• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

esxi 4.1 password complexity... issue with vpxuser

D

defuseme2k

[H]ard|Gawd
Joined
Oct 7, 2004
Messages
1,074
Since I work for the DoD we have to meet the a lot of crazy requirements for security.

In ESXi they use pam_passwdqc.so to manage password complexity, by default it is:

retry=3 min=8,8,8,7,6

I need it to be: retry=3 similar=deny max=26 min=disabled,disabled,disabled,disabled,14

The problem is that vpxuser apparently can't meet the requirements when joining a host to vCenter heh... so I'm curious. I need to know what complexity is used by vpxuser when it is generated. My google-fu is failing me, I can find no documentation :\.
 
ERROR: fixed this myself. I was rereading the security hardening changes in 4.1, and it appears the max setting has to be 32 now... lol. 26 wasn't big enough!

I knew I'd figure it out after I posted this... dang it.
 
You must log in or register to reply here.
Back
Top