SUMMARY: password check/aging

From: Max Lanfranconi - R and D (bogart@bpb.it)
Date: Fri Sep 04 1992 - 11:31:52 CDT


The original question...

>
> Apologies if this is not the correct list I don't know any other list.
>Does anybody know where may I find a program that makes passwd checks,
>i.e. reject idiot passwords, notifies password aging etc.?
>

Thank you to all who responded:
        adam%bwnmr4@harvard.harvard.edu (Adam Shostack)
        dauns@susan.cs.andrews.edu (Frank Dauns)
        craig@cwh.cam.nist.gov (Craig Hunt)
        era@niwot.scd.ucar.EDU (Ed Arnold)
        rel@mtu.edu (Robert E. Landsparger)
        Chris Keane <chris@rufus.state.COM.AU>
        blymn@baobab.awadi.com.AU (Brett Lymn)
        kevins@kuma3.Japan.Sun.COM (Kevin Sheehan {Consulting Poster Child})
        ohnielse@ltf.dth.dk (Ole Holm Nielsen)
        rich_b@oldham.gpsemi.com (Richard Bogusz)
        hansen@SCR.SLB.COM (Ove Hansen)
        gareth@nmr.ion.bpmf.ac.uk (Dr Gareth Barker)
        Pete Phillips <uunet!egh-qc!pete>

and to all the people that will answer after this posting; This list is really
powerful!

     Eight answers suggested npasswd. One even sent over the complete archie
search result!
     Two suggested passwd+; Two suggested crack; one suggested cops package.
     One suggestion to cross-post to alt.security, comp.security.misc and
misc.security, which I didn't as I'm still not connected to News ;-(

One posting suggested a modified /bin/passwd file and a pacth (10021-04).

Former programs all available form anonymous ftp:

npasswd from ftp.cc.utexas.edu in pub/npasswd/npasswd.tar.Z
passwd+ from dartmouth.edu in pub/security/passwd+.tar.Z
crack from cert.org in pub/tools/crack/crack_4.1.tar.Z
cops from cert.org in pub/tools/cops/1.04/cops_104.tar.Z

Other products mentioned:

Sunshield a.k.a ARM;
The Obvious Password Detector (OPD), from comp.sources.unix, nov 88.
The OPUS Project passwd program, discussed in proceedings of the 14th
Natl Computer Security Conference (Oct 91).

Up to now I tried crack and npasswd, I already knew about cops. I found them
an unbeatable team!

I'm still waiting for passwd+ as my Internet link was down for a while.

Please send me an e-mail msg (bogart@bpb.it) if you would like a digest of all
responses.

Thanks again for the very QUICK and USEFUL answers.

Regards,

--Max

*******************************************************************************
* Massimo Lanfranconi Internet: bogart@bpb.it *
* Organizzazione e S.I. R & D UUnet: ...!uunet!bpb!bogart *
* Banca Popolare di Bergamo-C.V. Telephone: +39 35 392 528 *
* Piazza V. Veneto 8 Fax: +39 35 392 133 *
* I-24122 Bergamo ITALY Telex: 300410 BPBDIR *
* *
* I wish I were what I was when I wished I were what I am. *
* Anonymous *
*******************************************************************************



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:06:49 CDT