do

Add pam_pwquality to the password stack in /etc/pam.d/common-password
Require a minimum password length (minlen)
Enforce complexity at password-change time

Hands-on lab: you work on a real Linux box in your browser, graded on the machine's actual state.