Advanced

Linux check passwords against a dictionary attack

Posted by nixcraft on · 1 comment
nixCraft
Mail this story
Print this story

A dictionary attack is a technique for defeating a cipher or authentication mechanism by trying to determine its decryption key or passphrase by searching a large number of possibilities. You can be configured to verify that passwords cannot be guessed easily using Linux PAM module called pam_cracklib.so. This article describes this configuration.

Full Story

  Nav
» Read more about: Story Type: Tutorial; Groups: GNU, Linux, Red Hat, Ubuntu

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (1)

apt-get install john in Debian will set up John the Ripper, a popular password cracking tool, to run for a while each night trying to crack the passwords on the system. This allows for a more in-depth brutalization of passwords used on the system at the expense of CPU time if it's important enough.

Note that it's likely it won't come with Etch due to the maintainer having been asleep on the job, but you can pull it from Sid.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post