esxi 4.1 password complexity... issue with vpxuser

[defuseme2k]

Since I work for the DoD we have to meet the a lot of crazy requirements for security.

In ESXi they use pam_passwdqc.so to manage password complexity, by default it is:

retry=3 min=8,8,8,7,6

I need it to be: retry=3 similar=deny max=26 min=disabled,disabled,disabled,disabled,14

The problem is that vpxuser apparently can't meet the requirements when joining a host to vCenter heh... so I'm curious. I need to know what complexity is used by vpxuser when it is generated. My google-fu is failing me, I can find no documentation :\.

 

[defuseme2k]

ERROR: fixed this myself. I was rereading the security hardening changes in 4.1, and it appears the max setting has to be 32 now... lol. 26 wasn't big enough!

I knew I'd figure it out after I posted this... dang it.

 

[aggiec05]

file this away as a good future note