AIX

Thanks all for these replies. I have checked it and it works. But only thing is every time we need to enter the User name in this dict file. There are so many users in system and now applying this to working systems will be hectic. Is there any work around.

Regarding post 6, I suppose if users are LDAP authenticated, then it is out of the unix system's control, whatever flavour they are. You would need to ensure that whatever LDAP server you use, that the rules can be applied there too.



Robin

Exactly. You can use a local pasword verification mechanism too (in addition, respectively), but usually the ultimate verification is on the LDAP server. In most cases this means some PAM-modules one of which should deny passwords which are equal to user names.

It is also possible to get the user information via LDAP and verify the passwords via Kerberos (actually this is what "Active Directory" does). In this case you need to configure the Kerberos server with the respective rule.

I hope this helps.

bakunin

Why not just add $USER to the dictionary file.

I have added $USER to dict file but its not working.