.-.-.-.-.-

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>cracklib utilities</title><meta name="generator" content="DocBook XSL Stylesheets V1.75.2" /><meta name="description" content="cracklib2 is a library containing a C function which may be used in a passwd (1) like program. The idea is simple: try to prevent users from choosing passwords that could be guessed by crack by filtering them out, at source. cracklib2 is not a replacement passwd (1) program. cracklib2 is a library. cracklib-runtime contains run-time support programs which use the shared library in libcrack2 including programs to build the password dictionary databases used by the functions in the shared library." /></head><body><div class="article" title="cracklib utilities"><div class="titlepage"><div><div><h2 class="title"><a id="id340473"></a>cracklib utilities</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jean Pierre</span> <span class="surname">LeJacq</span></h3><span class="contrib">Original Debian packaging</span> <code class="email">&lt;<a class="email" href="mailto:jplejacq@quoininc.com">jplejacq@quoininc.com</a>&gt;</code></div></div><div><div class="author"><h3 class="author"><span class="firstname">Martin</span> <span class="surname">Pitt</span></h3><span class="contrib">Debian package maintainer before version 2.8.</span> <code class="email">&lt;<a class="email" href="mailto:mpitt@debian.org">mpitt@debian.org</a>&gt;</code></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jan</span> <span class="surname">Dittberner</span></h3><span class="contrib">Reformulation to DocBook XML, updated to reflect new
      packaging and upstream version. Current Debian package
      maintainer.</span> <code class="email">&lt;<a class="email" href="mailto:jandd@debian.org">jandd@debian.org</a>&gt;</code></div></div><div><p class="copyright">Copyright © 1998, 1999 Jean Pierre LeJacq</p></div><div><p class="copyright">Copyright © 2003 Martin Pitt</p></div><div><p class="copyright">Copyright © 2008 Jan Dittberner</p></div><div><div class="legalnotice" title="Legal Notice"><a id="id340393"></a><p>This package and this document is free software; you may
      redistribute it and/or modify it under the terms of the GNU
      General Public License version 2 as published by the Free
      Software Foundation.</p><p>A copy of the GNU General Public License version 2 is
      available as /usr/share/common-licenses/GPL-2 in the Debian
      GNU/Linux distribution or on the World Wide Web at <a class="ulink" href="http://www.gnu.org/copyleft/gpl.html" target="_top">http://www.gnu.org/copyleft/gpl.html</a>. You
      can also obtain it by writing to the Free Software Foundation,
      Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301,
      USA.</p></div></div><div><p class="pubdate">$Date: 2008-06-26 21:38:06 +0200 (Do, 26 Jun 2008) $</p></div><div><div class="abstract" title="Abstract"><p class="title"><b>Abstract</b></p><p><span class="application">cracklib2</span> is a library
      containing a C function which may be used in a <a class="ulink" href="/cgi-bin/man/man2html/passwd+1" target="_top">passwd
      (1)</a> like program. The idea is simple: try to prevent
      users from choosing passwords that could be guessed by <a class="ulink" href="http://www.crypticide.com/alecm/security/c50-faq.html" target="_top"><span class="application"><code class="filename">crack</code></span></a>
      by filtering them out, at
      source. <span class="application">cracklib2</span> is
      <span class="emphasis"><em>not</em></span> a replacement <a class="ulink" href="/cgi-bin/man/man2html/passwd+1" target="_top">passwd
      (1)</a> program. <span class="application">cracklib2</span> is a
      <span class="emphasis"><em>library</em></span>.</p><p><span class="package">cracklib-runtime</span> contains run-time support programs which use the shared library in <span class="package">libcrack2</span> including programs to build the password dictionary databases used by the functions in the shared library.</p></div></div></div><hr /></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="#id347057">Upstream <span class="package">cracklib2</span> utilities.</a></span></dt><dd><dl><dt><span class="section"><a href="#id347066"><span class="package">cracklib2</span> dictionary utilities.</a></span></dt><dt><span class="section"><a href="#id347140"><span class="package">cracklib2</span>'s test utility
      <span class="application">cracklib-check.</span></a></span></dt></dl></dd><dt><span class="section"><a href="#id385720">Debian <span class="package">cracklib2</span> utilities.</a></span></dt><dd><dl><dt><span class="section"><a href="#id385728">update-cracklib</a></span></dt></dl></dd><dt><span class="section"><a href="#id385777">Debian dictionaries</a></span></dt><dd><dl><dt><span class="section"><a href="#s-debian-dictionary-location">Database location for cracklib utilities.</a></span></dt><dt><span class="section"><a href="#id385832">Word lists for creating dictionary databases.</a></span></dt></dl></dd></dl></div><div class="section" title="Upstream cracklib2 utilities."><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id347057"></a>Upstream <span class="package">cracklib2</span> utilities.</h2></div></div></div><div class="section" title="cracklib2 dictionary utilities."><div class="titlepage"><div><div><h3 class="title"><a id="id347066"></a><span class="package">cracklib2</span> dictionary utilities.</h3></div></div></div><div class="section" title="cracklib-format"><div class="titlepage"><div><div><h4 class="title"><a id="s-cracklib-format"></a>cracklib-format</h4></div></div></div><p><span class="application">cracklib-format</span> takes a list
        of text files each containing a list of words, one per line,
        It lowercases all words, removes control charac‐ters, and
        sorts the lists. It outputs the cleaned up list to standard
        output.
