From d0c1d87c802a3206c84230269624712fe40a6870 Mon Sep 17 00:00:00 2001 From: Alan Moore Date: Sun, 1 Dec 2024 15:16:39 +0000 Subject: [PATCH] Update tests of accounts_password_pam_retry --- .../accounts_password_pam_retry/tests/common.sh | 3 +++ .../tests/correct_value.pass.sh | 14 ++++++++++++++ .../tests/wrong_value.fail.sh | 15 +++++++++++++++ 3 files changed, 32 insertions(+) diff --git a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_retry/tests/common.sh b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_retry/tests/common.sh index e6e6619b9a7..517cb8c3ed5 100644 --- a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_retry/tests/common.sh +++ b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_retry/tests/common.sh @@ -15,6 +15,9 @@ for file in ${configuration_files[@]}; do "/etc/authselect/custom/testingProfile/$file" done authselect select --force custom/testingProfile +{{% elif 'ubuntu' in product %}} +rm -f /usr/share/pam-configs/*pwquality +DEBIAN_FRONTEND=noninteractive pam-auth-update {{% else %}} for file in ${configuration_files[@]}; do sed -i --follow-symlinks "/pam_pwquality\.so/d" "/etc/pam.d/$file" diff --git a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_retry/tests/correct_value.pass.sh b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_retry/tests/correct_value.pass.sh index 51e4ad0062d..09fa74127c3 100644 --- a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_retry/tests/correct_value.pass.sh +++ b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_retry/tests/correct_value.pass.sh @@ -4,6 +4,19 @@ source common.sh +{{% if 'ubuntu' in product %}} +cat << EOF > /usr/share/pam-configs/pwquality +Name: Pwquality password strength checking +Default: yes +Priority: 1024 +Conflicts: cracklib +Password-Type: Primary +Password: + requisite pam_pwquality.so retry=3 +EOF + +DEBIAN_FRONTEND=noninteractive pam-auth-update +{{% else %}} for file in ${configuration_files[@]}; do {{{ bash_ensure_pam_module_option('/etc/pam.d/$file', 'password', @@ -13,3 +26,4 @@ for file in ${configuration_files[@]}; do '3', '^\s*account') }}} done +{{% endif %}} diff --git a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_retry/tests/wrong_value.fail.sh b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_retry/tests/wrong_value.fail.sh index 5d2d908e8ac..a31d2849880 100644 --- a/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_retry/tests/wrong_value.fail.sh +++ b/linux_os/guide/system/accounts/accounts-pam/password_quality/password_quality_pwquality/accounts_password_pam_retry/tests/wrong_value.fail.sh @@ -4,6 +4,19 @@ source common.sh +{{% if 'ubuntu' in product %}} +cat << EOF > /usr/share/pam-configs/pwquality +Name: Pwquality password strength checking +Default: yes +Priority: 1024 +Conflicts: cracklib +Password-Type: Primary +Password: + requisite pam_pwquality.so retry=7 +EOF + +DEBIAN_FRONTEND=noninteractive pam-auth-update +{{% else %}} for file in ${configuration_files[@]}; do {{{ bash_ensure_pam_module_option('/etc/pam.d/$file', 'password', @@ -13,3 +26,5 @@ for file in ${configuration_files[@]}; do '7', '^\s*account') }}} done +{{% endif %}} +