pam_passwdqc and pam_tally2

English Applications
#1

I was wondering if anyone knew where opensuse installs pam_passwdqc. Whenever I do an install of passwdqc (zypper install passwdqc) it installs libpasswdqc0 and passwdqc. After the installation I’m trying to configure pam to use passwdqc instead of cracklib for password reinforcement but the os doesn’t recognize the pam_passwdqc module. I then find out that any installed pam modules are installed at /lib/security or /lib64/security in which, on my system they’re not there. So where is opensuse installing these modules?

Another issue I’m having is with pam_tally2. I put the appropriate line:
auth required pam_tally2.so deny=5 unlock_time=600 onerr=fail

I put the above line directly after:
auth required pam_env.so

which should be the first line of the auth section, the pam_tally2 line being the next one right after however the lockout mechanism doesn’t work. I am putting these lines in the /etc/pam.d/common-auth file. Should I be putting these lines in another file?

Any help would be greatly appreciated.

#2

Did you also install pam_passwdqc ?

#3

Hey thanks Miuku that was completely the issue. Any idea about the pam_tally2 issue?

#4

I think you need to have it in both common-auth and common-account.

I haven’t setup the tallying myself though so take that with a pinch of salt.