password length limit ?

[fifthelement80]

Hi;
We are running WHM 11.30.5 (build 2) on CENTOS 5.7 x86_64
We have received the following support ticket from our customer :

When I trying to change CPanel password - my new password is cutted down to 8 characters, without any notification. Log:
"Change Password
Your password has been changed!
The following services were updated (if any):
system
ftp
mail
mySQL
Changing password for user farmeram.
Changing password for farmeram
(current) UNIX password:
New UNIX password:
Retype new UNIX password:
passwd: all authentication tokens updated successfully."

There is also issue (access denied) with automatic login (through CPanel) to phpMyAdmin if I change password for one > 8 chars long.

Additionally I can login to CPanel & ftp (l:farmeram) with my_8_char_pass*, where my_8_char_pass is my current password, and * is any other string. It doesn't happen on any other ftp accounts.

What can be the issue ?

Regards

 

[minosjl]

hi,

Please check out this section in your server WHM

Main >> Security Center >> Password Strength Configuration

 

[cPanelTristan]

This has been discussed a couple of times on the forum already:

http://forums.cpanel.net/f185/cpanel-login-password-length-158993.html#post701362
http://forums.cpanel.net/f185/passwords-accepting-only-8-characters-162445.html#post680178 (actually, the CentOS / RHEL 5 should be md5 rather than what is noted in that post, further down the post this is discussed)

We have an internal case about adding md5 to the system's pam authentication when it is missing. This case is 40679