Page 1 of 1

BAD PASSWORD: This password has a strength of 45.

Posted: 2018/06/15 01:17:18
by malvinho
Hi guys,

Im looking where to change this passwd requirement in 7.5.

Do you know where I can disable it?

Regards,

Alvaro M.

Re: BAD PASSWORD: This password has a strength of 45.

Posted: 2018/06/15 22:30:03
by malvinho
Anyone please? Already read the documentation in 7.5 and no advise in how to disable this password control.

Tks

Re: BAD PASSWORD: This password has a strength of 45.

Posted: 2018/06/16 11:31:23
by TrevorH
Where are you even seeing this message? It's not something that I've ever seen before...

Re: BAD PASSWORD: This password has a strength of 45.

Posted: 2018/06/21 12:34:16
by malvinho
Here:

[root@vmi188197 ~]# passwd alvaro
Changing password for the user “alvaro” …
Changing password for “alvaro”.
New UNIX password:
BAD PASSWORD: This password has a strength of 20. A strength of 65 or higher is required.
New UNIX password:
BAD PASSWORD: This password has a strength of 18. A strength of 65 or higher is required.
New UNIX password:


Im using centos 7.5 its a webserver with whm.

Re: BAD PASSWORD: This password has a strength of 45.

Posted: 2018/06/21 12:35:09
by malvinho
Also,

When I want to choose mysql users password, I get the same message, that I have to use a strong password.
I need to use some personalized passwords in this system.

Re: BAD PASSWORD: This password has a strength of 45.

Posted: 2018/06/21 12:51:20
by stevemowbray
Sounds like the requirement is coming from your whm panel. Since that is not part of CentOS we can't advise.

Re: BAD PASSWORD: This password has a strength of 45.

Posted: 2018/06/21 12:56:43
by TrevorH
I do not believe that CentOS produces these messages. Everything I see via google about it says that this is cpanel specific so you need to ask them about it.

Re: BAD PASSWORD: This password has a strength of 45.

Posted: 2018/06/28 09:48:12
by sferreira
I've never seen this message before neither, what confs/rules do you have on pam?
Also do you have something set on /etc/security/pwquality.conf ?

On MySQL you can bypass this message/situation by logging in mysql (with a user that has high privileges) and write:

Code: Select all

SET GLOBAL validate_password_policy=LOW;
After that you can create a user and set a password for a MySQL user that you want, this tough is temporary, if a restart occurs and you want to create another user with a "weak-normal" password you will have to make this command again.