Debian Bug report logs - #593513
Allow user to set preferred password

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: MichealH <michealh@michealh.co.cc>

To: submit@bugs.debian.org

Subject: Allow user to set preferred password

Date: Wed, 18 Aug 2010 21:58:01 +0100

[Message part 1 (text/plain, inline)]

Package: adduser

When installing ubuntu, I could, if I choose, to use a password that is
considered insecure, e.g., 123456, though I am warned, I am allowed. After
installing, if I try to change my password to something like 123456 I am
told the password is too simple, and I can't change it. It needs to be one
or the other, personally I don't think I should be told I can't change my
password to 123456, that isn't very free. Tell me I am an idiot, but don't
tell me I can't.

I am using Ubuntu with the latest Kernel.

Thanks.

[Message part 2 (text/html, inline)]

Message #10 received at 593513@bugs.debian.org (full text, mbox, reply):

From: MichealH <michealh@michealh.co.cc>

To: 593513@bugs.debian.org

Subject: Wrong Package

Date: Wed, 18 Aug 2010 22:13:50 +0100

[Message part 1 (text/plain, inline)]

Sorry but the package actually affects pam

[Message part 2 (text/html, inline)]

Message #17 received at 593513-done@bugs.debian.org (full text, mbox, reply):

From: Steve Langasek <vorlon@debian.org>

To: 593513-done@bugs.debian.org

Subject: Re: Allow user to set preferred password

Date: Wed, 18 Aug 2010 14:42:33 -0700

[Message part 1 (text/plain, inline)]

If you set your password as root, as is done at install time, you can set as
weak of a password as you want.  If you set it as a normal user, you are
constrained by the password strength checking requirements that are in
place.  This is not a bug, this is the intended behavior.

You can disable these strength checks by removing the 'obscure' option to
pam_unix in /etc/pam.d/common-password.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek@ubuntu.com                                     vorlon@debian.org

[signature.asc (application/pgp-signature, inline)]

Message #18 received at 593513-done@bugs.debian.org (full text, mbox, reply):

From: Stephen Gran <sgran@debian.org>

To: MichealH <michealh@michealh.co.cc>, 593513-done@bugs.debian.org

Subject: Re: [Adduser-devel] Bug#593513: Allow user to set preferred password

Date: Wed, 18 Aug 2010 23:03:18 +0100

[Message part 1 (text/plain, inline)]

This one time, at band camp, MichealH said:
> Package: adduser
> 
> When installing ubuntu, I could, if I choose, to use a password that is
> considered insecure, e.g., 123456, though I am warned, I am allowed. After
> installing, if I try to change my password to something like 123456 I am
> told the password is too simple, and I can't change it. It needs to be one
> or the other, personally I don't think I should be told I can't change my
> password to 123456, that isn't very free. Tell me I am an idiot, but don't
> tell me I can't.
> 
> I am using Ubuntu with the latest Kernel.

While your problem sounds very much like a pam problem and not an adduser
one, I can't reassign a bug from the debian bug tracking system to the
Ubuntu one.  I am closing this one, please open a new report in Ubuntu's
bug tracker against pam.

Cheers,
-- 
 -----------------------------------------------------------------
|   ,''`.                                            Stephen Gran |
|  : :' :                                        sgran@debian.org |
|  `. `'                        Debian user, admin, and developer |
|    `-                                     http://www.debian.org |
 -----------------------------------------------------------------

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.