Files
a13labs.infra/ansible/roles/cis/templates/etc/pam.d/common-password.j2
T

12 lines
469 B
Django/Jinja
Raw Normal View History

2024-09-24 15:19:51 +02:00
# {{ ansible_managed }}
password requisite pam_pwquality.so retry=3
{% if ansible_os_family == 'Debian' %}
password required pam_pwhistory.so use_authtok remember=5
password [success=1 default=ignore] pam_unix.so obscure use_authtok try_first_pass sha512 rounds=65536
{% else %}
password [success=1 default=ignore] pam_unix.so obscure use_authtok try_first_pass sha512 rounds=65536 remember=5
{% endif %}
password requisite pam_deny.so
password required pam_permit.so