PAM_PWHISTORY(8) | Linux-PAM Manual | PAM_PWHISTORY(8) |
NAME
pam_pwhistory - PAM module to remember last passwords
SYNOPSIS
pam_pwhistory.so [debug] [use_authtok] [enforce_for_root] [remember=N] [retry=N] [authtok_type=STRING] [file=/path/filename] [conf=/path/to/config-file]
DESCRIPTION
This module saves the last passwords for each user in order to force password change history and keep the user from alternating between the same password too frequently.
This module does not work together with kerberos. In general, it does not make much sense to use this module in conjunction with NIS or LDAP, since the old passwords are stored on the local machine and are not available on another machine for password history checking.
OPTIONS
debug
use_authtok
enforce_for_root
remember=N
retry=N
authtok_type=STRING
file=/path/filename
conf=/path/to/config-file
The options for configuring the module behavior are described in the pwhistory.conf(5) manual page. The options specified on the module command line override the values from the configuration file.
MODULE TYPES PROVIDED
Only the password module type is provided.
RETURN VALUES
PAM_AUTHTOK_ERR
PAM_IGNORE
PAM_MAXTRIES
PAM_USER_UNKNOWN
EXAMPLES
An example password section would be:
#%PAM-1.0 password required pam_pwhistory.so password required pam_unix.so use_authtok
In combination with pam_passwdqc:
#%PAM-1.0 password required pam_passwdqc.so config=/etc/passwdqc.conf password required pam_pwhistory.so use_authtok password required pam_unix.so use_authtok
FILES
/etc/security/opasswd
/etc/security/pwhistory.conf
SEE ALSO
pwhistory.conf(5), pam.conf(5), pam.d(5), pam(8) pam_get_authtok(3)
AUTHOR
pam_pwhistory was written by Thorsten Kukuk <kukuk@thkukuk.de>
11/18/2024 | Linux-PAM |