5

Is there a way to change password to value same as the previous password? I know this is a security flaw, but would like to know however.

when I try this:

[mrbean@wwwserver ~]$ passwd
Changing password for user mrbean.
Changing password for mrbean
(current) UNIX password: 
New UNIX password: -- here i typed same password
BAD PASSWORD: is too similar to the old one.
5

Either enter the password as root, or modify the PAM configuration to relax the password requirements. Either way, this is something that only root can do.

| improve this answer | |
  • This is the technical answer. The security aware answer is, "Don't do it outside a sandbox." I know he says he realizes it's a security flaw. I don't think he realizes the seriousness of the vulnerability. – Xalorous Sep 15 '16 at 22:02
2

or change it to something else, then change it back to same one...

| improve this answer | |
  • Unless something like pam_pwhistory is in use. – Paused until further notice. Apr 14 '10 at 21:33
  • If an organization is using a requirement to make the password different, it's probably implementing history too, to avoid this. And possibly a min password age to make this harder to do. – Xalorous Sep 15 '16 at 22:02

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.