> Nicolas Williams wrote:
> > On Wed, Jul 19, 2006 at 12:43:42AM +0100, Darren J Moffat wrote:
> >> Or put another way the indicator of strength doesn't really belong in an
> >> install/config tool but "in" the pam_chauthtok(3pam) module. This could
> >> be problematic due to the current PAM message interface but I'm willing
> >> to try giving it a go - it might work okay.
> >
> > With PAM you can't have a password strength bar that changes as you type
> > the password...
>
> I think you might be able to do that with a cunning conversation
> function and cunning use of the PAM message blocks. I need to play with
> this though.
Hummm, does the installer now use PAM here? I don't recall.
It used to use a private implementation of "unix" crypt. I
believe it now at least uses crypt(3C). In terms of password
strength, it might be nice to have the installer ask about parameters
as well as algorithm, then sites could choose and not have to
configure post CD install. For jumpstart, it probably doesn't
matter.
Gary..
