pwquality crossplatformed

This is the pwquality crossplatformed role written by CxS. It defines the system defaults for password generation of local users. The defaults of the role apply the ETH password policy as close as posible.

Requirements

None.

Role Variables

Name Type Default value Purpose Comment Role
pwquality_conf Boolean false true/false switch to en/disable role
pwquality_minclass Integer 3 require 3 out of 4 character categories in passwords
pwquality_minlen Integer 12 require minimum 12 characters in passwords
pwquality_gecoscheck Integer 1 deny strings in password to match gecos fields in passwd

Dependencies

None.

Example Playbook

Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:

- hosts: all
  roles:
    - { role: pwquality, tags: ["crossplatformed", "security", "sec", "pwquality"] }

License

BSD

Author Information

Maintainer: Raffael Nussbaumer

Support-Contact: servicedesk-linux@id.ethz.ch