Index: lib/libpam/modules/pam_passwdqc/pam_passwdqc.8 =================================================================== --- lib/libpam/modules/pam_passwdqc/pam_passwdqc.8 +++ lib/libpam/modules/pam_passwdqc/pam_passwdqc.8 @@ -190,6 +190,10 @@ The .Cm users setting will enforce strong passwords for non-root users only. +Under certain circumstances, when root changes an ordinary user's +password, only the option +.Cm everyone +will apply. .It Cm non-unix Normally, .Nm Index: lib/libpam/pam.d/login =================================================================== --- lib/libpam/pam.d/login +++ lib/libpam/pam.d/login @@ -17,4 +17,5 @@ session include system # password +#password requisite pam_passwdqc.so enforce=everyone password include system Index: lib/libpam/pam.d/sshd =================================================================== --- lib/libpam/pam.d/sshd +++ lib/libpam/pam.d/sshd @@ -22,5 +22,6 @@ session required pam_permit.so # password +#password requisite pam_passwdqc.so enforce=everyone #password sufficient pam_krb5.so no_warn try_first_pass password required pam_unix.so no_warn try_first_pass