Hello,
When the user is updating his account password through the System Settings (gui), under the “Users” section, by clicking on “Change Password“, this does not trigger any PAM modules, especially the PAM common-password is not triggered.
Without knowing if this was feasible, I tried the following:
- Create a specific file /etc/pam.d/polkit-1 with the same configuration as both pam chpasswd or passwd (@include common-password);
- Verify that polkit-kde-authentication-agent-1 is running;
- Look at some polkit manual to find any way to configure a hook to pam.
I spent few hours looking in forums for a solution, nothing concrete.
Just to confirm that any direct execution of passwd through a console triggers well the related PAM modules on the system.
Considering that PAM is a well known central approach for protecting the system, I would be surprised that KDE Plasma is not relying on it for password change, password quality, etc.
If feasible, do you know what should be configured to trigger PAM common-password when this “Change Password“ button is clicked?
Thank you for your feedback.
My setup:
Kernel: 6.12.41+deb13-amd64 arch: x86_64 bits: 64
Distro: Debian GNU/Linux 13 (trixie) Desktop: KDE Plasma