0

I'm installing SuSE 13.2 and when typing the initial password, it tells me it is too simple and based on a dictionary word. Where can I check this dictionary on my Linux system?

  • Can you provide the exact notification message? – Ramhound Feb 23 '15 at 14:13
  • Not the exact wording (I proceeded though the warning), but it was something along "Your password is too simple. It is based on a dictionary word". – Thomas S. Feb 23 '15 at 14:18
  • It would be extremely helpful to know what the exact wording of the notification message was. Should be easy enough to replicate the problem in order to provide this very helpful information. – Ramhound Feb 23 '15 at 14:26
  • This seems to indicate you enabled the pam_pwcheck module enabled. It seems the configuration is located at /etc/security/pam_pwcheck – Ramhound Feb 23 '15 at 14:31
  • Is there a way to make the dictionary human readable, so I can verify whether my password is already part of such a dictionary? – Thomas S. Feb 23 '15 at 14:33
1
cracklib-unpacker /usr/share/cracklib/pw_dict >full-list.txt

gives you the full list. After modifying the text file, for example

grep -v thomas full-list.txt >modified-list.txt

you can create a new dictionary with

create-cracklib-dict modified-list.txt

Now you can use your name 'thomas' as part of your password.

(Strangely, on OpenSUSE Leap 42.1, verifying the changes running the unpacker again shoes that words with 30 characters are also removed.)

| improve this answer | |
0

The dictionary is compiled in, most likely not available in a human readable format.

The following should tell you how to add to the existing dictionary if available to your system.

man create-cracklib-dict

You can manually check a list of words against the dictionary using cracklib. The following should tell you how:

man cracklib-check
| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.