Updated fds.in (added password policy settings to the setup scripts).
authorZoltán Felleg <zoltan.felleg@userrendszerhaz.hu>
Sat, 12 Mar 2022 15:46:48 +0000 (16:46 +0100)
committerZoltán Felleg <zoltan.felleg@userrendszerhaz.hu>
Sat, 12 Mar 2022 15:46:48 +0000 (16:46 +0100)
sources/fds.in/c3d/firstboot/scripts/10_setupds.sh
sources/fds.in/c3d/postinstall/install-data/usr/local/bin/restorefds.sh

index 22b77b68f10c55e69c932bb94ffed17b1ba37129..7dfa76cbb60be2288b03fb996fe0bdc38d2d5995 100755 (executable)
@@ -19,3 +19,15 @@ fi
 
 dscreate from-file $DATA_PATH/user.inf
 dsconf user plugin memberof enable
+dsconf qqcs pwpolicy set \
+    --pwdmustchange on \
+    --pwdlockout on \
+    --pwdchecksyntax on \
+    --pwdminlen 10 \
+    --pwdmindigits 1 \
+    --pwdminuppers 1 \
+    --pwdminlowers 1 \
+    --pwdminspecials 1 \
+    --pwdmaxrepeats 2 \
+    --pwdmincatagories 4 \
+    --pwddictcheck on
index 4da4bfc9771b741c526c96d1aab9bab4c449a8bf..50dbee34fdda1b7e66eb746c2b6f0ec19306e052 100755 (executable)
@@ -13,6 +13,7 @@ TMP_PATH=$(dirname $RESTORE_BASE)
 if [ ! -f $POSTINSTALL_SCP_PATH/fds.tar ]
 then
     echo "No restore file found, exiting" >&2
+    rm --force --recursive $RESTORE_BASE
     exit 1
 fi