Remove references to cracklib when talking about pam configuration, and add

references to libpwquality.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@23347 af4574ff-66df-0310-9fd7-8a98e5e911e0

general.ent

@@ -1,12 +1,12 @@
 <!-- $LastChangedBy$ $Date$ -->
 
-<!ENTITY day          "29">                   <!-- Always 2 digits -->
+<!ENTITY day          "30">                   <!-- Always 2 digits -->
 <!ENTITY month        "06">                   <!-- Always 2 digits -->
 <!ENTITY year         "2020">
 <!ENTITY copyrightdate "2001-&year;">
 <!ENTITY copyholder   "The BLFS Development Team">
 <!ENTITY version      "&year;-&month;-&day;">
-<!ENTITY releasedate  "June 29th, &year;">
+<!ENTITY releasedate  "June 30th, &year;">
 <!ENTITY pubdate      "&year;-&month;-&day;"> <!-- metadata req. by TLDP -->
 <!ENTITY blfs-version "svn">                  <!-- svn|[release #] -->
 <!ENTITY lfs-version  "development">          <!-- x.y|development -->

introduction/welcome/changelog.xml

@@ -41,6 +41,17 @@
       </itemizedlist>
     </listitem>
     -->
+    <listitem>
+      <para>June 30th, 2020</para>
+      <itemizedlist>
+        <listitem>
+          <para>[pierre] - Add some explanation about cracklib and pwquality
+          to the PAM page and update shadow <quote>important</quote> note
+          about rebuilding after PAM.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
     <listitem>
       <para>June 29th, 2020</para>
       <itemizedlist>

postlfs/security/linux-pam.xml

@@ -105,7 +105,6 @@
     <para role="optional">
       <xref linkend="db"/>,
       <xref linkend="libnsl"/>,
-      <xref linkend="libpwquality"/>,
       <xref linkend="libtirpc"/>, 
       <ulink url="https://github.com/linux-audit/audit-userspace">libaudit</ulink>, and
       <ulink url="http://www.prelude-siem.org">Prelude</ulink>
@@ -128,6 +127,12 @@
         need</phrase><phrase revision="sysv">needs</phrase> to be reinstalled
         after installing and configuring <application>Linux PAM</application>.
       </para>
+
+      <para role="recommended">
+         With Linux-PAM-1.4.0 and higher, the pam_cracklib module is not
+         installed by default. To enforce strong passwords, it is recommended
+         to use <xref role="runtime" linkend="libpwquality"/>.
+      </para>
     </note>
 
     <para condition="html" role="usernotes">User Notes:

postlfs/security/shadow.xml

@@ -82,7 +82,7 @@
     <bridgehead renderas="sect4">Required</bridgehead>
     <para role="required">
       <xref linkend="linux-pam"/> or
-      <xref linkend="cracklib"/>
+      <xref role="nodep" linkend="cracklib"/>
     </para>
 
     <para condition="html" role="usernotes">
@@ -96,8 +96,7 @@
     <important>
       <para>
         The installation commands shown below are for installations where
-        <application>Linux-PAM</application> has been installed (with or
+        <application>Linux-PAM</application> has been installed and
-        without a <application>CrackLib</application> installation) and
         <application>Shadow</application> is being reinstalled to support the
         <application>Linux-PAM</application> installation.
       </para>
@@ -267,8 +266,8 @@ make</userinput></screen>
         on the <xref linkend="linux-pam"/> page for further configuration
         information. For information specific to integrating
         <application>Shadow</application>, <application>Linux-PAM</application>
-        and <application>CrackLib</application>, you can visit the following
+        and <application>libpwquality</application>, you can visit the
-        link:
+        following link:
       </para>
 
       <itemizedlist spacing="compact">