pwquality crossplatformed
This is the pwquality crossplatformed role written by CxS. It defines the system defaults for password generation of local users. The defaults of the role apply the ETH password policy as close as posible.
Requirements
None.
Role Variables
Name | Type | Default value | Purpose | Comment | Role |
---|---|---|---|---|---|
pwquality_conf | Boolean | false | true/false switch to en/disable role | ||
pwquality_minclass | Integer | 3 | require 3 out of 4 character categories in passwords | ||
pwquality_minlen | Integer | 12 | require minimum 12 characters in passwords | ||
pwquality_gecoscheck | Integer | 1 | deny strings in password to match gecos fields in passwd |
Dependencies
None.
Example Playbook
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
- hosts: all
roles:
- { role: pwquality, tags: ["crossplatformed", "security", "sec", "pwquality"] }
License
BSD
Author Information
Maintainer: Raffael Nussbaumer
Support-Contact: servicedesk-linux@id.ethz.ch