Pathetic password policy continued.

Continuing my frustration with changing my password on this one Linux system, I tried to be clever.  So I logged in as root, then used:

passwd accountname

to force set the password. So much to my surprise, when I tried that, and I saw this response:

A valid password should be a mix of upper and lower case letters,

digits, and other characters.  You can use an 8 character long

password with characters from at least 3 of these 4 classes, or

a 5 character long password containing characters from all the

classes.  An upper case letter that begins the password and a

digit that ends it do not count towards the number of character

classes used.

 

Alternatively, if noone else can see your terminal now, you can

pick this as your password: "suck&Saudi&war".

 

Enter new password: 

Weak password: based on a dictionary word and not a passphrase.

Try again.

 

Firstly, suggesting a password such as "suck&Saudi&war" is downright hilarious, and secondly, my password that it considered weak and based on a dictionary word was similar to:  Dhw$H32donw

 

Have no idea why that is based on a dictionary word... It complies with all the rules above.... %#$%#$%

Blog Categories:

Add new comment

Back to top