C 程序调用 pam_passwdqc.so 并报告密码强度，通过/失败

Question

是否有可能(以及我在哪里可以找到接口(interface)文档)编写一个简单的 C 程序来使用 pam_passwdqc.so 来确定潜在密码是否足够强大以通过 passwd 的检查？

Answer 1

我想你真正想要的是libpasswdqc ，这是 PAM 模块的独立版本。源/下载链接位于页面中间(请注意，如果您只需要检查功能，您可能只需要库)。

文件 INTERNALS 将您指向标题，该标题简短且不言自明。 pwqcheck.c 文件说明了您想要完成的任务。

至少在我的 Ubuntu 工作站上，我找不到没有同时安装所有 PAM 位的软件包。如果依赖项对您来说有问题，独立库足够小，几乎可以放入任何树中。

然后，您可以尝试链接到 DSO，界面可能相同。我的操作系统打包它的方式很难说。该库使用了我见过的最宽松的 BSD 许可证版本，因此将其放在适当的位置不是问题:

Redistribution and use in source and binary forms, with or without modification, are permitted.

THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.