        </p><p>For more information see the manual page of <a class="ulink" href="/cgi-bin/man/man2html?cracklib-format+8" target="_top"><span class="application">cracklib-format</span></a>.</p></div><div class="section" title="cracklib-packer"><div class="titlepage"><div><div><h4 class="title"><a id="s-cracklib-packer"></a>cracklib-packer</h4></div></div></div><p><span class="application">cracklib-packer</span> reads from
        standard input a list of sorted and cleaned words and creates
        a database from the result.</p><p>For more information see the manual page of <a class="ulink" href="/cgi-bin/man/man2html?cracklib-packer+8" target="_top"><span class="application">cracklib-packer</span></a>.</p></div><div class="section" title="cracklib-unpacker"><div class="titlepage"><div><div><h4 class="title"><a id="id355500"></a>cracklib-unpacker</h4></div></div></div><p><span class="application">cracklib-unpacker</span> reads from
        a database created by <a class="link" href="#s-cracklib-packer" title="cracklib-packer"><span class="application">cracklib-packer</span></a>
        and outputs on standard output the list of words that make up
        the database.</p><p>For more information see the manual page of <a class="ulink" href="/cgi-bin/man/man2html?cracklib-unpacker+8" target="_top"><span class="application">cracklib-unpacker</span></a>.</p></div><div class="section" title="create-cracklib-dict"><div class="titlepage"><div><div><h4 class="title"><a id="id347094"></a>create-cracklib-dict</h4></div></div></div><p><span class="application">create-cracklib-dict</span> takes
        one or more word list files as arguments and converts them
        into cracklib dictionaries for use by password checking
        programs. The results are placed in the default compiled-in
        dictionary location (<a class="xref" href="#s-debian-dictionary-location" title="Database location for cracklib utilities.">the section called “Database location for cracklib utilities.”</a>).</p><p>If you wish to store the dictionary in a different
        location, use the <a class="link" href="#s-cracklib-format" title="cracklib-format">cracklib-format</a> and <a class="link" href="#s-cracklib-packer" title="cracklib-packer"><span class="application">cracklib-packer</span></a>
        commands directly.</p></div></div><div class="section" title="cracklib2's test utility cracklib-check."><div class="titlepage"><div><div><h3 class="title"><a id="id347140"></a><span class="package">cracklib2</span>'s test utility
      <span class="application">cracklib-check.</span></h3></div></div></div><p><span class="application">cracklib-check</span> takes a list of
      passwords from stdin and checks them via libcrack2’s <a class="ulink" href="/cgi-bin/man/man2html/FascistCheck+3" target="_top">FascistCheck</a>
      sub routine.</p><p><span class="application">cracklib-check</span> prints each
      checked password and the corresponding result of <a class="ulink" href="/cgi-bin/man/man2html/FascistCheck+3" target="_top">FascistCheck</a>
      to stdout. The password and the result are separated by a
      colon.</p></div></div><div class="section" title="Debian cracklib2 utilities."><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id385720"></a>Debian <span class="package">cracklib2</span> utilities.</h2></div></div></div><div class="section" title="update-cracklib"><div class="titlepage"><div><div><h3 class="title"><a id="id385728"></a>update-cracklib</h3></div></div></div><p><span class="application">update-cracklib</span> uses <a class="link" href="#s-cracklib-format" title="cracklib-format"><span class="application">cracklib-format</span></a>
      and <a class="link" href="#s-cracklib-packer" title="cracklib-packer"><span class="application">cracklib-packer</span></a>
      to update the default cracklib dictionary it uses the word lists
      configured in
      <code class="filename">/etc/cracklib/cracklib.conf</code>.</p><p>For more information see the manual page of <a class="ulink" href="/cgi-bin/man/man2html?update-cracklib+8" target="_top"><span class="application">cracklib-format</span></a>.</p></div></div><div class="section" title="Debian dictionaries"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id385777"></a>Debian dictionaries</h2></div></div></div><p><span class="application">cracklib2</span> uses a word database
    that is in a binary format generated by the utilities <a class="link" href="#s-cracklib-format" title="cracklib-format"><span class="application">cracklib-format</span></a>
    and <a class="link" href="#s-cracklib-packer" title="cracklib-packer"><span class="application">cracklib-packer</span></a>. Three
    files are created with the suffixes of .hwm, .pwd, and .pwi. These
    files are not byte-order independent, in fact they are probably
    architecture specific, mostly due to speed constraints.</p><div class="section" title="Database location for cracklib utilities."><div class="titlepage"><div><div><h3 class="title"><a id="s-debian-dictionary-location"></a>Database location for cracklib utilities.</h3></div></div></div><p>All cracklib utilities can use a dictionary database
      location specified as a command line argument. The utilities use
      a default dictionary database if nothing else is specified. On a
      Debian system the database is located in the directory
      <code class="filename">/var/cache/cracklib/cracklib_dict</code> and is
      generated daily with the program
      <code class="filename">/etc/cron.daily/cracklib</code>.</p></div><div class="section" title="Word lists for creating dictionary databases."><div class="titlepage"><div><div><h3 class="title"><a id="id385832"></a>Word lists for creating dictionary databases.</h3></div></div></div><p><span class="application">cracklib2</span> is only as good as the word dictionary database you create. Basically, you want to include any word that a malicious user could guess. It could include:
      </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>Names (including nicknames and user ids) of all users.</p></li><li class="listitem"><p>Names of pets, relatives, cars, ... of all users.</p></li><li class="listitem"><p>Computer, network, printer, ... names.</p></li><li class="listitem"><p>Insurance numbers, employee numbers, ... of users.  *
          ...</p></li></ul></div><p>
      </p><p>Debian provides a number of word lists that can be used as
      sources for creating the cracklib2 dictionary database. The
      package wenglish provides a standard ASCII word list that can be
      directly used. The package ispell also supplies a large word
      list but it is in binary format. I haven't figured out how to
      decode this binary format so that the resulting word list can be
      used by cracklib2.</p></div></div></div></body></html>

/var/../usr/share/doc/perl-base/../cracklib-runtime/cracklib-runtime.html