pam_passwdqc installation fails on CentOS 7.1

[chris-rock]

* No candidate version available for pam_passwdqc
           ================================================================================
           Error executing action `install` on resource 'yum_package[pam-passwdqc]'
           ================================================================================

           Chef::Exceptions::Package
           -------------------------
           No candidate version available for pam_passwdqc

           Resource Declaration:
           ---------------------
           # In /tmp/kitchen/cookbooks/os-hardening/recipes/pam.rb

           111:     package 'pam-passwdqc' do
           112:       package_name node['packages']['pam_passwdqc']
           113:     end
           114: 

           Compiled Resource:
           ------------------
           # Declared in /tmp/kitchen/cookbooks/os-hardening/recipes/pam.rb:111:in `from_file'

           yum_package("pam-passwdqc") do
             action [:install]
             retries 0
             retry_delay 2
             default_guard_interpreter :default
             package_name "pam_passwdqc"
             flush_cache {:before=>false, :after=>false}
             declared_type :package
             cookbook_name :"os-hardening"
             recipe_name "pam"
           end

[boldandbusted]

Has this been applied? :) We're getting bit by this, sadly.

[virtadpt]

We just got caught by it here, too. It seems like a pretty straightforward fix, just make a conditional for RHEL/CentOS 7 that replaces it with the pam_pwquality package.

[chris-rock]

@virtadpt & @boldandbusted please go ahead and open a PR to fix this

[xuejiezhang]

@chris-rock

Hi Chris,

Do you know why pam-passwdqc gets replaced by pam-pwquality in Centos 7? The official document only says pam-passwdqc is not fully compatible and no detailed info can be found.

Thanks,
Jeff